Senior Cyber Threat Analyst - AI-Driven Incident Response

Prudential Distribution Ltd; Scotland; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Pension up to 18%

Share Save plan

38 days annual leave

Flexible time off

Family policy

Private healthcare

Life assurance

Job summary

Prudential Distribution Ltd is seeking an Advanced Cyber Threat Analyst to identify, investigate and respond to cyber threats while strengthening defensive capabilities across cloud, end‑point, identity, email and network areas.

You will collaborate with Threat Intelligence and Security Operations teams to improve resilience, reduce risk and translate findings into lasting security improvements. Strong incident investigation, threat hunting and detection engineering skills are essential.

Qualifications

• Experience in a Security Operations environment.
• Proficient in incident investigation and response.
• Experience analysing activity across security tech (endpoint, cloud, identity, email, network).
• Structured, intelligence-led threat hunting experience.
• Ability to develop or validate detections and analytic rules.
• Knowledge of threat intelligence and adversary behaviours.
• Experience with security data to assess risk and inform actions.
• Familiarity with Microsoft Azure security features (Entra, Defender).
• Sound judgement with incomplete or time-sensitive data.
• Strong governance, audit and documentation discipline.
• Experience with AI-assisted security operations and human oversight.

Responsibilities

• Investigate complex security incidents across cloud, endpoint, identity, email and network.
• Assess business impact and recommend containment and recovery actions.
• Maintain investigative records and decision rationales.
• Conduct intelligence-led threat hunts based on adversary campaigns.
• Identify attack paths and improve detection coverage and controls.
• Translate findings into improved detections and response processes.
• Develop, tune and validate analytical rules for evolving threats.
• Collaborate with Security Operations Engineering on telemetry and tooling.
• Use AI-assisted analysis to support triage, investigation and reporting.
• Escalate as a technical expert for complex alerts and incidents.
• Communicate threats and decisions clearly to technical and non-technical stakeholders.
• Coordinate with internal teams and external security providers for investigation and response.
• Deliver practical improvements to SOC processes and capabilities.
• Maintain audit evidence and documentation for internal/external reviews.

Skills

Security operations experience

Incident investigation

Threat hunting

Detections development

AI-assisted analysis

Analytical rule tuning

Telemetry and data quality

Cross-functional communication

Threat intelligence understanding

Azure security environments

Microsoft Defender ecosystem

Endpoint Detection and Response

Education

CompTIA Security+, CySA+, ISC2 SSCP or SANS certifications

Microsoft SC-200 or AZ-500

Tools

Microsoft Sentinel

Azure Entra

Defender for Endpoint

Defender for Cloud

Job description

Prudential Distribution Ltd is seeking an Advanced Cyber Threat Analyst to identify, investigate and respond to cyber threats while strengthening defensive capabilities across cloud, end‑point, identity, email and network areas.

You will collaborate with Threat Intelligence and Security Operations teams to improve resilience, reduce risk and translate findings into lasting security improvements. Strong incident investigation, threat hunting and detection engineering skills are essential.