Senior Cyber Threat Intelligence Analyst

Cyber UK; Aberdeen City; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

40 days annual leave

16% employer pension contribution

Discretionary performance-based bonus

Private healthcare

Gym discounts

Season ticket loans

Job summary

Cyber UK is looking for a Senior Cyber Threat Intelligence Analyst to lead threat-hunting operations and enhance security measures against cyber threats. This position involves direct reporting to the Cyber Threat Intelligence Lead and collaboration with security functions, utilizing skills in threat detection and incident response. The ideal candidate will have experience in SOC operations, proficiency with security tools, and hold relevant cybersecurity certifications. Benefits include 40 days of annual leave and a 16% employer pension contribution.

Qualifications

• Demonstrable experience in threat hunting, incident response, or SOC operations.
• Understanding of Kusto Query Language (KQL) for security log analysis.
• Experience with security tools for threat detection and response.

Responsibilities

• Lead proactive threat-hunting operations to identify anomalous activity.
• Support and improve the Cyber Threat intelligence function.
• Produce high-quality reports for technical and senior stakeholders.

Skills

Threat hunting

Incident response

Kusto Query Language (KQL)

Security tools (SIEM, IDS/IPS)

Cybersecurity certifications (CEH, OSCP)

Tools

SIEM

EDR/XDR

AV

Job description

Job Description

At Aberdeen, our ambition is to be the UK’s leading Wealth & Investments group. Strengthening talent and culture is one of our strategic priorities. We strive to make Aberdeen a great place to work so that we can attract and retain the industry’s best talent. Our people put our stakeholders at the heart of everything they do by helping us to make a positive difference to the lives of our clients, customers, colleagues, shareholders, and society. We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand. We are committed to providing excellent client service, supported by leading technology and talent. Aberdeen comprises three businesses, interactive investor (ii), Investments, and Adviser, each of which focuses on meeting and adapting to our clients’ evolving needs.

• interactive investor, the UK’s second largest direct-to-consumer investment platform, enables individuals in the UK to plan, save, and invest in the way that works for them.
• Our Adviser business provides financial planning solutions and technology for UK financial advisers, enabling them to create value for their customers.
• Our Investments business is a specialist asset manager that focuses on areas where we have both strength and scale to capitalise on the key themes shaping the market, through either public markets or alternative asset classes.

About the Department

At Aberdeen the security and protection of our customer assets and data is of paramount importance, especially within the changing digital world. Within our Security, Resilience & Protection department, an exciting and challenging opportunity has arisen for an experienced Senior Cyber Threat Intelligence Analyst. The Senior Cyber Threat intelligence analyst is an exciting and integral part of our Cyber Threat intelligence Team that supports the wider Cyber security Operations team in delivering improvements to the organisation’s security posture and keeping our business safe from Cyber-attacks.

About the Role

The successful analyst will be responsible for leading threat‑hunting activities, as well as the collection, analysis, and dissemination of actionable intelligence to proactively identify, assess, and mitigate threats to the organisation. The role holder will report directly to the Cyber Threat intelligence Lead, who is based in Edinburgh, and work with other security functions including specialist 3rd party security suppliers, global IT and business teams.

Key Responsibilities

• Lead proactive, intelligence‑driven threat‑hunting operations to identify anomalous activity and misconfigurations that may have bypassed controls.
• Supporting and improving the Cyber Threat intelligence function based on priorities and intelligence requirements/needs.
• Produce high‑quality reports and briefings for technical and senior stakeholders.
• Gather TI requirements, facilitate intelligence evaluation and ensuring threat information and intelligence is described in a clear, concise manner.
• Develop, test, and refine threat hypotheses based on adversary tactics, techniques, and procedures (TTPs), using Threat Intelligence frameworks.

About the Candidate

The ideal candidate will possess the following

• Demonstrable experience in threat hunting, incident response, or SOC operations.
• Understanding of Kusto Query Language (KQL) for security log analysis, threat detection, etc.
• Experience with security tools, such as SIEM, IDS/IPS, EDR/XDR, AV, web and email filtering, web application firewalls and DDoS protections, and host‑based protections.
• Industry recognised certifications such as CEH, OSCP, CISSP, CTIA, CPTIA, CRTIA, GCTI etc, are highly desirable.
• Experience of working within the financial services sector is advantageous.

Our benefits

There’s more to working life than coming home with a good salary. We have an environment where you can learn, get involved and be supported. When you join us, your reward will be one of the best around. This includes 40 days’ annual leave, a 16% employer pension contribution, a discretionary performance‑based bonus (where applicable), private healthcare and a range of flexible benefits – including gym discounts, season ticket loans and access to an employee discount portal.

Our business

Enabling our clients to be better investors drives everything we do. Our business is structured around three distinct areas – our vectors of growth – focused on our clients’ changing needs. You can find out more about what we do.

Equal Employment Opportunity

We are proud to be a Disability Confident Committed employer. If you have a disability and would like to apply to one of our UK roles under the Disability Confident Scheme, please notify us by completing the relevant section in our candidate questionnaire. One of our team will reach out to support you through your application process.

We’re committed to providing an inclusive workplace where all forms of difference are valued and which is free from any form of unfair or unlawful treatment. We define diversity in its broadest sense – this includes but is not limited to our diversity of educational and professional backgrounds, experience, cognitive and neurodiversity, age, gender, gender identity, sexual orientation, disability, religion or belief and ethnicity and geographical provenance. We support a culture that values meritocracy, fairness and transparency and welcomes enquiries from everyone.

If you need assistance or an adjustment due to a disability in order to apply, or a reasonable adjustment to your interview arrangements – for example, because you are neurodivergent, or have a physical, sensory, cognitive, mental, visible or invisible disability – please let us know as part of your application and we will assist.