Senior Threat Intelligence Analyst

JOHN LEWIS; Bracknell; Hybrid; GBP 52,000 - 77,000; Full time

Job summary

John Lewis Partnership is seeking a Senior Information Security Analyst to identify and report threats, maintain threat intelligence platforms, and run threat hunts across our hybrid-structured environment. You will translate intelligence into actionable insights for the business, coordinating with vulnerability management to prioritise remediation and future hunting initiatives.

The role combines working from Bracknell Head Office with home-based days and occasional travel, featuring a salary

Qualifications

• Experience working within cyber security.
• Experience writing threat intelligence reports for diverse audiences.
• Experience with threat management, including feeds and business context.
• Experience with threat hunting: hypothesis design, log analysis, documentation, reporting.
• Excellent communication and ability to influence stakeholders.
• Awareness of cyber security trends and threat landscape.

Responsibilities

• Identify, understand and report on threats to the Partnership using tools, third-party specialists and strategic intelligence feeds.
• Maintain platforms and processes to keep up-to-date view of threats and IOC against the Partnership; understand UK Retail threat landscape.
• Design and run Threat Hunts across infrastructure and systems, using gathered intelligence and Partnership tooling; report findings at technical and management levels.
• Collaborate with stakeholders to provide up-to-date intelligence in business context for customers, Partners and suppliers.
• Work with Vulnerability Management to integrate threat intel into remediation and guide future hunting.

Skills

Cyber security

Threat intelligence reports

Threat management

Threat hunting

Stakeholder communication

Cyber threat landscape awareness

Education

Information Security degree / related certifications

Tools

Threat Intelligence Platform (TIP)

Vulnerability management tooling

Job description

About the role

The John Lewis Partnership's Information Security strategy is bold and ambitious. We provide a collection of security services, delivered through people, processes and technology. Working collaboratively, these services ensure that customers can shop with us efficiently, safely and securely, every single day. A key component of this is the Threat Defence team. A group of Partners who take active responsibility for understanding threats posed to the Partnership, the vulnerabilities that we're carrying, the testing of the security defences we put in place to protect us, and the engineering of key security systems. If you're passionate about cyber security, if you thrive and perform in fast-paced, high-demand scenarios, and if you want to make a real difference at the UK's largest co-owned retailer, then this role is for you.

At a glance

• Contract Type - This position is a permanent contract
• Working Pattern - This is a hybrid working role, therefore your time will primarily be split between working from home and the Bracknell Head Office. However, there will also be an expectation to visit other locations as the need arises.
• Our team currently works from the office around once a week to connect and on a more ad-hoc basis to attend key meetings, but again the frequency is dependent on the business needs.
• Salary range - The salary range for this role is set at £52,000 - £77,000 (depending upon experience).

Key Responsibilities

• Your focus in this role will be to carry out activities to identify, understand and report on threats to the Partnership using a variety of tools, 3rd party specialists and strategic intelligence feeds.
• You’ll work with those tools and feeds, while maintaining platforms and processes, to keep a relevant and up-to‑date view of threats and indicators of compromise against the Partnership. You will also maintain a view of the threat landscape facing the UK and the Retail industry.
• You will design and run Threat Hunts across our infrastructure and systems, utilising intelligence gathered along with Partnership tooling. You will then generate reporting on your findings at appropriate levels (technical analysis, management summary, etc).
• You’ll work within the team and with a variety of stakeholders to support the provision of up‑to‑the‑minute intelligence to our Partnership, in context with the business, our customers, Partners and suppliers.
• Working closely with our Vulnerability Management team, you will integrate threat intelligence into remediation efforts and leverage scan data to guide threat hunting initiatives and future intelligence reporting.

Internally the role is known as Senior Information Security Analyst.

Essential skills you'll need

• Experience working within cyber security.
• Experience writing threat intelligence reports, at a level appropriate for a variety of audiences, to enable greater understanding and decision making informed by cyber threat intelligence.
• Experience with threat management, perhaps as part of a wider cyber role, including the management of feeds, and the translation of threat into business context and language.
• Experience with threat hunting, including hypothesis design, log analysis, documentation, and reporting.
• Great communication skills and the ability to engage and influence stakeholders.
• An awareness of cyber security trends and the current cyber threat landscape.

Desirable skills and experience

• Experience working with vulnerability management tooling.
• Experience in the use of security frameworks, such as Mitre ATT&CK and the Cyber Kill Chain.
• Formal accreditation in Information Security such as a related degree, ISC2 CISSP, Certified Ethical Hacker, CompTIA Security+, CompTIA Pentest+ or similar.
• Experience of utilising and/or managing a Threat Intelligence Platform (TIP).

Additional Information:

• Interviews potentially commence from w/c 12th October 2026.

The partnership

We're the largest employee owned business in the UK and home of our cherished brands, John Lewis and Waitrose. We're not just employees, we're Partners, driven by our purpose to build a happier world. As we look to our future, there's never been a more exciting time to join us.

We're ruthlessly focused on being brilliant at retail. We continue to innovate, adapt and diversify. Never Knowingly Undersold on price, quality and service in John Lewis and passionately serving food‑lovers in Waitrose.

As Partners we all share the responsibility of ownership and in its rewards. We use our voices to contribute to our success, working together through the good and challenging times, holding true to our behaviours and treating everyone with kindness and respect.

We all own making the Partnership somewhere we belong. Embracing our differences and creating an environment where we're free to be ourselves and can THRIVE. Growing ourselves individually, and as a collective.

As Partners, we make all the difference. And, we all own it.

Important points to note:

It's important to note that some of our roles are subject to pre-employment vetting (which may include DBS checks for successful candidates). If required, you'll be informed and provided with information about vetting during the recruitment process and we encourage you to complete any vetting documents quickly to avoid delays. Any DBS checks required will be carried out by a third‑party registered body and financial probity checks may also be required for some of our roles.

We occasionally close vacancies early in the event we receive a high volume of applications, and therefore, we recommend you apply early. If you require a reasonable adjustment due to a disability which means you may need longer to complete your application please contact us as soon as possible.

We want all of our Partners to have a good work‑life balance and we support flexible working. This might mean flexible or compressed hours, job sharing or shorter hour contracts, where possible. Please discuss this further with the hiring manager during your interview.