Senior Threat Intelligence & Incident Response Analyst

S&P Global Inc.; City of Westminster; Ibrido; GBP 80.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health care

Retirement plan

Student loan aid

Education resources

Descrizione del lavoro

S&P Global, based in the United Kingdom, is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze and respond to security incidents, enrich investigations with intelligence, and drive proactive defenses while supporting global needs.

You will collaborate with Security Operations and Threat Intelligence, develop incident playbooks, tune detections, and produce intel outputs for technical and non-technical audiences.

Competenze

• 3+ years in information security focusing on incident response, threat hunting or threat intelligence.
• Hands-on with SIEM (prefer Splunk) for investigations, alerting and reporting.
• Ability to map activity to MITRE ATT&CK and identify likely TTPs.
• Familiarity with threat intelligence workflows and standards (FS-ISAC, TLP).
• Strong written and verbal communication for technical and non-technical audiences.

Mansioni

• Coordinate and triage response to cybersecurity events and conduct forensic analysis across endpoints, networks, cloud and SaaS.
• Integrate threat intelligence into investigations and enrich IOCs with actionable context.
• Develop and operationalize incident response playbooks, PIRs, collection plans and feedback loops.
• Work with the SOC to investigate incidents, deliver containment, remediation and root cause analysis.
• Create and tune detections (SIEM/SOAR/EDR) using intelligence signals and YARA/Sigma where applicable.
• Produce intel outputs such as flash alerts, threat overviews and executive summaries for stakeholders.
• Contribute to vulnerability/threat surfacing and advise on risk-based prioritization.
• Deliver actionable incident and hunting metrics to management and support post-incident learning.

Conoscenze

Incident response

Threat hunting

Threat intelligence

SOC collaboration

ATT&CK mapping

Detections tuning

Communication skills

Strumenti

Splunk

EDR tools

SOAR

MISP

OpenCTI

Recorded Future

Descrizione del lavoro

S&P Global, based in the United Kingdom, is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze and respond to security incidents, enrich investigations with intelligence, and drive proactive defenses while supporting global needs.

You will collaborate with Security Operations and Threat Intelligence, develop incident playbooks, tune detections, and produce intel outputs for technical and non-technical audiences.