Threat Intelligence & Incident Response Analyst

dssmith; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

DS Smith is seeking a skilled Threat Intelligence Analyst to join its Information Security team. You will monitor threats, analyse intelligence, and support incident response to protect operations, data and infrastructure.

Working with SOC, Incident Response, and IT teams, you will leverage Sentinel/Defender and DarkIQ to generate actionable insights and drive proactive security measures across the manufacturing and logistics landscape.

Qualifications

• Experience in threat intelligence, incident response, or security operations.
• Hands-on experience managing security incidents through the full incident response lifecycle.
• Strong understanding of threats, actor behaviour, attack methods and intel frameworks (MITRE ATT&CK, Diamond Model, Cyber Kill Chain).
• Advanced knowledge of Microsoft Sentinel, Microsoft Defender, and KQL for threat hunting and investigation.
• Experience with threat intel platforms and dark web monitoring (e.g. DarkIQ).

Responsibilities

• Monitor the global threat landscape for emerging cyber threats, vulnerabilities and actor activity relevant to DS Smith and the manufacturing sector.
• Analyse intelligence from OSINT, commercial feeds, industry sharing platforms and dark web monitoring tools.
• Correlate external intelligence with internal security events using Microsoft Sentinel and Defender.
• Develop and maintain advanced KQL queries to support threat hunting, detection engineering and incident investigation.
• Produce actionable threat reports, actor profiles and IoCs for executive briefings.
• Support and participate in incident response activities from triage through containment and recovery.
• Collaborate with SOC, security architects and tech stakeholders to strengthen detection and response capabilities.
• Contribute to threat models, risk assessments, playbooks and operation processes.

Skills

Threat intelligence

Incident response

Security operations

Microsoft Sentinel

Microsoft Defender

KQL

Dark web monitoring

Scripting

PowerShell

Python

Tools

DarkIQ

Job description

DS Smith is seeking a skilled Threat Intelligence Analyst to join its Information Security team. You will monitor threats, analyse intelligence, and support incident response to protect operations, data and infrastructure.

Working with SOC, Incident Response, and IT teams, you will leverage Sentinel/Defender and DarkIQ to generate actionable insights and drive proactive security measures across the manufacturing and logistics landscape.