Cyber Threat Intelligence & Incident Response Analyst

About the role

We are seeking a Cyber Threat Intelligence & Incident Response Analyst to research emerging threats, assess their impact, and turn intelligence into actionable security measures. The analyst will also investigate incidents, conduct digital forensics, hunt for threats, and support purple‑team activities in a complex multi‑cloud environment for a large semi‑government client.

Key responsibilities

• Research and monitor emerging cyber threats, threat actors, vulnerabilities, and attack techniques relevant to the organisation.
• Analyse threat intelligence and provide actionable insights for security decision‑making.
• Conduct proactive threat hunting across on‑premises and cloud environments.
• Support investigation and response to major cybersecurity incidents.
• Perform digital forensic investigations to determine attack methods, scope, impact, and root causes.
• Map attacker behaviour to the MITRE ATT&CK framework.
• Assist red‑team, purple‑team, and offensive security assessments.
• Analyse security, system, application, and endpoint logs for indicators of compromise.
• Develop and use scripts, tools, and analytical techniques for hunting, investigations, and forensics.
• Work with Threat Intelligence Platforms, EDR solutions, SIEM platforms, and other cybersecurity technologies.
• Produce clear, actionable reports on threats, incidents, investigations, and improvement opportunities.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or a related discipline.
• 5–7 years of overall experience, including 3–5 years of relevant cybersecurity experience.
• Experience in SOC operations, threat intelligence, threat hunting, incident response, digital forensics, penetration testing or red teaming.
• Strong understanding of cyber‑attack techniques and the MITRE ATT&CK framework.

Required skills

• Threat Intelligence Platforms
• Endpoint Detection and Response (EDR) solutions
• Security Information and Event Management (SIEM) platforms
• MITRE ATT&CK framework
• Scripting and tool development for threat hunting and forensic analysis