Threat Analyst

JD Information Security team require a Threat and Vulnerability Analyst who will work within the Vulnerability team within the Cyber Defence Centre and report into the Threat and Vulnerability Manager.

The role will involve creating and performing analysis on vulnerability assessments of systems and networks within the JD Group environment. The role will require testing for vulnerabilities by working with our managed services partner, in creating, running, and reporting on the vulnerability scans on the estate. The individual will recognise any defects in systems that could allow access by threat actors. The individual will have good communication skills as it will require involvement with infrastructure teams across the environment to detail the vulnerabilities identified in systems.

The Threat and Vulnerability Analyst will also be able to support specific intelligence types whether this is operational or tactical. The role will require the analyst to collect information from JD Group threat intelligence tools and external resources to curate the threat intelligence. This role will also require the individual to be able to operate across the business to collect and communicate the relevant outputs, this could be from open-source means, or tools at the information security teams disposal.

Experience in report writing is essential for this role and will require great time management.

· Job Title – Threat Analyst

· Location – Bury, BL9 8RR

· Working rota – Monday to Friday

· Working hours – 40hrs per week

What You'll Be Doing:

• Operate the vulnerability scanning and threat intelligence tool set.
• Perform recurring and on demand scanning of JD Group environments.
• Maintain and assist with creation and documentation of scanning and reporting policies / procedures.
• Assist in scanning and reporting on PCI requirements.
• Creation and maintaining of reporting for scanning and threat intelligence purposes.
• Assist JD infrastructure teams to develop and implement patching.
• Revieing and analysing vulnerability data to identify trends and patterns.
• Research and assess emerging security threats.
• Communicate the risks of identified vulnerabilities and recommend security controls to mitigate them.
• Performing risk-based technical assessments on technical vulnerabilities.
• Assisting and supporting the manager in incident handling and investigations.
• Analyse all-source intelligence, and threat data feeds.
• Disseminate threat intelligence across and up to higher management.
• Expert zero-day report writing.
• Creation of incident tickets when gathering threat intelligence to proactively block adversary.

What We're Looking For:

• Passion for cyber security and the ability to learn on the job.
• Experience with using multiple EDR and SIEM products.
• Intermediate to build queries on products, an example KQL.
• Experience on working with vulnerability management products.
• Experience with using the OSINT Framework.
• Experience with threat intelligence products.
• Ability to understand and explain network topology.
• Understanding of OWASP.
• Understand and experience in explaining Mitre Att&ck.
• Experience in explaining and reporting CWE / CVE.
• Ability to adapt to multiple environments.