Analyst, Cyber Threat Intelligence

S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.We’re excited you’re thinking about joining usWorking in Cyber at S-RMOur Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Incident Response and Managed Services practices are in more demand than ever.We’re building a team to meet this challenge. We’re quick to respond, innovate, and improve. We don’t get too hung up on hierarchy or bureaucracy. If your ideas are good enough, we’ll empower you to implement them. If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your will always have your back.We also don’t believe there’s a typical cyber security professional. We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more. You’ll always find a range of perspectives and expertise to help you learn and grow.If that sounds like your kind of team, we’d like to hear from you.The roleCyber Threat Intelligence (CTI) is an integral part of our Incident Response (IR) and Managed Services practices. As a CTI analyst you will be a critical part of our wider cyber team’s success.You will work across the full intelligence cycle to help our clients respond and recover to security incidents, and stay ahead of evolving threats, including:Threat Actor Intelligence: You will track developments in the ransomware and cybercrime ecosystem, and write and update profiles on key threat actors of interest which will be shared with clients to inform case strategy and externally as thought leadershipThreat Actor Engagement: You will monitor leak sites and negotiation portals across our global IR cases, and inform case leads of regular developments. You will assist with researching and drafting attestations on sanctions exposure for given threat actorsDark Web Monitoring: You will use threat intelligence platforms and specialist tools to conduct targeted research the dark web and set up and deliver regular monitoring engagements. You will assist with renewals of these casesTechnical IOC Management: You will help collate technical indicators of compromise (IOCs) from across our global IR team, ensure these are enriched and correctly classified, and facilitate dissemination across the organisation to improve the operational effectiveness of our IR and Managed Services teamsIncident Data Collection and Analysis: You will help ensure that incident data collected by our global IR team from our engagements is accurate and consistent. You will assist with the management of this dataset, and with analysis to produce regular reporting on trends and insights to use for presentations, events and training sessionsCTI-lead analysis: You will assist with in-depth investigations which have a strong threat intelligence component, including conducting research and drafting client-facing reportsBlockchain analysisb> You will use specialist tools to trace ransom payments to identify sanctions exposure or other compliance risks, and draft reports to present findings to clientsThought leadership: You will contribute to public write ups and presentations on new vulnerabilities, trends, and threat actor techniquesHelp develop and share domain expertise: We will support you in growing your cyber expertise, including sharing it with the wider team through internal initiatives and programs.Help contribute to business development: You will help cultivate and manage close relationships with external partners who we share intelligence with and help identify business development opportunities.Other features of the role include:Variety of casework: no day will be the same. Our team responds to a huge variety of incidents for both public and corporate clients.Range of opportunities: you will have opportunities to broaden your security awareness into testing and advisory projects, in addition to deepening your cyber threat intelligence and incident response expertise.Flexible working practices: responding to incidents can be intense, high-pressure work. We are mindful of our team’s work/life balance and offer flexible working options to support your wellbeing.What we're looking forCandidates with the following qualifications and experience are likely to succeed as Cyber Threat Intelligence Analysts at S-RM.That said, if you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box—we’re looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.Required SkillsExcellent written and verbal communication skills, with the ability to produce clear and concise reports.Strong analytical and problem-solving skills, including the ability to work with incomplete, ambiguous, or conflicting information.Understanding of foundational cyber concepts, such as common attack vectors (e.g., phishing, credential misuse), high-level security terminology, and general threat actor motivations.Understanding of core intelligence concepts, including the intelligence lifecycle, requirements gathering, and the distinction between tactical, operational, and strategic intelligence outputs.A demonstrated interest in cyber threats, including financially-motivated activity such as ransomware and extortion.Preferred SkillsAcademic or professional background in a research-focused discipline (qualitative or quantitative), such as Political Science, Intelligence Studies, Criminology, Cybersecurity, Computer Science, Data Science, or related fields.Familiarity with cybersecurity fundamentals, such as threat actor TTPs, IOCs, and relevant frameworks (e.g., MITRE ATT&CK).Ability to contextualize findings into business-relevant assessments, including potential impact, likelihood and recommended mitigations.Experience using OSINT and/or Threat Intelligence platforms (e.g. VirusTotal, Shodan, MISP, Recorded Future).Successful candidates are likely to show the following personal attributesAn investigative mindset and an enthusiasm for investigations.Exceptional attention to detail, especially when examining indicators, infrastructure data, and adversary behaviours.A collaborative mindset and willingness to collaborate across teams.Ability to thrive under pressure, prioritize multiple tasks, and meet short deadlines.A self-starter, demonstrating initiative, ownership of work and the ability to identify opportunities to enhance S-RM's cyber capabilities.Relevant industry certifications are not required for this role. However, holding relevant CTI or cyber security related certifications such as the following is beneficial: GCTI, GCFA, SSCP, or Security+We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside of work. This includes but is not exhaustive of:23 days holidayper year in addition to public holidays (+1 day for every year of service up to a maximum of 30 days in total);yesHybrid working and flexible working hours;Matchingpension contribution up to 7%(up to a maximum of 14% combined), andfinancial education;Life Insurance4X annual salary.Parental SupportFertility treatment leave –5 daysof leave per cycle of treatment per year;Maternity leave –26 weeksof full pay followed by 13 weeks of half pay;Paternity leave –6 weeksof full pay.Various Health and Medical Benefits includingMedical insurance(taxable benefit) for you and your family;Virtual GPfor you and your family members that live in the same household;EAP programmefor you and your immediate family;Free access to the world-famous mindfulness appThe application processWe want to get to know you, and for you to get to know us, to see if we’d be a good fit. We are responsive and respectful of people’s time throughout our hiring process.A typical application process includes:Initial screening of your application by our recruiting team.An interview to assess your baseline technical skills.An interview to discuss your previous experience, broader competencies, and suitability for the role.Create a Job AlertInterested in building your career at S-RM? Get future opportunities sent straight to your email.Accepted file types: pdf, doc, docx, txt, rtfEnter manuallyAccepted file types: pdf, doc, docx, txt, rtf #J-18808-Ljbffr