Cyber Threat Intelligence Analyst

Edinburgh or Bristol

Competitive Salary + Realistic Progression Opportunities + Training & Development + Award Winning Employee Share Plan + Highly Competitive Company Pension + Flexible Working + 25 Days Holiday + Excellent Working Culture

Job Purpose

The Global Security Operations team is responsible for delivering a comprehensive portfolio of technical security control and monitoring services across all of the global Computershare environments.  

The Cyber Threat Intelligence Analyst is responsible for providing intelligent and complex analysis of relevant threats, vulnerabilities, campaigns, and incidents; publishing timely and actionable alerts and threat reports; and working with other Security Operations team members to maximise our use of threat intelligence to improve cyber defences and response capabilities. This role will also include responsibilities for reporting on technical topics and publicly reported incidents as part of increasing the cyber awareness of our staff across Computershare.

This role is part of a global team of information security professionals that deliver in-depth technical security services for our most critical applications and infrastructure to ensure that they are highly resilient against existing and emerging cyber security threats.

Key Accountabilities

• Perform open source threat collection and analysis activities identifying indications of cyber threats, malicious code, malicious websites, and vulnerabilities through automated and manual analysis using existing and purpose-built tools.
• Identify credible, new intelligence, and subject matter resources relative to current and emerging threats.
• Interact with intelligence suppliers to secure relevant intelligence in a timely fashion and to close intelligence gaps.
• Provide subject matter expertise on cyber threats to support current analytic operations and initiatives.
• Incorporate the relevant intelligence provided by both internal teams and external stakeholders to assist the Security Engineering and Security Monitoring functions to deliver enhanced proactive and reactive operations to mitigate against current and emerging threats.
• Create written and verbal intelligence products for internal stakeholders to assist in proactively addressing threats.  
• Develop and present key findings to senior technical and non-technical leadership.
• Establish and maintain strong, collaborative working relationships with global and regional technology infrastructure, application, and architecture teams.

Skills, Experience & Competencies

• A minimum of three years of technical experience with a strong foundational understanding of enterprise system and application architectures as well as emerging technologies and approaches.
• Understanding and experience in security technologies, such as, firewalls, IDS/IPS, AV, SIEM,  DLP, Vulnerability Management, Web and Email Content Filtering.
• Experience in analysing malware, hacking tools, and threat actor tactics, techniques and procedures to characterise threat actors’ technical methods for accomplishing their missions.
• Understanding of indicators of compromise (IOC) and threat hunting using highly granular tools, techniques, and procedures.
• Understanding of forensic analysis on and data captures from networks (packet capture), hosts (volatile/live memory), electronic media, log data, and network devices.
• Possess, or working towards, professional or industry certifications, such as, CHFI, CISSP, SANS, and have an understanding of the security principles outlined in OWASP, NIST and ISO27000.   
• Be a self-starter, be able to successfully prioritize and manage multiple complex tasks, and work well under pressure with limited supervision both individually and at times, with other team members.
• Excellent verbal and written communication skills with the ability to effectively articulate complex technical terms to both technical and non-technical audiences.
• Be able to adapt to a flexible working model, such as attending conference calls meetings outside of normal office hours and occasionally travelling to other local and international Computershare locations.   

A Truly Diverse Place to Work
 

Computershare celebrates the diversity of our people and we welcome applications from everyone.

We believe that having a culture of inclusion is essential in delivering good results. Attracting, retaining and developing a diverse workforce where employees feel valued, respected and empowered allows people to reach their full potential. As a business this diversity helps us to better reflect and understand our customers’ needs to allow us to drive better outcomes.

Specific Key Benefits of the Role

Computershare offers all employees 25 days holiday, excellent pension scheme, shareholder incentive plan, and a flexible employee benefits scheme.

All successful candidates will be required to undergo the Computershare Pre-Employment Screening Process before commencing employment. Employment will be subject to satisfactory clearance on background checks including Identification, Passport Validation, Finance, Qualification, Employment / Personal referencing and Criminal Record Basic Disclosure checks.

Computershare Investor Services PLC is authorised and regulated by the Financial Conduct Authority. Computershare Investor Services PLC is registered in England and Wales No 3498808 and the registered office address is: The Pavilions, Bridgwater Road, Bristol, BS13 8AE.