152 jobs for “Advanced Cyber Threat Analyst”
Sophos
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
Microsoft · Windows · Sophos Endpoint +6
Sophos
Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.
Splunk · ELK · Sophos
CrowdStrike · 1001–5000 people · Public
Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering, malware analysis and automation tooling. Interns build host- and network-based detection signatures and produce finished threat intelligence reporting for varied audiences.
CrowdStrike · Disassemblers · Decompilers +1
CrowdStrike · 1001–5000 people · Public
Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The role involves building automation for malware analysis, creating host- and network-based detection signatures, and producing finished threat intelligence reporting for customers.
CrowdStrike · Disassemblers · Decompilers +1
Cloudflare
Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.
Cloudflare Workers · SQLite · D1 +4
QinetiQ
Advises customers on cyber security vulnerability, risk, audit and compliance, applying NIST and ISO27001 frameworks to risk assessments and security assurance. Supports accreditation, governance and mitigation strategies across government, defence and critical national infrastructure, engaging stakeholders and presenting findings. Based on-site at least three days a week with customer travel required.
NIST · ISO 27001 · MITRE ATT&CK +1
NCC Group
Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.
Splunk · SOAR
QinetiQ
Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.
NIST · ISO 27001 · MITRE ATT&CK
TÜV Rheinland Group
Lead delivery of OT cybersecurity consultancy for high-hazard sectors, managing site audits, compliance assessments, vulnerability analyses and risk assessments. Build CSMS aligned to IEC 62443, CAF, OG86 and NIS, advise clients on roadmaps, mentor junior staff and drive business development. Hybrid role with UK travel.
Microsoft Office Suite
Immersive
Owns end-to-end product design for AI-powered and agentic experiences within an enterprise cyber resilience platform, from discovery and prototyping through validation and delivery. Champions Object-Oriented UX, governs the design system, and partners closely with product, engineering and research to turn complex cybersecurity data into intuitive workflows.
Immersive One
University of East Anglia
Develops quantum-resilient security for connected and autonomous vehicular systems, evaluating post-quantum cryptographic techniques in resource-constrained 6G-enabled networks. Combines system modelling, simulation and algorithmic implementation to study trade-offs between security strength, computational overhead and communication latency, with adaptive key management and optimisation for low-latency, scalable deployment.
6G
Randstad Technologies Recruitment
Senior cybersecurity partner for Global Finance & Technology domains at a global financial institution, owning the domain risk register and embedding security-by-design into change delivery and solution designs. Strengthens in-service posture across IAM/PAM, vulnerability management, logging and SaaS risk, and leads control governance and audit readiness. Hybrid role in Sheffield, three days a week in the office.
SaaS
Safran · 501–1000 people · Late stage
Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.
CCTV · EASA Part-IS · AirCyber +7
University of Essex
A KTP Associate role transforming in-house cybersecurity software using Large Language Models and NLP, building real-time threat detection and clear user-facing responses. Involves developing UI and API integrations, working with large datasets and PyTorch, and acting as project lead while embedding technology and upskilling company staff.
PyTorch
RMT Accountants & Business Advisors
Lead and deliver infrastructure, web application and cloud penetration testing engagements, plus Cyber Essentials Plus assessments and technical security reviews. As one of the practice's early senior hires, you will shape methodologies, assure report quality, mentor junior consultants and support pre-sales for a growing national cyber security consultancy.
Nessus · Qualys · OpenVAS +5
