Threat Intelligence Analyst page is loaded
Threat Intelligence Analyst
Apply locations UK, York Portugal, Lisbon time type Full time posted on Posted 4 Days Ago time left to apply End Date: January 20, 2025 (1 day left to apply) job requisition id R0016954 Job Type:
Permanent Build a brilliant future with Hiscox Position:
Threat and Vulnerability Analyst Reporting to:
Red Team Leader (Cyber Fusion Centre) Location:
York (UK) or Lisbon (Portugal) Company description Hiscox is a diversified international insurance group with a powerful brand, strong balance sheet and plenty of room to grow. Listed on the London Stock Exchange and headquartered in Bermuda, Hiscox has over 3,000 staff across 14 countries and 34 offices. The Role The Threat and Vulnerability Analyst works in our Cyber Fusion Centre, responsible for the protection, detection and response capabilities used to safeguard our business from cyber threats. You will proactively identify threats to our systems and networks, and potential vulnerabilities that could be exploited by malicious actors. Your work will enhance our security posture by providing insights into potential attack vectors and security weaknesses. You will emulate the threats we face, mimicking the Tactics, Techniques and Procedures (TTPs) used by real-world hackers. Your primary focus will involve using our core Threat and Vulnerability Management (TVM) platforms to perform routine security scanning and analysis. You will triage and prioritize the scan results and work with our Ethical Hackers and Security Engineers to determine appropriate mitigations. You will also collaborate closely with our Blue Team to ensure that vulnerabilities are understood and that monitoring capabilities are optimized. The role is based in either York (UK) or Lisbon (Portugal) and is a permanent position. Travel to other team locations will be required as necessary. Key Responsibilities Manage the daily operations and maintenance of our TVM platforms, ensuring we have the latest scan libraries and threat intelligence. Analyse and prioritise the outputs from TVM platforms and translate into mitigation actions for our Fusion Centre CI/CD pipelines. Perform routine vulnerability assessments of our infrastructure and applications, documenting findings and recommendations for remediation. Perform network reconnaissance to gather information about potential high value targets in our network. Track open security vulnerabilities in our estate and manage them through the lifecycle to closure. Escalate complex issues to our Ethical Hackers for further investigation. Collaborate with our Blue Team to validate their detection and response capabilities. Support the coordination of Penetration Tests performed by external parties. Support the planning and delivery of Red and Blue Team exercises. Assist in-flight security incidents by providing insight into our vulnerability exposure. Prepare detailed reports and briefings for various stakeholders outlining threats, their potential impact, and recommended mitigation approaches. Maintain up-to-date knowledge of the latest threat actors and their TTPs. Candidate Profile 0 to 3+ years experience in a cyber analyst role, preferably with a focus on TVM technologies. Excellent working knowledge of the vulnerability management lifecycle. Excellent analytical skills with the ability to work under own initiative. Comprehensive knowledge of common hacking techniques and the latest cyber threats. Good working knowledge of using cyber threat intelligence and attack modelling frameworks. Desire to pursue a career in Ethical Hacking, willing to undertake further training. Highly curious and demonstrate lateral thinking and problem solving. Good presentation and report writing skills. BSc or MSc in Cybersecurity is essential if no formal experience. Industry recognised qualifications such as CompTIA PenTest+ and GIAC GPEN are desirable. Diversity & Benefits At Hiscox we care about our people. We hire the best people for the job and we’re committed to diversity and creating a truly inclusive culture. Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years’ worth of service, private medical for all the family and much more.
Work with amazing people and be part of a unique culture Why work here?
If you want to help build a brilliant future; work with amazing people; be part of a unique company culture; and enjoy great employee benefits that take care of your mental and physical wellbeing, come and join us. Get in touch
If this is your first time visiting our career site and you wish to stay in touch please select the 'Introduce yourself' button on the top right. About us
We’re a global, specialist insurer headquartered in Bermuda and listed on the London Stock Exchange. If you want to build a great career with a company that prioritises strong values – such as integrity and courage – where our people always pull together to do the right thing, then we’d love to hear from you.
#J-18808-Ljbffr
Apply locations UK, York Portugal, Lisbon time type Full time posted on Posted 4 Days Ago time left to apply End Date: January 20, 2025 (1 day left to apply) job requisition id R0016954 Job Type:
Permanent Build a brilliant future with Hiscox Position:
Threat and Vulnerability Analyst Reporting to:
Red Team Leader (Cyber Fusion Centre) Location:
York (UK) or Lisbon (Portugal) Company description Hiscox is a diversified international insurance group with a powerful brand, strong balance sheet and plenty of room to grow. Listed on the London Stock Exchange and headquartered in Bermuda, Hiscox has over 3,000 staff across 14 countries and 34 offices. The Role The Threat and Vulnerability Analyst works in our Cyber Fusion Centre, responsible for the protection, detection and response capabilities used to safeguard our business from cyber threats. You will proactively identify threats to our systems and networks, and potential vulnerabilities that could be exploited by malicious actors. Your work will enhance our security posture by providing insights into potential attack vectors and security weaknesses. You will emulate the threats we face, mimicking the Tactics, Techniques and Procedures (TTPs) used by real-world hackers. Your primary focus will involve using our core Threat and Vulnerability Management (TVM) platforms to perform routine security scanning and analysis. You will triage and prioritize the scan results and work with our Ethical Hackers and Security Engineers to determine appropriate mitigations. You will also collaborate closely with our Blue Team to ensure that vulnerabilities are understood and that monitoring capabilities are optimized. The role is based in either York (UK) or Lisbon (Portugal) and is a permanent position. Travel to other team locations will be required as necessary. Key Responsibilities Manage the daily operations and maintenance of our TVM platforms, ensuring we have the latest scan libraries and threat intelligence. Analyse and prioritise the outputs from TVM platforms and translate into mitigation actions for our Fusion Centre CI/CD pipelines. Perform routine vulnerability assessments of our infrastructure and applications, documenting findings and recommendations for remediation. Perform network reconnaissance to gather information about potential high value targets in our network. Track open security vulnerabilities in our estate and manage them through the lifecycle to closure. Escalate complex issues to our Ethical Hackers for further investigation. Collaborate with our Blue Team to validate their detection and response capabilities. Support the coordination of Penetration Tests performed by external parties. Support the planning and delivery of Red and Blue Team exercises. Assist in-flight security incidents by providing insight into our vulnerability exposure. Prepare detailed reports and briefings for various stakeholders outlining threats, their potential impact, and recommended mitigation approaches. Maintain up-to-date knowledge of the latest threat actors and their TTPs. Candidate Profile 0 to 3+ years experience in a cyber analyst role, preferably with a focus on TVM technologies. Excellent working knowledge of the vulnerability management lifecycle. Excellent analytical skills with the ability to work under own initiative. Comprehensive knowledge of common hacking techniques and the latest cyber threats. Good working knowledge of using cyber threat intelligence and attack modelling frameworks. Desire to pursue a career in Ethical Hacking, willing to undertake further training. Highly curious and demonstrate lateral thinking and problem solving. Good presentation and report writing skills. BSc or MSc in Cybersecurity is essential if no formal experience. Industry recognised qualifications such as CompTIA PenTest+ and GIAC GPEN are desirable. Diversity & Benefits At Hiscox we care about our people. We hire the best people for the job and we’re committed to diversity and creating a truly inclusive culture. Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years’ worth of service, private medical for all the family and much more.
Work with amazing people and be part of a unique culture Why work here?
If you want to help build a brilliant future; work with amazing people; be part of a unique company culture; and enjoy great employee benefits that take care of your mental and physical wellbeing, come and join us. Get in touch
If this is your first time visiting our career site and you wish to stay in touch please select the 'Introduce yourself' button on the top right. About us
We’re a global, specialist insurer headquartered in Bermuda and listed on the London Stock Exchange. If you want to build a great career with a company that prioritises strong values – such as integrity and courage – where our people always pull together to do the right thing, then we’d love to hear from you.
#J-18808-Ljbffr
