Analyst, Cyber Threat Intelligence

Who we are

S-RM is a global intelligence and cyber security consultancy. Since 2005 weve helped some of the most demanding clients in the world solve some of their toughest information security challenges.

Weve been able to do this because of our outstanding people. Were committed to developing sharp curious driven individuals who want to think critically solve complex problems and achieve success.

But we also know that work isnt everything. Its about the lives and careers it helps us build. Were immensely proud of this culture and we invest in our peoples wellbeing learning and ideas every day.

Were excited youre thinking about joining us

Working in Cyber at S-RM

Our Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving and our Incident Response and Managed Services practices are in more demand than ever.

Were building a team to meet this challenge. Were quick to respond innovate and improve. We dont get too hung up on hierarchy or bureaucracy. If your ideas are good enough well empower you to implement them. If youre the best person to talk to a customer youll get that opportunity regardless of the title in your email signature. And when you need a hand your team will always have your back.

We also dont believe theres a typical cyber security professional. Weve built a team of intelligence analysts technical specialists software developers investigators risk managers and more. Youll always find a range of perspectives and expertise to help you learn and grow.

If that sounds like your kind of team wed like to hear from you.

The role

Cyber Threat Intelligence (CTI) is an integral part of our Incident Response (IR) and Managed Services practices. As a CTI analyst you will be a critical part of our wider cyber teams success.

You will work across the full intelligence cycle to help our clients respond and recover to security incidents and stay ahead of evolving threats including:

• Threat Actor Intelligence: You will track developments in the ransomware and cybercrime ecosystem and write and update profiles on key threat actors of interest which will be shared with clients to inform case strategy and externally as thought leadership
• Threat Actor Engagement: You will monitor leak sites and negotiation portals across our global IR cases and inform case leads of regular developments. You will assist with researching and drafting attestations on sanctions exposure for given threat actors
• Dark Web Monitoring: You will use threat intelligence platforms and specialist tools to conduct targeted research the dark web and set up and deliver regular monitoring engagements. You will assist with renewals of these cases
• Technical IOC Management: You will help collate technical indicators of compromise (IOCs) from across our global IR team ensure these are enriched and correctly classified and facilitate dissemination across the organisation to improve the operational effectiveness of our IR and Managed Services teams
• Incident Data Collection and Analysis: You will help ensure that incident data collected by our global IR team from our engagements is accurate and consistent. You will assist with the management of this dataset and with analysis to produce regular reporting on trends and insights to use for presentations events and training sessions
• CTI-lead analysis: You will assist with in-depth investigations which have a strong threat intelligence component including conducting research and drafting client-facing reports
• Blockchain analysis: You will use specialist tools to trace ransom payments to identify sanctions exposure or other compliance risks and draft reports to present findings to clients
• Thought leadership: You will contribute to public write ups and presentations on new vulnerabilities trends and threat actor techniques
• Help develop and share domain expertise: We will support you in growing your cyber expertise including sharing it with the wider team through internal initiatives and programs.
• Help contribute to business development: You will help cultivate and manage close relationships with external partners who we share intelligence with and help identify business development opportunities.

Other features of the role include:

• Variety of casework: no day will be the same. Our team responds to a huge variety of incidents for both public and corporate clients.
• Range of opportunities: you will have opportunities to broaden your security awareness into testing and advisory projects in addition to deepening your cyber threat intelligence and incident response expertise.
• Flexible working practices: responding to incidents can be intense high-pressure work. We are mindful of our teams work/life balance and offer flexible working options to support your wellbeing.

What were looking for

Candidates with the following qualifications and experience are likely to succeed as Cyber Threat Intelligence Analysts at S-RM.

That said if you dont think you meet all of the criteria below but still are interested in the job please apply. Nobody checks every boxwere looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.

We nurture a culture of equality diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents experiences and perspectives.

Required Skills:

• Excellent written and verbal communication skills with the ability to produce clear and concise reports.
• Strong analytical and problem-solving skills including the ability to work with incomplete ambiguous or conflicting information.

• Understanding of foundational cyber concepts such as common attack vectors (e.g. phishing credential misuse) high-level security terminology and general threat actor motivations.
• Understanding of core intelligence concepts including the intelligence lifecycle requirements gathering and the distinction between tactical operational and strategic intelligence outputs.

• A demonstrated interest in cyber threats including financially-motivated activity such as ransomware and extortion.

Preferred Skills:

• Academic or professional background in a research-focused discipline (qualitative or quantitative) such as Political Science Intelligence Studies Criminology Cybersecurity Computer Science Data Science or related fields.
• Familiarity with cybersecurity fundamentals such as threat actor TTPs IOCs and relevant frameworks (e.g. MITRE ATT&CK).
• Ability to contextualize findings into business-relevant assessments including potential impact likelihood and recommended mitigations.
• Experience using OSINT and/or Threat Intelligence platforms (e.g. VirusTotal Shodan MISP Recorded Future).

Successful candidates are likely to show the following personal attributes:

• An investigative mindset and an enthusiasm for investigations.
• Exceptional attention to detail especially when examining indicators infrastructure data and adversary behaviours.
• A collaborative mindset and willingness to collaborate across teams.
• Ability to thrive under pressure prioritize multiple tasks and meet short deadlines.
• A self-starter demonstrating initiative ownership of work and the ability to identify opportunities to enhance S-RMs cyber capabilities.

Relevant industry certifications are not required for this role. However holding relevant CTI or cyber security related certifications such as the following is beneficial: GCTI GCFA SSCP or Security

Our benefits

We offerthoughtful balanced rewards and supportto help our people do their best work and live their lives outside of work. This includes but is not exhaustive of:

• 23 days holidayper year in addition to public holidays (1 day for every year of service up to a maximum of 30 days in total);yes
• Hybrid working and flexible working hours;
• Matchingpension contribution up to 7%(up to a maximum of 14% combined) andfinancial education;
• Life Insurance4X annual salary.

Parental Support:

• Fertility treatment leave 5 daysof leave per cycle of treatment per year;
• Maternity leave 26 weeksof full pay followed by 13 weeks of half pay;
• Paternity leave 6 weeksof full pay.

Various Health and Medical Benefits including:

• Medical insurance(taxable benefit) for you and your family;
• Virtual GPfor you and your family members that live in the same household;
• EAP programmefor you and your immediate family;
• Free access to the world-famous mindfulness app

The application process

We want to get to know you and for you to get to know us to see if wed be a good fit. We are responsive and respectful of peoples time throughout our hiring process.

A typical application process includes:

• Initial screening of your application by our recruiting team.
• An interview to assess your baseline technical skills.
• An interview to discuss your previous experience broader competencies and suitability for the role.