Cyber Threat Intelligence Analyst

G MASS are working with a leading global banking group to find a Cyber Threat Intelligence Analyst for their EMEA cyber security team, supporting both the banking and securities sides of the business.

The team acts as the region’s early warning function, keeping the organisation informed about the threats that matter and making sure the right defences are in place. The successful candidate will turn external threat data into practical insight, shaping awareness across EMEA and working with colleagues in technology, the wider business and global security teams to close gaps quickly. It is a varied, hands on role suited to someone who enjoys both the analytical side of threat intelligence and the stakeholder work needed to get things actioned. Business level Japanese is essential, as the role involves regular communication with colleagues and stakeholders in Japan. It is a varied, hands on role suited to someone who enjoys both the analytical side of threat intelligence and the stakeholder work needed to get things actioned.

• Keep track of emerging threats and attack campaigns using a range of intelligence feeds and sources
• Break down how attacks are carried out and recommend the controls needed to protect the organisation
• Write regular threat briefings and analysis for audiences across the region
• Review incoming alerts from global teams, route them to the relevant technology owners and ensure responses are returned on time
• Run phishing simulations alongside an external provider and report on results and risk metrics
• Help improve the team’s intelligence and collaboration tools by working with software vendors
• Own the team’s internal documentation, governance materials and intranet content
• Step in on urgent vulnerabilities, data leakage events and broader security operations work
• Play an active part in bringing two cyber teams together and promoting strong security awareness across the business

• 3+ years working in a cyber security operations environment
• Business level Japanese, written and spoken, to support regular engagement with global colleagues
• Hands on experience in threat monitoring and a strong grasp of current attack trends
• Confident working across IT teams and influencing a range of stakeholders
• Solid technical understanding of attack methods, layered security controls, patching and vulnerability management
• Familiarity with SIEM tooling such as Splunk
• Knowledge of threat intelligence platforms or SOAR tooling is a plus
• Analytical, detail focused and composed when priorities shift

Initial 9-month contract

Hybrid working model