Cyber Threat Adversary Analyst

Cyber Threat Adversary Analyst (17464)

Description

Cyber Threat Adversary Analyst

Full-time | Hybrid

20% bonus 7% pension Staff travel benefits

You turn sophisticated threat intelligence into clear, evidence-led action that makes defences stronger.

You're curious about how adversaries really operate, confident testing assumptions and skilled at explaining what matters next. If you combine deep technical analysis with sharp judgement and clear storytelling, this is your opportunity to make a practical difference.

The opportunity

As a senior member of our Cyber Threat Adversary Analysis team within CTEM, you will lead hands-on analysis that shows how relevant threats could play out across easyJet’s environment. You will work for the CTAA Lead and collaborate closely with Cyber Threat Intelligence, the Security Operations Centre, Attack Surface Management and Engineering.

You will build adversary profiles, kill-chain narratives and attack-path assessments, then validate hypotheses where appropriate through breach-and-attack-style testing. Your evidence and recommendations will help teams prioritise exposure, improve detection and focus remediation where it can have the greatest defensive impact.

CTAA Lead, easyJet

The team & culture

You will join a specialist CTAA team focused on advanced threat analysis and validation. The work is collaborative by design, bringing together CTI, SOC, Attack Surface Management and Engineering to connect threat insight with measurable defensive improvement.

You will be trusted to take ownership of complex analysis while sharing repeatable methods, templates and learning with colleagues. It is an environment that values evidence, constructive challenge and calm decision-making, particularly when threat levels rise.

What you’ll be doing

You will profile relevant threat actors and map likely kill chains and attack paths against easyJet’s environment, documenting assumptions, confidence levels and supporting evidence.

You will use structured walkthroughs and breach-and-attack-style validation where appropriate to confirm how controls behave, identify weak or unreliable coverage and explain the practical impact.

You will translate findings into prioritised exposure-reduction actions, detection requests and use-case recommendations, giving SOC and Detection Engineering teams the context they need to tune, triage and respond effectively.

Business Area

Legal

Primary Location

United Kingdom-London-London Luton Airport

Organisation

Legal

Schedule

Full-time

Unposting Date

12/11/2026, 11:59:00 PM

#J-18808-Ljbffr