Senior Cyber Analyst in Cardiff

Senior Cyber Analyst

We are recruiting for a Senior Cyber Analyst to join our team at Admiral Money!

About Us

Admiral Money is the dynamic lending arm of Admiral Group, offering personal loans, motor finance, and homeowner loans since 2017.

We’re building something special for our customers and are looking for curious, driven individuals ready to learn, take on challenges, and make an impact.

We’re proud to be a certified Great Place to Work for over 25 years, with recognition for Women and Wellbeing. Our inclusive culture empowers everyone to Be You.

The successful candidate will be expected to attend the Cardiff office up to two times per month.

Role

Admiral Money is a fast‑growing, FCA‑regulated consumer lender operating in a cloud‑native environment.

Our small Cyber team delivers a significant impact across the business, covering everything from threat detection and vulnerability management to security architecture and regulatory compliance.

As a Senior Cyber Security Analyst, you’ll be a key technical voice within the team.

You’ll be involved in day‑to‑day security operations, our vulnerability management programme, and bring genuine cloud security expertise to a business that runs primarily on AWS.

You’ll be a cyber security generalist with deep expertise in key areas, working closely with Engineering, Infrastructure and Platform teams.

You’ll be comfortable advising stakeholders at all levels and translating technical risk into language that supports effective business decision‑making.

We’re looking for someone who is curious, pragmatic, and enjoys working through complex details.

Key Responsibilities

• Security Operations & Threat Detection
• Monitor and triage security alerts from SIEM, EDR and cloud‑native tooling (AWS Security Hub, Guard Duty, Cloud Trail, Defender).
• Lead incident response investigations from initial triage through to root cause analysis and lessons learned.
• Maintain and improve detection rules, alerting thresholds and response playbooks.
• Participate in an on‑call or escalation rota as required.
• Vulnerability Management
• Own the vulnerability management lifecycle, including scanning, triage, prioritisation and remediation tracking across cloud and on‑premise assets.
• Work with Engineering and Infrastructure teams to ensure timely remediation in line with agreed SLA targets.
• Produce clear, actionable vulnerability reporting for both technical and non‑technical audiences.
• Track and challenge exceptions, ensuring risk‑based decisions are documented appropriately.
• Cloud Security
• Apply security best practice across AWS (primary) and Azure environments, including IAM policy reviews, storage security, network controls, secrets management and logging coverage.
• Conduct configuration reviews and contribute to Cloud Security Posture Management (CSPM) tooling.
• Advise on secure design principles for new cloud workloads and architecture changes.
• Support Infrastructure and Platform teams in embedding security into Ia C pipelines and CI/CD processes.
• Risk & Compliance
• Contribute to the maintenance of the risk register, control evidence and policy library.
• Support internal and external audit activity, including evidence preparation, responding to findings and tracking remediation activities.
• Assist in maintaining compliance with FCA expectations, PCI DSS and relevant data protection requirements.
• Horizon‑scan for emerging threats and regulatory changes relevant to the business.
• Stakeholder Engagement & Cyber Consultancy
• Act as a trusted technical advisor to colleagues across TSS and the wider business.
• Contribute to the Cyber team’s strategy, roadmap and continuous improvement initiatives.
• Act as a subject matter expert, providing internal cyber security consultancy across the business.
• Support engineering squads as a trusted source of cyber security expertise.

Essential

Skills & Experience

• Broad cyber security knowledge across technology, risk and engineering, with experience operating across multiple disciplines.
• Strong hands‑on experience in a cyber security role, ideally within a regulated financial services environment.
• Strong working knowledge of AWS security services, including Guard Duty, Security Hub, Cloud Trail, IAM, Config and WAF.
• Experience operating and tuning a SIEM platform (e. g. Google Sec Ops, Sentinel).
• Demonstrable experience in vulnerability management, including tooling, triage and driving remediation alongside engineering teams.
• Hands‑on involvement in incident response processes and security investigations.
• Ability to communicate technical concepts and risks clearly to non‑technical stakeholders.
• Sound understanding of common attack techniques, with familiarity of the MITRE ATT&CK framework.

Desirable

• Azure security experience, including Defender for Cloud, Entra ID and Sentinel.
• Relevant certifications such as AWS Security Specialty, Comp TIA Security+, Cy SA+, SC‑200, CEH or equivalent.
• Experience within an FCA‑regulated environment and familiarity with operational resilience requirements.
• Exposure to PCI DSS, ISO 27001 or SOC 2 control frameworks.
• Scripting experience using Python, Power Shell or Bash for automation and tooling activities.
• What We’re Looking For
• Takes ownership and proactively drives work forward when opportunities or issues are identified.
• Balances attention to detail with a pragmatic approach and understands the difference between meaningful security controls and unnecessary complexity.
• Collaborates effectively with colleagues across Platform, Infrastructure, Engineering and the wider business.
• Demonstrates a commitment to continuous learning in an evolving threat landscape.
• Admiral: Where You Can

Everyone receives 33 days holiday (including bank holidays) when they join us, increasing the longer you stay with us, up to a maximum of 38 days (including bank holidays).

You also have the option to buy or sell up to an additional five days of annual leave.

Our benefits make sure our colleagues have a great work‑life balance.

Equal Opportunity Statement

As a Disability Confident Leader, for candidates with a disability or long‑term health condition that opt into the Disability Confident scheme, we’ll invite a fair and proportionate number of applicants that meet the essential requirements of the role to the first stage of our selection process.

If you need any adjustments or support with your application or during the recruitment process, let us know.

#J-18808-Ljbffr