Threat Analyst

At apexanalytix, we are lifelong innovators. Since our founding nearly four decades ago, we have been consistently growing, profitable, and delivering the best procure-to-pay solutions to the world. We are the perfect balance of an established company and a start-up. You will find a unique home here, and you will recognise the names of our clients. Most of them are on The Global 500. They trust us to give them the latest in controls, audit, and analytics software every day. Industry analysts consistently rank us as a top supplier management solution, and you will be helping build that reputation.

At Apexanalytix, we help some of the world’s largest companies stay ahead of risk. Our Cyber Threat & Vulnerability team provides cutting-edge analysis, monitoring, and intelligence on third-party and supplier cyber threats — helping procurement and risk leaders understand and act on the hidden risks in their extended supply chains.

The Opportunity

We are looking for a smart, curious, and capable individual to join our growing cyber threat team, specifically focused on cyber threat detection and investigations. You will be working directly with the Head of Cyber Threat Analysis, helping to monitor potential cyber threats, assess supplier exposure, track threat actor behaviours, and identify vulnerabilities across global supply chains. It is a rare chance to be part of a tight-knit team tackling real-world threats at scale.

What You’ll Be Doing

• Verifying incident alerts, assessing the credibility of attack sources, and developing effective strategies for preventing and mitigating outside cyber threats.
• Supporting the delivery of threat intelligence and vulnerability assessments for global clients in the form of reports, briefings, alerts, and scorecards.
• Investigating and monitoring threat actor activity, emerging vulnerabilities, and cyber trends relevant to third-party risk.
• Contributing to the triage and validation of alert outputs and notifications from internal tooling.
• Escalating and documenting high-risk findings such as credential breaches or threat actor targeting.
• Collaborating with colleagues across cyber, compliance, and procurement disciplines.
• Maintaining and improving internal documentation, data sources, tooling, and dashboards used for analysis.

Who You Are

• Experienced in cyber threat intelligence.
• You have an understanding of cybersecurity topics including CVEs, threat actors, open-source intelligence (OSINT), and attack surfaces.
• You are analytical, organised, and good at spotting patterns and connecting dots.
• You have strong written and verbal communication skills and can present findings clearly to non-technical audiences.
• You thrive in a team but can work independently and take initiative.
• You are familiar with vulnerability management concepts, including CVEs, patching, and risk prioritisation.
• TOR-based network threat intelligence experience.
• You have followed operational security (OPSEC) best practices when conducting research on the dark web.
• A solid understanding of CVE identifiers, CVSS scoring, and how vulnerabilities are prioritised and validated.

Nice-to-Haves

• Familiarity with supplier or third-party risk management.
• Knowledge of cyber threat intelligence frameworks and concepts.
• Experience or an understanding of internet-wide scanning tools such as Censys, Shodan, and threat intelligence platforms.
• A basic understanding of the cybercrime and ransomware ecosystem.

Why Join Us

• Work with experienced analysts and thought leaders in third-party cyber risk.
• Make a meaningful impact with clients in finance, pharma, manufacturing, and beyond.
• Get exposure to the full lifecycle of cyber threat intelligence in a commercial setting.
• Build skills and experience that set you up for a successful long-term career in cyber.