Cyber Threat Intelligence Analyst

This is a great job for someone who has strong Cyber Threat Intelligence experience and enjoys turning threat information into practical action. You might currently work in Cyber Threat Intelligence, Threat Hunting, Incident Response, Detection Engineering or Security Operations and be looking for an opportunity to help shape how threat intelligence supports cyber defence across a large organisation.

A bit about the job:

Our Cyber Threat Intelligence (CTI) team helps Aviva stay ahead of emerging cyber threats. As a Senior Cyber Threat Intelligence Analyst, you’ll investigate threats, assess their relevance to Aviva and deliver intelligence that supports better decision making across our cyber security teams. Working closely with Security Operations, Incident Response, Vulnerability Management, Threat Hunting and Cyber Engineering teams, you’ll help turn intelligence into action. From supporting investigations and strengthening detection capabilities to reducing cyber risk, your work will help protect our customers, colleagues and business every day.

Skills and experience we're looking for:

• Sufficient CTI experience to support independently leading requirements-led research and analysis, producing defensible assessments, and translating organisationally relevant intelligence into prioritised decisions and actions with demonstrable defensive or risk outcomes.
• Strong understanding of threat actors, motivations, campaigns and TTPs, with the ability to select and apply appropriate behavioural, intrusion-analysis and threat-modelling approaches, such as MITRE ATT&CK, Diamond Model or Cyber Kill Chain.
• Proven experience partnering with cyber‑defence and control‑testing teams to turn intelligence into prioritised investigations, hunt or detection opportunities, remediation decisions and defensive improvements.
• Ability to evaluate and synthesise multiple sources, apply structured analytical techniques, distinguish fact from assumption, express likelihood and confidence, and communicate evidence‑based assessments and recommendations to technical and non‑technical decision‑makers.
• Sufficient technical literacy across enterprise networks, identity, endpoints and servers, cloud/SaaS environments, security telemetry and controls to assess threat plausibility and exposure and collaborate credibly with technical specialists.

What you’ll get for this role:

• Salary: Circa £60,000 (depending on location, skills, experience, and qualifications).
• Bonus opportunity – 10% of annual salary. Actual amount depends on your performance.
• Generous pension scheme e.g. if you put in 8%, Aviva adds 14%.
• 29 days holiday plus bank holidays, and you can choose to buy or sell up to 5 days.
• Aviva-funded Private Medical Benefit to help you get expert support when you need it.
• Make your money go further – up to 40% discount on Aviva products, and other retailer discounts.
• Up to £1,200 of free Aviva shares per year through our Matching Share Plan and share in the success of Aviva with our Save As You Earn scheme.
• Brilliantly supportive policies including parental and carer’s leave.
• Flexible benefits to suit you, including sustainability options such as cycle to work.
• Make a difference, be part of our Aviva Communities and use your 3 paid volunteering days to help others.
• We take your wellbeing seriously with lots of support and tools.

Aviva is for Everyone: We’re inclusive and welcome everyone – we want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don’t, we’d still encourage you to apply. We also consider all forms of flexible working, including part‑time and job shares. We flex locations, hours and working patterns to suit our customers, business and you. Most of our people are smart working – spending around 50% of their time in our offices every week, combining the benefits of flexibility with time together with colleagues.

We interview every disabled applicant who meets the minimum criteria for the job.