Cyber Threat Intelligence Analyst | S2 | CISO | Multiple Locations | Internal Mobility in Milton Keynes

Country: United Kingdom

IT STARTS HERE

Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organisation, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible. This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference. Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.

Retail & Commercial Banking is a global business integrating all our retail and commercial banking activities to better serve our customers, improve efficiency and drive value creation.

THE DIFFERENCE YOU MAKE

Santander UK Threat Management is looking for a Cyber Threat Intelligence Analyst based out of Milton Keynes and London. The Cyber Threat Intelligence Analyst is a high tempo, dynamic, operational role that sits within the Threat Management team who are responsible for the timely and accurate production, analysis, and dissemination of cyber threat intelligence relevant to the business or sector. The Cyber Threat Intelligence Analyst will provide further detailed information regarding the capability and intent of cyber threat actors and their methods when conducting cyber-attacks in order to protect Santander UK customers.

In Threat Management we work with internal stakeholders at all levels as well as industry peers within the subject matter. We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas.

To succeed in this role, you will be responsible for:

• Producing accurate intelligence reports and briefs suitable for tactical, operational, and strategic customers.
• Investigating and detecting cyber and geopolitical threats using all available data sources.
• Improving Operational Threat Intelligence creation by understanding how existing controls mitigate threats as well as identifying any gaps for remediation.
• Reporting Threat Intelligence Assessments that are relevant and contextualised for internal use, or for customers of our service including IOCs, TTPs and threat assessments.
• Conducting deep analyses of adversaries and the tactics they employ against our infrastructure and services to provide rich threat context that allows the organisation to understand, prioritise and counter advanced threats and attacks with a focus on minimising business impact.
• Developing methods to enhance and automate existing processes.
• Analysing cyber threat data and information feeds in order to provide actionable intelligence in a timely and accurate manner.

WHAT YOU’LL BRING

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We’re enabling teams to go beyond by valuing who they are and empowering what they bring. The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Professional Experience
• Previous experience of cyber threat intelligence analysis and how to handle sensitive data. (Required)
• Excellent report writing, presentational and communication skills. (Required)
• Thorough understanding of techniques used to bypass cyber security controls (Required)
• Ability to demonstrate methodologies and analytical skills including structured analytical techniques, Mitre Attack and cyber kill chain. (Required)
• Ability to conduct OSINT investigations including developing digital footprints. (Required)
• Ability to track infrastructure of adversaries. (Required)
• Education
• Degree within relevant field and/or technical qualifications such as CREST/SANS desirable. (Preferred)
• Languages
• English (Required)
• Hard Skills
• Sound understanding of cyber threats in the finance sector. (Preferred)
• Experience working with intelligence collection plans, threat intelligence platforms and premium intelligence sources/feeds. (Required)
• Deep knowledge of TTPs, exploitation of network protocols and vulnerabilities. (Required)
• Excellent knowledge and experience of a wide range of both open source and commercial tools / data sources. (Required)
• Sound understanding of the dark web and cyber crime ecosystems. (Required)
• Sound knowledge of the kill chain and MITRE ATT&CK phases as well as corresponding controls. (Required)
• Soft Skills
• Ability to engage and influence senior business stakeholders. (Preferred)
• Ability to lead in working groups and build networks for future collaborations. (Preferred)
• Ability to work with peers internally and externally. (Required)
• Ability to translate complex problems to business terms. (Required)
• Ability to present to external and internal stakeholders. (Preferred)

WE VALUE YOUR IMPACT

At Santander, your contribution matters. We recognise the difference you make every day, and we make sure you feel valued, supported and rewarded in return. Here, recognition goes beyond pay. It’s about the pride you feel in your work, the impact you have on customers and communities, and the opportunities you have to grow and thrive — personally and professionally.

Salary Range: £47,133.00 - £70,699.00 per annum (depending on experience) This salary range represents the expected remuneration for the role. Annual salary is based on a standard 35-hour working week. Actual salary offered will depend on skills, experience, qualifications and location.

Competitive rewards that reflect the real impact you make and the value you bring. Wellbeing that goes beyond work — we work with a range of wellbeing partners across our 4 pillars of wellbeing (physical, mental, social and financial) to give you access to a suite of apps, discounted gym and fitness access, weekly online classes, flexible healthcare and mental health support. Support for every life stage — from menopause and pregnancy to parenthood and beyond, with enhanced family leave, childcare options and tailored wellbeing support. Time to give back through volunteering opportunities that let you make a difference in the communities we serve. Global growth opportunities to shape your career, learn new skills and explore what’s possible across our international network.

Ready to be recognised? It starts with you.

LOCAL COMPLIANCE

At Santander, we’re proud to be an inclusive organisation that provides equal opportunities for everyone — regardless of age, gender, disability, civil status, race, religion or sexual orientation. We’re committed to creating a recruitment experience that’s accessible, fair and welcoming for all candidates. We want our people to thrive — at work and at home — while delivering the best outcomes for our customers and supporting each other to grow. To make this possible, our roles are site-based with a hybrid working pattern, where colleagues are expected to attend the office at least 12 days per month (pro-rata for part-time roles). When applying, please consider the travel distance, time and cost to your chosen office location(s). We welcome applications on the understanding that, should you be offered this role, there may be no relocation package available. Santander will pay the employer mandatory government fees that are required to pay in connection with visa sponsorship. You may be liable for your own personal employee immigration and relocation costs. (Only applicable for roles that are eligible for sponsorship)

WHAT TO DO NEXT

If this sounds like a role you are interested in, then please apply. For further Guidance please visit Internal Mobility - Candidate Guidance. If you want to know more about the opportunity: Please contact Gemma Stride – gemma.flaxman@santander.co.uk Contact Number: - 07927566813