Cyber Security Threat Hunting Analyst

Business Unit:  Technology Operations & Cyber Security – Cyber Detect and Respond Salary range: Circa £35,500 per annum + Red Hot Benefits Location: UK Hybrid - Remote working with monthly travel to our Glasgow or Newcastle hub Live to inspire change. Live a life more Virgin. Our Team Working in Cyber Security is a big deal as we play a key role in keeping Virgin Money safe. We’re on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations. This role is part of the Technology Operations and Cyber Security team.  We’ll be working to identify threats to Virgin Money and the financial services sector and respond appropriately.  You’ll be playing an important role in helping us understand the threat landscape so we can protect ourselves from risk.  This helps to inform our Cyber Strategy, Culture and Education work as well as direct investments to mitigate risks and prevent and detect attacks. Cyber Detect and Respond Operations Team supports the organisation’s overall Cyber Security capabilities specifically focusing on enhancing our security posture against attacks to ensure we remain available to customer and colleagues. What you’ll be doing Identify and Respond: Quickly triage and respond to security alerts from various tools and channels. Hunt for Threats: Use advanced analytics and threat intelligence to uncover hidden threats. Develop Plans: Create and execute comprehensive threat hunting plans based on gathered data. Adapt Strategies: Stay flexible to evolving cyber threats and attack vectors. Improve Detections: Continuously refine hunt queries and actionable detections. Monitor Threats: Keep an eye on the threat landscape, critical vulnerabilities, and threat actors. Pre-empt Attacks: Adjust strategies to pre-empt new attack vectors. Create Playbooks: Develop and maintain hunting playbooks and checklists aligned with MITRE ATT&CK. We need you to have Previous experience in cybersecurity, focusing on security operations, threat detection, and incident response. SOC or Incident Response Experience with a proven background in security operations or incident response. Proficiency with SIEM tools (commercial or open source). Familiarity with MITRE ATT&CK, NIST and use of STIX and TAXII. Experience with Microsoft Sentinel, Splunk, and Wireshark. Willingness to cover flexible working hours and on-call duties It’s a bonus if you have but not essential Professional certifications such as CISSP, CISM, CEH, GIAC or similar are highly desirable. ITIL Service Management process awareness (Change, Incident & Problem Management processes). Experience of operational security controls and product stack Experience in working in an Agile environment Red Hot Rewards Generous holidays - 38.5 days annual leave (including bank holidays and prorated if part-time)​ plus the option to buy more. Up to five extra paid well-being days per year​.  20 weeks paid, gender-neutral family leave (52 weeks in total) for expectant parents and those looking to adopt.  Market-leading pension. Free private medical cover, income protection and life assurance. Flexible benefits include Cycle to Work, wellness and health assessments, and critical illness.  And there's no waiting around, you'll enjoy these benefits from day one. Feeling insatiably curious about this role? If we’re lucky to receive a lot of interest, we may close the advert early and would hate you to miss out. We're all about helping you Live a Life More Virgin, so happy to talk flexible working with you. Say hello to Virgin Money We’re making great strides towards achieving our ambition of becoming the UK’s best digital bank.  As a full-service digital bank with a heritage stretching back over 180 years, we’re a workforce to be reckoned with, and we're putting the full power of our experience behind disruptive ideas that reinvent the role a bank plays in people's lives. We're customer-obsessed and work tirelessly to deliver on our purpose, ‘Making You Happier About Money.’ This means we're able to do banking differently, and by innovating and working together we can make a real difference by creating memorable moments and red-hot experiences for our millions of customers. Join us and Live a Life More Virgin that empowers you with choice and flexibility in how you work.  Be yourself at Virgin Money Our purpose is to make people happier about money, this means seeing and feeling the world as our customers do by creating a workforce that reflects the rich diversity of our customers and communities.  We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.   As a Disability Confident Leader, we're committed to removing any obstacles to inclusion.  If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team It’s important to note that there may be occasions where it’s not possible to interview all candidates declaring a disability who meet the essential criteria for the job. In certain recruitment situations such as receiving a high-volume of applications, we may need to limit the overall numbers of interviews offered to both disabled and non-disabled applicants.  Now the legal bit Living A Life More Virgin allows our colleagues to be based anywhere in the UK (if the role allows it), but we'll need you to confirm you have the right to work in the UK. If you're successful in securing a role with us, there are some checks you need to complete before starting. These include credit and criminal record checks and three years' worth of satisfactory references. If the role is part of the Senior Manager Regime and Certification Regime, it requires enhanced pre-employment checks – we'll ask for six years of regulatory references, and once in the role, you'll be subject to periodic employment checks