> Markdown version of [/jobs/ext/2700580-cyber-threat-management-analyst-specialist](https://www.wearedevelopers.com/jobs/ext/2700580-cyber-threat-management-analyst-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Threat Management Analyst, Specialist - **Company:** Vanguard - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Open Source Intelligence, Security Software, Systems Integration, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Cyber Warfare, Vulnerability Analysis - **Published:** September 4, 2026 - **Apply:** http://www.vanguardjobs.com/job/23806919/cyber-threat-management-analyst-specialist-london-gb/?utm_medium=%22mcloud%2Djobads%22&utm_campaign=Default%20Campaign&utm_content=Cyber%20Threat%20Management%20Analyst%2C%20Specialist&utm_term=181817 ## About the Role * Experience working in a SOC or cyber operations environment * Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs) * Knowledge of a Cyber Threat Intelligence Platform, feed integrations, and security/process orchestration and automation * Knowledge of threat modelling and adversary tactics and techniques frameworks, such as MITRE ATT&CK matrices, Cyber Kill Chain, ACH * Knowledge of Common Vulnerability Scoring System (CVSS), CVE analysis, adversary exploitation techniques, attack surface management * Proficiency in cybersecurity tools and techniques, as well as knowledge of common cyber threats and attack vectors. * Understanding of current cybersecurity trends, threats, and concepts * Ability to write succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences ## Description The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will * Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources * Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders * Conduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs and vulnerabilities for analysis and detection opportunities * Assist leadership in tracking threat actors, vulnerability exploitation, and other emerging and novel TTPs relevant to Vanguard's technology footprint * Produce actionable reports, briefings, and indicators of compromise (IOCs) for internal stakeholders * Possess critical thinking and problem-solving abilities to find solutions, extrapolate salient artifacts, and identify correlations in threat data * Escalate critical or important findings to managers in a timely manner with appropriate risk analysis * Exercise independent judgment in methods, techniques, and evaluation criteria for obtaining results while also assessing the intelligence output of more junior analysts prior to dissemination * Work with hunt and analysis teams to assist with contextualizing the threat and facilitating the identification, mitigation, and containment of cyber-security incidents * Draft well-written analytical assessments and provide briefings to the team on key issues and provide editorial guidance to more junior analysts related to their output ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)