S-RM · London
Analyst, Cyber Threat Intelligence
Who we are S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of...
Who we are
S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the
world solve some of their toughest information security challenges.
We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, driven individuals who
want to think critically, solve complex problems, and achieve success.
But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this
culture and we invest in our people’s wellbeing, learning, and ideas every day.
We’re excited you’re thinking about joining us
Working in Cyber at S-RM
Our Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Incident Response
and Managed Services practices are in more demand than ever.
We’re building a team to meet this challenge. We’re quick to respond, innovate, and improve. We don’t get too hung up on
hierarchy or bureaucracy. If your ideas are good enough, we’ll empower you to implement them. If you’re the best person to talk
to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team
will always have your back.
We also don’t believe there’s a typical cyber security professional. We’ve built a team of intelligence analysts, technical
specialists, software developers, investigators, risk managers, and more. You’ll always find a range of perspectives and
expertise to help you learn and grow.
If that sounds like your kind of team, we’d like to hear from you.
The role
Cyber Threat Intelligence (CTI) is an integral part of S-RM's Managed Services practice. As a CTI Analyst, you will work closely
with the Global Cyber Threat Intelligence Lead and Customer Success Managers to deliver high-value intelligence services to
clients. Your core responsibilities will include:
- Dark Web Monitoring: Use threat intelligence platforms and specialist tools to conduct targeted research across dark
web sources, and set up and deliver regular monitoring engagements for clients.
- Managed Threat Intelligence Services: Conduct targeted investigations using threat intelligence platforms, tools, and
open-source intelligence across a growing portfolio of managed intelligence offerings.
- CTI-lead analysis: Support in-depth investigations with a strong threat intelligence component, including conducting research
and drafting client-facing reports.
- Thought leadership: Contribute to public write-ups and presentations on emerging vulnerabilities, trends, and threat actor
techniques.
- Business development: Help cultivate relationships with external intelligence-sharing partners and identify opportunities to
grow the practice.
Beyond these core responsibilities, you will be expected to stay current with threat intelligence developments and collaborate
closely with S-RM's Incident Response and Risk & Resilience teams where CTI adds value to their engagements. You will also work
alongside the Managed Detection and Response (MDR) and Attack Surface Management (ASM) teams to ensure unified service delivery
across all managed service offerings.
This role offers the opportunity to shape the development of S-RM's CTI services — working with the practice lead, managed service
teams, and technical development teams to identify opportunities for innovation and improvement. We will actively support your
professional growth, including opportunities to develop and share domain expertise through internal initiatives.
What we're looking for
Candidates with the following qualifications and experience are likely to succeed as Cyber Threat Intelligence Analysts at S-RM.
That said, if you don't think you meet all of the criteria below but are still interested in the role, please apply. Nobody checks
every box — we're looking for candidates who are particularly strong in a few areas and have some interest and capability in
others.
We nurture a culture of equality, diversity, and inclusion, and are dedicated to developing a workforce that reflects a variety of
talents, experiences, and perspectives.
Required Skills:
- Excellent written and verbal communication skills, with the ability to produce clear, concise, and well-structured analytical
reports. Candidates should be prepared to demonstrate strong writing ability (e.g., via a writing sample or assessment).
- Strong analytical and problem-solving skills, including the ability to work with incomplete, ambiguous, or conflicting
information, and to assess the credibility, reliability, and relevance of sources and data.
- Strong attention to detail and the ability to maintain focus and quality when processing large volumes of data across multiple
sources.
- Understanding of foundational cyber concepts, such as common attack vectors (e.g., phishing, credential misuse), high-level
security terminology, and general threat actor motivations.
- Understanding of core intelligence concepts, including the intelligence lifecycle, requirements gathering, and the distinction
between tactical, operational, and strategic intelligence outputs.
- A demonstrated interest in the cyber threat landscape, including financially-motivated activity (e.g., ransomware, extortion),
as well as broader geopolitical, industry-specific, or emerging threats.
Preferred Skills:
- Academic or professional background in a research-focused discipline (qualitative or quantitative), such as Political
Science, International Relations or Security Studies, Intelligence Studies, Criminology, Cybersecurity, Data Science, or
related fields.
- Experience using OSINT methodologies and/or threat intelligence platforms (e.g., Recorded Future, Flashpoint, MISP, VirusTotal,
Shodan, Maltego, or similar tools) to collect, enrich, and analyse threat data from open, deep, and dark web sources.
- Familiarity with dark web environments, underground forums, or illicit marketplaces, including an awareness of how threat
actors communicate and operate in these spaces.
- Ability to contextualize findings into business-relevant assessments, including potential impact, likelihood and recommended
mitigations.
- A foundational understanding of how cyber threats are categorised and communicated, including awareness
of widely-used frameworks such as MITRE ATT&CK, the Diamond Model, or the Cyber Kill Chain.
- Experience engaging with clients or stakeholders across the intelligence lifecycle, from requirements gathering through
delivery, or a demonstrated willingness to develop this skill.
- Proficiency in a second language is a strong advantage, particularly Russian, Spanish, Arabic, Portuguese, French, Mandarin, or
other languages relevant to cyber threat actor communities.
Successful candidates are likely to show the following personal attributes:
- An investigative mindset and genuine enthusiasm for research.
- A collaborative approach and willingness to work across teams.
- Ability to manage competing priorities and deliver under pressure.
- Initiative and ownership — a self-starter who identifies opportunities to enhance S-RM's cyber capabilities.
Certifications & Training:
Relevant industry certifications are not required for this role. However, we value evidence of continued learning. The following
are considered beneficial:
- Cyber Threat Intelligence: GCTI, CTIA, CREST CRTIA
- Cybersecurity Foundations: Security+, CySA+
- OSINT & Open Source Research: GOSI, C|OSINT, SANS SEC497, OSINT Combine courses, Trace Labs OSINT training
- Investigative Research & Verification: Bellingcat Online Investigation Workshops, etc.
Participation in OSINT competitions (e.g., Trace Labs Search Party CTF) or contributions to open source research communities are
also welcomed as evidence of practical skill development.
Candidates must have permission to work in the UK by the start of their employment
Our benefits
We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside of work. This
includes but is not exhaustive of:
- 25 days holiday per year in addition to public holidays (+1 day for every year of service up to a maximum of 30 days in
total);yes
- Hybrid working and flexible working hours;
- Matching pension contribution up to 7% (up to a maximum of 14% combined), and financial education;
- Life Insurance 4X annual salary.
Parental Support:
- Fertility treatment leave – 5 days of leave per cycle of treatment per year;
- Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;
- Paternity leave – 6 weeks of full pay.
Various Health and Medical Benefits including:
- Medical insurance (taxable benefit) for you and your family;
- Virtual GP for you and your family members that live in the same household;
- EAP programme for you and your immediate family;
- Free access to the world-famous mindfulness app
The application process
We want to get to know you, and for you to get to know us, to see if we’d be a good fit. We are responsive and respectful of
people’s time throughout our hiring process:
A typical application process includes:
- Initial screening of your application by our recruiting team.
- An interview to assess your baseline technical skills.
- An interview to discuss your previous experience, broader competencies, and suitability for the role.
To apply for this role, please submit a tailored cover letter and CV to: Job Application for Analyst, Cyber Threat Intelligence at
S-RM
Roll
Analyst, Cyber Threat Intelligence
Kategori
Cyber
Plats
Publicerad
16 juli
Sista ansökningsdag
16 augusti