Job Description:
Group Senior Threat Intelligence Analyst
Location: London (EC2R 7HJ) / Staines (TW18 3DZ) / Salford Quays (M50 3SP)
Permanent - Hybrid Working
£60-£65K depending on experience + 10% Bonus + fantastic benefits.
Full time – 35 hours PW
We make health happen
Working in our Group function you’ll play a key part in helping our customer facing colleagues deliver exceptional standards of customer service and patient care not just in the UK but around the globe.
No matter your role, you’ll have an opportunity to do work that matters. Making a difference to the lives of our customers each and every day, by helping shape the strategic direction of our business around the world.
Role Overview
The purpose of this role is to assess, analyse, provide effective, efficient and actionable strategic threat intelligence for Bupa Group, whilst also assisting Bupa's three main Market Units (ELA, BGUK, and ANZ) develop their capabilities.
As a Senior Threat Intelligence Operations Specialist you will be reporting to the Group Head of Threat Intelligence, and Offensive Security. You will be involved in discovering, researching, and assessing threats and adversary tradecraft, practical application of intelligence in various operational functions and initiatives. You’ll also be expected to perform continuous improvement activities of our processes, procedures, methods, and tooling as needed. You will play an integral part in helping us analyse threats and data originating from thousands of incidents detected by mnemonic, third party telemetry, as well as novel sources and methods.
To be successful in this role, you must be self-driven, curious, and technically skilled in using data and information derived from multiple disciplines to solve analytical problems.
How you’ll help us make health happen:
1. Reviewing complex, technical threat data and being able to enrich the data with contextual information to produce intelligence for key stakeholder consumption.
2. Collaborate with internal and external stakeholders to collect, assess, and share potential impact of threats, digital footprint, brand, and reputational activities and provide actionable recommendations.
3. Produce and disseminate strategic, operational, and tactical threat intelligence reports periodically and urgently to relevant stakeholders in the enterprise.
4. Conduct tactical investigations into key indicators and Tactics, Techniques, and Procedures (TTPs) sourced from Threat intelligence Platform (TIP) and Incident Response activities.
5. Lead collaboration activities and track threats with teams across the organisation to provide threat intelligence that furthers organisational understanding of potential adversaries and attack vectors.
6. Support security Subject Matter Experts (SMEs) across the organisation in the integration of tools, access management by liaising with the vendor and stakeholders across the organisation.
7. Define and enhance threat intelligence capabilities by developing processes where automation has the potential to improve efficiency.
8. Supporting security incident management and delivering briefings to senior management.
Key Skills / Qualifications needed for this role:
9. Extensive experience as a threat intelligence analyst or in similar position
10. Ability to produce highly detailed, and accurate analyst reports that will be consumed by the highest levels of the organisation.
11. Demonstrable experience researching and analysing cyber threats across either a) multiple industries or b) multiple timeframes. Including but not limited to finance, manufacturing, IT services, healthcare, and public sector.
12. Holds relevant professional qualification in Information Security and Threat Intelligence Analysis.
13. Experience with collection, analysis, and interpretation of cyber threat intelligence from various sources, including open-source intelligence (OSINT), proprietary feeds, common cyber threat intelligence tools and internal data.
14. Familiarity with scripting languages such as Python, Ruby, Javascript, etc. Scripting experience is ideal but not necessary.
15. Understands channels of communication, delivery of information, tone, and attitude in messaging in a highly federated and regulated business.
16. Demonstrable experience and ability to adapt to a fast-moving environment to deliver high-quality intelligence content in a short timeframe.
17. Extensive knowledge of current security threats and vulnerabilities, how to detect and mitigate them and their (possible) impact on the customer’s environment.
18. Knowledge and understanding of threat actors, threat models, Tactics, Techniques, and Procedures (TTPs), common frameworks and common mitigations.
19. You will be working with colleagues from the different Bupa geographies, additional languages (Spanish, Polish, Portuguese or Turkish) would be beneficial.
Desirable qualifications/certifications:
20. Certified Information Security Manager (CISM)
21. GIAC Cyber Threat Intelligence (GCTI)
22. GIAC Reverse Engineering Malware Certification (GREM)
23. CREST Registered Threat Intelligence Analyst (CRTIA)
Benefits
Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.
Joining Bupa in this role you will receive the following benefits and more:
• 25 days holiday, increasing through length of service, with option to buy or sell
• Bupa health insurance as a benefit in kind
• An enhanced pension plan and life insurance
• Annual performance-based bonus
• Onsite gyms or local discounts where no onsite gym available
• Various other benefits and online discounts
Why Bupa?
We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.