Advanced Cyber Threat Analyst

M&G plc

. Investigate complex security incidents across cloud, endpoint, identity, email and network environments .

Posted 9/21/2026full-timeStirling • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber incident investigation and response, with a strong focus on threat hunting, security detection development, and the application of AI-assisted analysis. Proficient in maintaining security operations documentation and collaborating with stakeholders to enhance security posture.

Highest-signal resume keywords

Cyber Incident InvestigationThreat HuntingSecurity Detections DevelopmentMicrosoft Azure SecurityMicrosoft Sentinel

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Incident ResponseThreat Intelligence AnalysisAnalytical Rule DevelopmentEndpoint Security TechnologiesCloud Security TechnologiesNetwork Security TechnologiesEmail Security TechnologiesData Quality ImprovementAutomation DevelopmentRisk Assessment

Soft Skills

Strong Documentation SkillsSound JudgementEffective Communication

Tools & Technologies

Microsoft Defender for EndpointMicrosoft Defender for IdentityMicrosoft Defender for CloudMicrosoft SentinelAI-Assisted Security Operations

Certifications & Qualifications

CompTIA Security+CySA+ISC2 SSCPSC-200AZ-500

Industry Keywords

Security OperationsFinancial ServicesRegulated EnvironmentGovernanceAudit Discipline

Tech Stack

Tools & technologies

AzureCloud

About the role

Key responsibilities & impact

Investigate complex security incidents across cloud, endpoint, identity, email and network environments
Assess potential business impact and recommend proportionate containment, remediation and recovery actions
Maintain accurate investigative records, evidence and decision rationales throughout the incident lifecycle
Conduct intelligence-led threat hunts based on adversary campaigns, behaviours, tactics, techniques and procedures
Identify attack paths, security weaknesses, detection gaps and opportunities to strengthen M&G’s security posture
Translate investigation, threat hunting and threat intelligence findings into improved detections, controls and response processes
Develop, tune and validate analytical rules against evolving threats while reducing unnecessary alert activity
Improve telemetry, data quality, detection coverage, tooling integrations and automated workflows with Security Operations Engineering
Use AI-assisted analysis and advanced analytics for triage, investigation, threat hunting, detection engineering and reporting
Validate AI-generated outputs and retain accountability for analytical conclusions, response decisions and security recommendations
Act as a technical escalation point for complex alerts and incidents
Communicate complex threats, risks, decisions and recommendations to technical and non-technical stakeholders
Collaborate with internal teams and external security service providers on investigation and response
Deliver practical improvements to Security Operations processes, procedures and defensive capabilities
Maintain controls, documentation and audit evidence, supporting internal and external audit activity

Requirements

What you’ll need

Practical experience working within a Security Operations environment
Strong capability in cyber incident investigation and response
Experience analysing activity across endpoint, identity, cloud, email or network security technologies
Experience conducting structured, intelligence-led threat hunting
Ability to develop, tune or validate security detections and analytical rules
Understanding of how threat intelligence and adversary behaviours can inform investigations, threat hunts and detection improvements
Experience using security data and evidence to assess risk and recommend proportionate actions
Knowledge of Microsoft Azure security environments, including Entra and Microsoft Defender capabilities
Sound judgement when operating with incomplete, conflicting or time-sensitive information
Strong documentation, governance and audit discipline
Knowledge of responsible AI-assisted security operations, including the need for human oversight and validation
Experience with Microsoft Sentinel, including log analysis, analytical rule management and playbook development
Experience with Endpoint Detection and Response technologies, including Microsoft Defender for Endpoint
Experience with Microsoft security technologies such as Entra, Defender for Identity and Defender for Cloud
Experience developing investigation, enrichment or response automation
Experience working in financial services or another highly regulated environment
Relevant industry certifications such as CompTIA Security+, CySA+, ISC2 SSCP or equivalent SANS certifications
Relevant Microsoft certifications such as SC-200 or AZ-500

Benefits

Comp & perks

A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions)
Access to Share Save and Share Incentive Plan
Financial wellbeing and support services
38 days annual leave (including bank holidays)
Opportunity to purchase up to five extra days
Time Off When You Need It policy
Comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave
Private Healthcare
Critical Illness cover
Life Assurance
Additional family options for Health & Protection cover
Networking, support and development opportunities through employee-led networks
Flexible working arrangements
Workplace adjustments and reasonable adjustments during recruitment