Cyber Threat Adversary Analyst

Cyber Threat Adversary Analyst

Full-time | Hybrid

20% bonus • 7% pension • Staff travel benefits

You turn sophisticated threat intelligence into clear, evidence-led action that makes defences stronger.

You’re curious about how adversaries really operate, confident testing assumptions and skilled at explaining what matters next. If you combine deep technical analysis with sharp judgement and clear storytelling, this is your opportunity to make a practical difference.

The opportunity

As a senior member of our Cyber Threat Adversary Analysis team within CTEM, you’ll lead hands-on analysis that shows how relevant threats could play out across easyJet’s environment. You’ll work for the CTAA Lead and collaborate closely with Cyber Threat Intelligence, the Security Operations Centre, Attack Surface Management and Engineering.

You’ll build adversary profiles, kill-chain narratives and attack-path assessments, then validate hypotheses where appropriate through breach-and-attack-style testing. Your evidence and recommendations will help teams prioritise exposure, improve detection and focus remediation where it can have the greatest defensive impact.

“We’re looking for someone who is technically strong, naturally curious and able to tell a clear story from complex evidence. The best person for this role will challenge assumptions, test what really happens and turn their findings into practical improvements for our defensive teams.”
CTAA Lead, easyJet

The team & culture

You’ll join a specialist CTAA team focused on advanced threat analysis and validation. The work is collaborative by design, bringing together CTI, SOC, Attack Surface Management and Engineering to connect threat insight with measurable defensive improvement.

You’ll be trusted to take ownership of complex analysis while sharing repeatable methods, templates and learning with colleagues. It’s an environment that values evidence, constructive challenge and calm decision-making, particularly when threat levels rise.

What we’re looking for

You’ll bring strong experience in advanced threat analysis or threat-led defence, with the ability to apply adversary profiling, kill-chain and attack-path thinking in real environments.

You can test hypotheses through structured analysis and, where appropriate, breach-and-attack-style testing. You produce clear, defensible written assessments and turn technical evidence into focused, practical actions.