How your CV stacks up
Upload your CV to see how well it fits this job role
?%
We are actively building diverse teams and welcome applications from everyone.
Role: Thread Analyst
Location: Birmingham (SCC operates hybrid working, which comprises a mix of office and home working)
Contract Type: Permanent
Salary Package: 35000 plus large company benefits, a broad flexible benefits scheme, and 2 paid-for volunteering days a year
Hours: 9.00 am – 5.30 pm Monday – Friday
Interview Process: 2-stage process
Why SCC?
- An inclusive workplace
- Excellent package: solid basic and company benefits
- Hybrid working & core hours in line with role requirements
- Career development and life-long learning opportunities
- Opportunity to join Europe's largest privately-owned IT Company
Role Purpose
Key responsibilities:
Threat Intelligence & Analysis
- Research and analyse emerging cyber threats, vulnerabilities, and threat actor activity relevant to SCC customers
- Produce threat assessments and contextual intelligence on vulnerabilities, incidents, and campaigns
- Lead development of strategic, operational, and tactical threat intelligence outputs (e.g. landscape reports, advisories, digests)
- Map threats, TTPs, and campaigns to frameworks such as MITRE ATT&CK
Customer-Facing Intelligence & Reporting
-
Produce and enhance customer-facing deliverables such as:
- Strategic threat landscape reports
- Threat briefings and advisories
- Technology-specific risk summaries
-
Translate threat intelligence into business-relevant insights and recommendations
-
Support stakeholder engagement by explaining threats in both technical and non-technical terms
Operational Integration with SOC
-
Work with other SOC and threat analysts to convert intelligence into:
- Detection rules (SIEM / EDR)
- Threat hunting hypotheses
- Playbook improvements
-
Provide intelligence-driven input into alert triage and incident investigations
-
Support post-incident reviews with threat context and adversary insight
Vulnerability & Exposure Intelligence
-
Analyse vulnerability data from Tenable and other scanning platforms to:
- Identify high-risk vulnerabilities relevant to current threat activity
- Prioritise remediation based on exploitability, exposure, and threat actor interest
-
Correlate vulnerability findings with:
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
Threat intelligence (active campaigns / exploitation in the wild)
-
Customer environments and technology stacks
-
Support development of:
- Vulnerability threat advisories
- Risk-based prioritisation models for customers
-
Work with SOC and engineering teams to ensure vulnerability intelligence informs:
- Detection use cases
- Threat hunting activities
- Customer remediation guidance
Defender & Endpoint Intelligence (MXDR Integration)
-
Leverage Microsoft Defender (Endpoint, Identity, Cloud, Office) telemetry to:
- Identify emerging threat patterns and suspicious behaviours
- Support investigations with enriched threat intelligence context
-
Correlate Defender alerts with known threat actor TTPs and campaigns
-
Lead on:
- Identification of gaps in detection coverage
- Development of intelligence-led improvements to Defender use cases
-
Be the SME for :
- Exploitation techniques observed in real environments
- Trends across customer estates
Threat Monitoring & Tooling
-
Lead monitoring of:
- Dark web sources
- External attack surface exposure
- Vulnerability disclosures and exploitation trends
-
Lead on evaluation and usage of threat intelligence platforms and tooling
-
Maintain tracking of relevant:
- Indicators of Compromise (IOCs)
- Vulnerabilities and CVEs
- Threat actor campaigns
Service Development & Improvement
- Lead on development of SCC threat intelligence services and offerings
- Lead on refining use cases, playbooks, and detection logic based on emerging threats
- Support RFP responses, service design, and customer proposals for threat intelligence capabilities
Collaboration & Knowledge Sharing
- Work collaboratively with SOC, engineering, and solution teams
- Share threat insights across the SOC to improve collective awareness and response capability
- Maintain awareness of current and emerging threats affecting key sectors and customer environments
- Will mentor other more junior Threat Analysts
Skills And Experience
- Experience in researching and analysing threats within a SOC environment
- Detail-oriented with strong analytical thinking
- Able to translate threat intelligence into practical outcomes
- Collaborative and team-focused
- Committed to continuous learning in cyber security
- Good understanding of cyber security principles and threat landscape shown through experience and certifications.
- Experience of using vulnerability prioritisation and exploit intelligence within a security team
- Experience working with and troubleshooting Tenable, Defender, or equivalent tooling
- Knowledge of frameworks such as MITRE ATT&CK
- Understanding and experience of threat intelligence lifecycle and structured analysis techniques
- Experience producing reports, briefings, or customer-facing outputs
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About Us
SCC is Europe's largest privately-owned IT business, based out of the new £7m HQ office in Birmingham and we help clients succeed through IT transformation and exceptional customer experiences. We are a business where innovation is greater as we combine unique ideas, people and disciplines. We are a global company that is passionate about IT and where we look to simplify the complex.
We are an equal opportunities employer
SCC is committed to providing equal opportunities and a proactive and inclusive approach to equality and diversity in employment. No applicant or employee will be treated less favourably than another on the grounds of a protected characteristic which are defined as sex, sexual orientation, age, disability, gender reassignment, trade union membership or non-membership, marriage and civil partnership, pregnancy and maternity, race and religion or belief.
If you are selected for interview, and need any reasonable adjustments made for your interview, please let the SCC Talent Acquisition team know, at the point of scheduling.
Diversity & Inclusion at SCC - https://www.scc.com/diversity-and-inclusion/
Sustainability at SCC - https://www.scc.com/sustainability-at-scc/
Life at SCC - https://www.linkedin.com/company/scc/life
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills