Lead Information Security Operations Analyst

Salary: £60,000 - 100,000 per year

Requirements:

• Advanced knowledge of cyber threat intelligence and the intelligence lifecycle, with a deep understanding of all-source intelligence principles.
• Strong written and verbal communication skills in English, with the ability to present complex information clearly and concisely, including to senior audiences and under pressure.
• Detailed understanding of attacker tools, techniques, and procedures (TTPs) and how they relate to threat actor behaviour.
• Highly developed understanding of the current cyber threat landscape, including common threat actors, campaigns, and attack methodologies.
• Strong understanding of key threat intelligence terminology, concepts, and analytical approaches.
• Experience in analysis of dark and deep web ecosystems, including forums, leak sites, and threat actor communities.
• Ability to adapt and learn new technologies, tools, and methodologies in a fast-paced environment.
• Ability to work independently, take initiative, collaborate effectively, and lead a team.
• Developed knowledge of global security frameworks and standards, such as NIST, ISO and MITRE ATT&CK.
• Strong analytical and problem-solving skills, with attention to detail and accuracy.
• Strong technical proficiency, including familiarity with networking concepts, operating systems, and common security tools.
• Interest in continuous professional development, including pursuing relevant certifications.
• Developed understanding of geopolitical factors that impact and drive cyber risks.
• Working understanding of financial market infrastructure.
• Previous experience working in a Security Operations Centre (SOC) environment.
• Exposure to threat hunting activities and familiarity with investigative techniques.
• Good understanding or hands-on experience with malware analysis and related tools.

Responsibilities:

• Lead the day-to-day operations of the threat intelligence function within our Security Operations Centre, setting the strategy for proactive monitoring and alerting to help protect our assets and identify emerging threats.
• Deliver briefings and regular engagements with our customers and partners across the business.
• Prepare and quality check intelligence reports for teams across the wider security function, including the SOC, Identity and Access Management, Vulnerability Management, Insider Threat and Physical Security, highlighting emerging threats and critical vulnerabilities.
• Collaborate with our global threat intelligence team, supporting services that leverage our scale and capabilities.
• Optimise reporting through our threat intelligence platform by working with vendors and internal teams to deliver high quality curated feeds which enable effective threat hunting and remediation.
• Engage with vendors, industry groups, and government partners to build and maintain strong intelligence-sharing relationships.
• Communicate findings clearly and promptly to internal stakeholders, ensuring accuracy and completeness.
• Maintain and improve intelligence tooling, working with vendors and users to ensure the tools operate effectively.
• Drive the growth and maturing of the threat intelligence function, developing new products and services for our internal and external customers.
• Abide by our security policies and practices.
• Ensure the confidentiality and integrity of the information being accessed.
• Report any suspected information security violation or breach.
• Complete all periodic mandatory security trainings in accordance with our guidelines.

Technologies:

• Support
• Network
• Security
• Web

More:

We are Mastercard, powering economies and empowering people in 200+ countries and territories worldwide. Together with our customers, we help build a sustainable economy where everyone can prosper. We support a wide range of digital payment choices, making transactions secure, simple, smart and accessible. This role is for a Lead Information Security Operations Analyst within Vocalinks dedicated Threat Intelligence function. You will work closely with the SOC, internal security teams, Mastercards global threat intelligence capabilities, and a wide network of stakeholders including vendors, industry groups, customers, and government organisations. This is a full-time position with the opportunity to help shape and grow a fast-evolving threat intelligence capability in a critical national infrastructure provider.

last updated 36 week of 2026