Senior Cyber Threat Hunting Analyst - AVP

Barclays•Jefferson, CO

1d•$125,000 - $170,000•Onsite

About The Position

Embark on a transformative journey as a Senior Cyber Threat Hunting Analyst - AVP. At Barclays, our vision is clear –to redefine the future of banking and help craft innovative solutions. As part of the Chief Information Security Office, working within Cyber Operations, the Threat Hunting team is responsible for performing proactive hunting activities across Barclays network estate to detect & mitigate advanced threats. As a Cyber Threat Hunting Lead Vice President at Barclays, you’ll lead the proactive search for advanced threats, uncovering risks before they become incidents and helping safeguard one of the world’s leading financial institutions. Combining deep technical expertise with strategic leadership, you’ll shape threat hunting capabilities, influence detection strategy, and drive innovation across cyber operations. This is a unique opportunity to work with cutting-edge technologies, tackle some of the industry’s most complex security challenges, and see the direct impact of your work on Barclays’ resilience and future success.

Requirements

Demonstrate expert, hands-on Cyber Threat Hunting experience, developing intelligence-led, IOC-pivot, hunt-generated and incident-driven hypotheses to uncover hidden adversary activity across Barclays’ estate and services
Bring deep knowledge of adversary tradecraft, attacker TTPs, attack paths, MITRE ATT&CK-aligned behaviors and enterprise telemetry, using that knowledge to assess exposure, identify control gaps and prioritize hunt activity
Translate hunt findings into actionable defensive improvements by working closely with Cyber Threat Intelligence, CSOC, Incident Response, Detection Engineering, Purple Team and Vulnerability Management, ensuring hunt outcomes improve detection, response and control effectiveness
Communicate complex hunt findings clearly to senior technical and non-technical stakeholders, producing concise evidence-based reporting, recommendations and follow-up actions for wider action within Barclays

Nice To Haves

Practical experience with enterprise-scale hunting and analytics toolsets, including SIEM/search platforms, endpoint, identity, cloud, network, threat intelligence and SOAR-enabled workflows
Exposure to Purple Team and Detection Engineering collaboration, including validating telemetry, confirming detections, identifying candidate hunts and shaping detection suggestions without owning those functions
Familiarity with Financial Services cyber risk, regulatory, control and evidence expectations, supported by relevant professional accreditation such as CISSP, CompTIA Security+, GIAC/SANS, CREST, OffSec or equivalent practical experience

Responsibilities

Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage.
Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise.
Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats.
Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network.
Management of cyber security incidents including remediation & driving to closure.
To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
Take ownership for managing risk and strengthening controls in relation to the work done.
Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc)to solve problems creatively and effectively.
Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
Influence or convince stakeholders to achieve outcomes.
Demonstrate expert, hands-on Cyber Threat Hunting experience, developing intelligence-led, IOC-pivot, hunt-generated and incident-driven hypotheses to uncover hidden adversary activity across Barclays’ estate and services
Translate hunt findings into actionable defensive improvements by working closely with Cyber Threat Intelligence, CSOC, Incident Response, Detection Engineering, Purple Team and Vulnerability Management, ensuring hunt outcomes improve detection, response and control effectiveness
Communicate complex hunt findings clearly to senior technical and non-technical stakeholders, producing concise evidence-based reporting, recommendations and follow-up actions for wider action within Barclays