Analyze cyber incident data, telemetry, and external threat sources to identify threat actors, campaigns, trends, and emerging risks. Translate complex findings into actionable intelligence for clients, brokers, underwriters, and internal stakeholders through reports, alerts, workshops, presentations, and recurring intelligence products. Lead insight sessions and threat-modeling exercises while connecting technical activity to real-world business exposure.
We’re looking for a Threat Intelligence Analyst who can turn complex cyber incident data, telemetry and external threat information into intelligence that people can genuinely use.
Sitting within our Cyber Exposure & Risk Intelligence team, you’ll identify meaningful patterns in cyber activity, assess threat actor behaviour and emerging trends, and translate your findings into clear insights for clients, brokers, underwriting teams and wider business stakeholders.
Your analysis will have a practical impact. It will contribute to client reports, broker content, workshops and recurring intelligence products, as well as proactive notifications and alerts. You’ll also have the opportunity to develop confidence presenting your findings to clients and external audiences.
Key Responsibilities
- Analyse cyber incident data, telemetry and external threat sources to uncover trends, patterns and emerging risks.
- Turn complex data into clear, relevant intelligence for reports, alerts, presentations and workshops.
- Produce high-quality written intelligence for clients, brokers and internal stakeholders.
- Lead cyber insight sessions, client workshops and threat-modelling exercises.
- Contribute to recurring threat reporting and build repeatable analytical outputs.
- Assess threat actors, campaigns, tactics, techniques and procedures, connecting technical activity to real-world risk exposure.
- Help shape the team’s analytical questions, hypotheses and priorities.
- Contribute to external reports, presentations and thought-leadership content
Skills, Knowledge and Expertise
You’ll be an analytical and curious thinker who enjoys getting beneath complex datasets and turning what you find into a clear story. Crucially, you’ll be able to connect technical observations to real-world risk and business impact, communicating your findings effectively to both technical and non-technical audiences.
You’ll bring:
- Experience in cyber threat intelligence, incident analysis, cybersecurity consulting or a related analytical role.
- A good understanding of the cyber threat landscape, including threat actors and attacker methodologies.
- Strong analytical skills and the ability to extract meaningful insight from complex information.
- Strong written communication skills, with the ability to create clear and well-structured outputs for different audiences.
- Confidence presenting findings and contributing to workshops, structured analysis or intelligence-led discussions.
- Strong critical thinking and intellectual curiosity, with the confidence to develop and articulate your own views.
- A collaborative, outcome-focused approach centred on producing useful, actionable intelligence.
Experience analysing trends or working with operational or incident datasets would be advantageous.
You’ll have a STEM degree or equivalent analytical experience, while relevant cyber certifications such as GCTI, GCIA, CTIA or CISSP are beneficial rather than essential.
You’ll have a STEM degree or equivalent analytical experience, while relevant cyber certifications such as GCTI, GCIA, CTIA or CISSP are beneficial rather than essential.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
CFC London, England Office
London, United Kingdom
Similar Jobs
Information Technology • Software
Deliver customer-specific cyber threat and vulnerability intelligence within a 24x7 CSOC. Analyze adversaries, campaigns, vulnerabilities, exploitation evidence, and attack paths; produce strategic, operational, and tactical intelligence; support zero-day response, vulnerability management, detection, threat hunting, and incident readiness. Integrate curated intelligence into CSOC platforms using structured sharing and automation, while communicating clear, proportionate recommendations to technical and executive stakeholders.
Top Skills:
APIsItsm PlatformsLogic AppsMicrosoft DefenderMicrosoft Defender Vulnerability ManagementMicrosoft SentinelMispMitre Att&CkNessusStix/Taxii 2.XWebhooks
.png)
Information Technology • Machine Learning • Natural Language Processing • Security • Software • Analytics • Cybersecurity
Conduct threat hunting and technical research on nation-state and cybercriminal actors, malicious infrastructure, tools, and tactics. Produce finished intelligence, public research, and detection signatures; brief customers and represent the team publicly. Collaborate with geopolitical analysts, mentor teammates, improve intelligence processes, and use automation to increase efficiency. The role requires threat intelligence expertise, networking knowledge, analytical writing, customer communication skills, and familiarity with intelligence frameworks and research platforms.
Top Skills:
Ai/LlmsCensysCyber Kill ChainDiamond ModelDomaintoolsElastic StackElasticsearchKibanaMaltegoMitre Att&CkModatPythonShodanSigmaSnortSuricataTcp/IpYara
Insurance • Professional Services • Consulting • Financial Services
Monitor emerging cyber threats, analyze attack campaigns, produce regional threat briefings, coordinate alert responses, run phishing simulations, and recommend security controls. The role also supports vulnerability and data leakage response, security operations, governance documentation, tooling improvements, and security awareness initiatives across EMEA. Regular stakeholder communication with Japan requires business-level Japanese.
Top Skills:
SIEMSoarSplunkThreat Intelligence Platforms
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
