Cyber Threat Adversary Analyst

Description

Cyber Threat Adversary Analyst

Full-time | Hybrid

20% bonus • 7% pension • Staff travel benefits

You turn sophisticated threat intelligence into clear, evidence-led action that makes defences stronger.

You’re curious about how adversaries really operate, confident testing assumptions and skilled at explaining what matters next. If you combine deep technical analysis with sharp judgement and clear storytelling, this is your opportunity to make a practical difference.

The opportunity

As a senior member of our Cyber Threat Adversary Analysis team within CTEM, you’ll lead hands-on analysis that shows how relevant threats could play out across easyJet’s environment. You’ll work for the CTAA Lead and collaborate closely with Cyber Threat Intelligence, the Security Operations Centre, Attack Surface Management and Engineering.

You’ll build adversary profiles, kill-chain narratives and attack-path assessments, then validate hypotheses where appropriate through breach-and-attack-style testing. Your evidence and recommendations will help teams prioritise exposure, improve detection and focus remediation where it can have the greatest defensive impact.

“We’re looking for someone who is technically strong, naturally curious and able to tell a clear story from complex evidence. The best person for this role will challenge assumptions, test what really happens and turn their findings into practical improvements for our defensive teams.”
CTAA Lead, easyJet

The team & culture

You’ll join a specialist CTAA team focused on advanced threat analysis and validation. The work is collaborative by design, bringing together CTI, SOC, Attack Surface Management and Engineering to connect threat insight with measurable defensive improvement.

You’ll be trusted to take ownership of complex analysis while sharing repeatable methods, templates and learning with colleagues. It’s an environment that values evidence, constructive challenge and calm decision-making, particularly when threat levels rise.

What you’ll be doing

You’ll profile relevant threat actors and map likely kill chains and attack paths against easyJet’s environment, documenting assumptions, confidence levels and supporting evidence.

You’ll use structured walkthroughs and breach-and-attack-style validation where appropriate to confirm how controls behave, identify weak or unreliable coverage and explain the practical impact.

You’ll translate findings into prioritised exposure-reduction actions, detection requests and use-case recommendations, giving SOC and Detection Engineering teams the context they need to tune, triage and respond effectively.

Qualifications

What we’re looking for

You’ll bring strong experience in advanced threat analysis or threat-led defence, with the ability to apply adversary profiling, kill-chain and attack-path thinking in real environments.

You can test hypotheses through structured analysis and, where appropriate, breach-and-attack-style testing. You produce clear, defensible written assessments and turn technical evidence into focused, practical actions.

You communicate complex threats and control gaps clearly to technical and non-technical audiences. You’re comfortable taking ownership, balancing competing priorities and staying effective during elevated threat periods.

What you’ll get

• Competitive base salary + up to 20% bonus

• 7% employer pension contribution

• Private medical insurance

• 25 days holiday + bank holidays

• Annual credit towards an easyJet holiday

• Excellent staff travel benefits

• Flexible benefits package including share schemes

Diversity isn't a checkbox — it's how we fly

Threats are rarely understood from one perspective, and neither are strong defences. We welcome different backgrounds, experiences and ways of thinking, because a team that challenges assumptions and considers varied attack paths is better equipped to protect our people, customers and operation.

Reasonable Adjustments

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

Please note that this role does not meet the criteria for visa sponsorship, and we are therefore unable to consider applicants who require sponsorship to work in the UK.

Ready to turn threat insight into stronger defences? Apply now.

#LI-CH1 #LI-HYBRID

• Job Field: Legal
• Organization: Legal
• Schedule: Full-time