What the role is

We are looking for candidates who are interested in both cybersecurity and data analytics. Your role is to apply analytical skills to evaluate cyber threat activities, detect anomalies, and produce insights that improve defensive decision-making.

What you will be working on

As a Cyber Analytics Engineer, you will support cyber threat intelligence and security analytics operations in selected or a combination of the following areas:

• Aggregate, clean, and enrich large volumes of security data from multiple sources (logs, alerts, network telemetry, cloud signals).
• Design and develop cyber-analytics solutions to enable threat analysis and support decision-making.
• Contextualise and correlate threat events to produce actionable intelligence (e.g., hypotheses, detections, prioritised leads).
• Conduct data mining on complex datasets to derive emerging trends and patterns for anomaly detection.
• Present and communicate findings (threat incidents and/or threat landscape) to both technical and non-technical stakeholders.
• Evaluate and improve internal, commercial, and open-source tools to enhance workflows and response speed.
• Support incident investigations with structured analysis, timelines, and clear documentation.

What we are looking for

• Self-motivated, open-minded, resourceful, meticulous; able to work independently and in teams.
• Competent in at least one programming language: Python, R, Scala
• Interest and ability to learn other languages, frameworks, and technologies.
• Familiarity with one or more databases and querying languages (e.g., SQL).

Knowledge/experience in any of the following would be an advantage:

• Machine learning (e.g., predictive analytics, natural language processing)
• Data analytics (e.g., descriptive statistics, modelling)
• Algorithms & data structures
• Big data technologies (e.g., Hadoop, Spark, Hive, Elasticsearch)
• Data visualisation (e.g., Power BI, Tableau, D3, dashboarding)
• Network protocols and telemetry (e.g., NetFlow, DNS, TLS, proxies)
• Cyber attack lifecycle concepts (e.g., kill chain, TTPs, C2 infrastructure)

Additional Notes

We wish to inform that only shortlisted candidates will be notified.