Senior Cyber Threat Hunting Analyst - AVP

Embark on a transformative journey as a Senior Cyber Threat Hunting Analyst within Barclays' Chief Information Security Office. This role is part of Cyber Operations, where the Threat Hunting team performs proactive hunting activities across Barclays' network estate to detect and mitigate advanced threats. As a Cyber Threat Hunting Lead Vice President, you’ll lead the proactive search for advanced threats, uncover risks before they become incidents, and help safeguard one of the world’s leading financial institutions. This role combines deep technical expertise with strategic leadership to shape threat hunting capabilities, influence detection strategy, and drive innovation across cyber operations.

About the role

Safeguards the organisation through continuous cyber security monitoring, rapid threat detection, and effective incident response. Operating at the centre of the Cyber Security Operations Centre (CSOC), this role ensures security events are quickly identified, assessed, and addressed using advanced monitoring tools and established response processes. You will provide specialist data leakage prevention by triaging potential leakage alerts and escalating through tested runbooks. Working collaboratively across cyber operations and wider teams, you will strengthen organisational resilience through robust detection capabilities, thorough investigations, and ongoing enhancement of security controls.

Responsibilities

• Maintain security monitoring capabilities, including perimeter security controls and endpoint security tooling, to identify, block, and respond to potential cyber security incidents.
• Continuously monitor and analyse security events using Security Information and Event Management (SIEM) and related tooling to detect anomalous activity, correlate alerts, and drive rapid and effective triage across all cyber threat vectors.
• Identify emerging threats, attack techniques, and relevant technologies, leveraging industry intelligence, threat research, and collaboration with both internal and external stakeholders to strengthen detection and response capabilities.
• Lead and coordinate cyber security incident response, ensuring effective containment, remediation, root-cause analysis, and closure in line with established runbooks, policies, and regulatory expectations.
• Act as a specialist for data leakage prevention, including triaging data leakage alerts, validating true positives, and escalating incidents via tested runbooks to prevent unauthorised data exfiltration.
• Demonstrate expert, hands-on Cyber Threat Hunting experience by developing intelligence-led, IOC-pivot, hunt-generated, and incident-driven hypotheses to uncover hidden adversary activity across Barclays’ estate and services.
• Bring deep knowledge of adversary tradecraft, attacker TTPs, attack paths, MITRE ATT&CK-aligned behaviors, and enterprise telemetry to assess exposure, identify control gaps, and prioritize hunt activity.
• Translate hunt findings into actionable defensive improvements by working closely with Cyber Threat Intelligence, CSOC, Incident Response, Detection Engineering, Purple Team, and Vulnerability Management to enhance detection, response, and control effectiveness.
• Communicate complex hunt findings clearly to senior technical and non-technical stakeholders, producing concise evidence-based reporting, recommendations, and follow-up actions.

Requirements

• Expert, hands-on Cyber Threat Hunting experience.
• Deep knowledge of adversary tradecraft, attacker TTPs, attack paths, MITRE ATT&CK-aligned behaviors, and enterprise telemetry.
• Practical experience with enterprise-scale hunting and analytics toolsets, including SIEM/search platforms, endpoint, identity, cloud, network, threat intelligence, and SOAR-enabled workflows.
• Exposure to Purple Team and Detection Engineering collaboration, including validating telemetry, confirming detections, identifying candidate hunts, and shaping detection suggestions.
• Familiarity with Financial Services cyber risk, regulatory, control, and evidence expectations.
• Relevant professional accreditation such as CISSP, CompTIA Security+, GIAC/SANS, CREST, OffSec, or equivalent practical experience.

Assistant Vice President Expectations

• Advise and influence decision-making, contribute to policy development, and take responsibility for operational effectiveness while collaborating closely with other functions and business divisions.
• Lead a team performing complex tasks, using well-developed professional knowledge and skills to deliver work that impacts the whole business function. Set objectives, coach employees, appraise performance, and determine reward outcomes.
• Demonstrate leadership behaviors (LEAD): Listen and be authentic, Energise and inspire, Align across the enterprise, Develop others.
• For individual contributors: Lead collaborative assignments, guide team members through structured tasks, identify new directions for projects, and incorporate cross-functional methodologies to meet required outcomes.
• Consult on complex issues, providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and develop new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work closely related to other areas, understanding how they coordinate and contribute to the objectives of the organisation sub-function.
• Collaborate with other areas of work to keep up to speed with business activity and strategy.
• Engage in complex analysis of data from multiple internal and external sources to solve problems creatively and effectively.
• Communicate complex or sensitive information effectively to diverse audiences.
• Influence or convince stakeholders to achieve desired outcomes.

Skills

• Strategic thinking and business acumen.
• Digital and technology expertise.
• Risk and controls management.
• Change and transformation leadership.

Benefits

• Competitive and generous employee benefits, including medical, dental, and vision coverage.
• 401(k) retirement plan.
• Life insurance.
• Paid leave for qualifying circumstances.
• Eligibility for an incentive award.

Pay

Base salary range: $125,000 – $170,000.

Schedule

This role is located in our Whippany, NJ office.