Threat Operations Analyst

About the role

The Threat Operations Analyst supports daily operation of Internova's end‑user facing security controls and helps identify, analyse, and remediate threats affecting the enterprise. The role blends hands‑on security tool administration, end‑user support, and threat‑intelligence analysis within a fast‑paced travel‑services environment.

Key responsibilities

• Address end‑user security support requests and SOC escalations.
• Administer user‑facing security tools such as Mimecast, Microsoft 365 ATP, Cisco Umbrella and Cisco AMP.
• Monitor and triage security events across internal platforms, escalating incidents with thorough documentation.
• Analyze phishing and business‑email‑compromise reports, tune detection rules, and extract indicators for blocking.
• Track travel‑industry threat activity using Recorded Future and other sources, summarising impact for the business.
• Investigate brand impersonation, typosquatting, exposed services and credential leaks, coordinating takedown actions.
• Validate vulnerability‑scanner output, differentiate false positives and drive remediation with owners.

Required profile

• Bachelor’s degree in computer science, cybersecurity, software engineering or equivalent practical experience.
• 0‑2 years of experience in security operations, threat analysis, penetration testing or related fields.
• Ability to analyse logs, form hypotheses and determine whether activity is malicious, suspicious or benign.
• Strong written and verbal communication skills for explaining technical risk to non‑technical stakeholders.

Required skills

• Hands‑on experience with Mimecast, Microsoft 365 ATP, Cisco Umbrella and Cisco AMP.
• Threat‑intelligence platforms such as Recorded Future.
• Familiarity with cloud environments (AWS, Azure or GCP) and core cloud‑security concepts.
• Understanding of common web‑application and email attack techniques.
• Knowledge of indicators of compromise, enrichment processes and encryption technologies.

What we offer

• Medical insurance, meal tickets and transportation allowance.
• Paid time off and discounted employee travel options.
• Access to LinkedIn Learning webinars and courses.