Threat Operations Analyst

About the role

The Threat Operations Analyst supports daily operation of Internova's user‑facing security controls and helps identify, analyse, and remediate threats across the enterprise. The role blends hands‑on end‑user support, SOC escalation handling, and security tool administration with analytical work such as event triage, phishing analysis, threat intelligence, and vulnerability validation.

Key responsibilities

• Provide end‑user support for information‑security issues and handle SOC escalation requests.
• Administer security technologies including Mimecast, Microsoft 365 ATP, Cisco Umbrella, and Cisco AMP.
• Monitor and triage security events, escalating with thorough documentation for deeper analysis.
• Support phishing and business‑email‑compromise defenses, tune detection rules, and extract actionable indicators.
• Track travel‑sector threat activity using Recorded Future and other sources, summarising impact for Internova.
• Investigate brand impersonation, typosquatting, exposed services and coordinate takedown actions.
• Validate vulnerability scanner output, separate true findings from false positives, and track remediation.
• Assist the security team with projects, troubleshooting, and recommend tooling improvements.

Required profile

• Bachelor’s degree in computer science, cybersecurity, or related field, or equivalent practical experience.
• 0‑2 years of experience in security operations, threat analysis, penetration testing, or application security.
• Ability to methodically analyse security events, form hypotheses, and reach defensible conclusions.
• Understanding of common attack techniques against web applications, APIs, identity systems, and email.
• Familiarity with cloud platforms (AWS, Azure, or GCP) and core cloud‑security concepts.

Required skills

• Mimecast
• Microsoft 365 ATP
• Cisco Umbrella
• Cisco AMP
• Recorded Future
• AWS, Azure or GCP
• Cloud security fundamentals (identity, logging, network segmentation)
• Standard encryption technologies and cybersecurity technical controls