Cyber Security Lead – Analytics & Threat Detection

About the role

The Cyber Security Lead will own the end‑to‑end delivery of cyber analytics use cases, including fraud detection, threat intelligence and anomaly detection, using the Databricks platform. This role sits at the intersection of security operations and data analytics, translating business security needs into actionable analytical solutions.

Key responsibilities

• Translate cyber security use cases into scalable analytics solutions on Databricks.
• Define detection logic such as behavioural anomalies and intrusion patterns.
• Lead engagement with SOC teams, security operations and risk stakeholders.
• Govern data models, key performance indicators and output quality.
• Drive sprint planning, backlog prioritisation and delivery governance.

Required profile

• Strong background in cyber security operations, including SIEM and SOC workflows.
• Familiarity with the MITRE ATT&CK framework.
• Experience designing and delivering analytics solutions in a fast‑paced environment.

Required skills

• SIEM platforms
• SOC workflows
• MITRE ATT&CK
• SQL
• PySpark
• Basic machine‑learning concepts
• Databricks notebooks, workflows and Delta Lake
• Data analysis