Senior Threat Intelligence Analyst

The John Lewis Partnership’s Information Security strategy is bold and ambitious. We provide a collection of security services, delivered through people, processes and technology. Working collaboratively, these services ensure that customers can shop with us efficiently, safely and securely, every single day.

A key component of this is the Threat Defence team. A group of Partners who take active responsibility for understanding threats posed to the Partnership, the vulnerabilities that we're carrying, the testing of the security defences we put in place to protect us, and the engineering of key security systems.

If you’re passionate about cyber security, if you thrive and perform in fast-paced, high-demand scenarios, and if you want to make a real difference at the UK’s largest co-owned retailer, then this role is for you.

In addition to your contractual pay, any time worked between 22:00 - 06:00 will attract Night Premium at a rate of £5.25 per hour. This will also apply to existing Partners who have enrolled onto Enhanced Hours Premium arrangements.

At a glance

• Contract Type - This position is a permanent contract
   

• Working Pattern - This is a hybrid working role, therefore your time will primarily be split between working from home and the Bracknell Head Office. However, there will also be an expectation to visit other locations as the need arises. 
   

• Our team currently works from the office around once a week to connect and on a more ad-hoc basis to attend key meetings, but again the frequency is dependent on the business needs.
   

• Salary range - The salary range for this role is set at £52,000 - £77,000 (depending upon experience).
   

Key Responsibilities

• Your focus in this role will be to carry out activities to identify, understand and report on threats to the Partnership using a variety of tools, 3rd party specialists and strategic intelligence feeds.

• You’ll work with those tools and feeds, while maintaining platforms and processes, to keep a relevant and up-to-date view of threats and indicators of compromise against the Partnership. You will also maintain a view of the threat landscape facing the UK and the Retail industry.

• You will design and run Threat Hunts across our infrastructure and systems, utilising intelligence gathered along with Partnership tooling. You will then generate reporting on your findings at appropriate levels (technical analysis, management summary, etc).

• You’ll work within the team and with a variety of stakeholders to support the provision of up-to-the-minute intelligence to our Partnership, in context with the business, our customers, Partners and suppliers.

• Working closely with our Vulnerability Management team, you will integrate threat intelligence into remediation efforts and leverage scan data to guide threat hunting initiatives and future intelligence reporting.

Internally the role is known as Senior Information Security Analyst. 

Essential skills you’ll need

• Experience working within cyber security.
   

• Experience writing threat intelligence reports, at a level appropriate for a variety of audiences, to enable greater understanding and decision making informed by cyber threat intelligence.

• Experience with threat management, perhaps as part of a wider cyber role, including the management of feeds, and the translation of threat into business context and language.
   

• Experience with threat hunting, including hypothesis design, log analysis, documentation, and reporting.

• Great communication skills and the ability to engage and influence stakeholders.
   

• An awareness of cyber security trends and the current cyber threat landscape.

Desirable skills and experience

• Experience working with vulnerability management tooling.
   

• Experience in the use of security frameworks, such as Mitre ATT&CK and the Cyber Kill Chain.
   

• Formal accreditation in Information Security such as a related degree, ISC2 CISSP, Certified Ethical Hacker, CompTIA Security+, CompTIA Pentest+ or similar.
   

• Experience of utilising and/or managing a Threat Intelligence Platform (TIP).

Additional Information: 

• Interviews potentially commence from w/c 12th October 2026.

#Hybrid

#LI-LS1

We’re the largest employee owned business in the UK and home of our cherished brands, John Lewis and Waitrose. We’re not just employees, we’re Partners, driven by our purpose to build a happier world. As we look to our future, there’s never been a more exciting time to join us.  

We’re ruthlessly focused on being brilliant at retail. We continue to innovate, adapt and diversify. Never Knowingly Undersold on price, quality and service in John Lewis and passionately serving food-lovers in Waitrose.   

As Partners we all share the responsibility of ownership and in its rewards. We use our voices to contribute to our success, working together through the good and challenging times, holding true to our behaviours and treating everyone with kindness and respect. 

We all own making the Partnership somewhere we belong. Embracing our differences and creating an environment where we’re free to be ourselves and can THRIVE. Growing ourselves individually, and as a collective. 

As Partners, we make all the difference. And, we all own it.  

Important points to note:  

It’s important to note that some of our roles are subject to pre-employment vetting (which may include DBS checks for successful candidates). If required, you’ll be informed and provided with information about vetting during the recruitment process and we encourage you to complete any vetting documents quickly to avoid delays. Any DBS checks required will be carried out by a third-party registered body and financial probity checks may also be required for some of our roles.  

We occasionally close vacancies early in the event we receive a high volume of applications, and therefore, we recommend you apply early. If you require a reasonable adjustment due to a disability which means you may need longer to complete your application please contact us as soon as possible.

We want all of our Partners to have a good work-life balance and we support flexible working. This might mean flexible or compressed hours, job sharing or shorter hour contracts, where possible. Please discuss this further with the hiring manager during your interview.