Senior Cyber Analyst

Senior Cyber Analyst

We are recruiting for a Senior Cyber Analyst to join our team at Admiral Money!

Admiral Money is the dynamic lending arm of Admiral Group, offering personal loans, motor finance, and homeowner loans since 2017. We’re building something special for our customers and are looking for curious, driven individuals ready to learn, take on challenges, and make an impact.

We’re proud to be a certified Great Place to Work for over 25 years, with recognition for Women and Wellbeing. Our inclusive culture empowers everyone to Be You.

The successful candidate will be expected to attend the Cardiff office up to two times per month.

Admiral Money is a fast‑growing, FCA‑regulated consumer lender operating in a cloud‑native environment. Our small Cyber team delivers a significant impact across the business, covering everything from threat detection and vulnerability management to security architecture and regulatory compliance.

As a Senior Cyber Security Analyst, you’ll be a key technical voice within the team. You’ll be involved in day‑to‑day security operations, our vulnerability management programme, and bring genuine cloud security expertise to a business that runs primarily on AWS.

You’ll be a cyber security generalist with deep expertise in key areas, working closely with Engineering, Infrastructure and Platform teams. You’ll be comfortable advising stakeholders at all levels and translating technical risk into language that supports effective business decision‑making.

We’re looking for someone who is curious, pragmatic, and enjoys working through complex details.

• Monitor and triage security alerts from SIEM, EDR and cloud‑native tooling (AWS Security Hub, Guard Duty, Cloud Trail, Defender).
• Lead incident response investigations from initial triage through to root cause analysis and lessons learned.
• Maintain and improve detection rules, alerting thresholds and response playbooks.
• Participate in an on‑call or escalation rota as required.

• Own the vulnerability management lifecycle, including scanning, triage, prioritisation and remediation tracking across cloud and on‑premise assets.
• Work with Engineering and Infrastructure teams to ensure timely remediation in line with agreed SLA targets.
• Produce clear, actionable vulnerability reporting for both technical and non‑technical audiences.
• Track and challenge exceptions, ensuring risk‑based decisions are documented appropriately.

• Apply security best practice across AWS (primary) and Azure environments, including IAM policy reviews, storage security, network controls, secrets management and logging coverage.
• Conduct configuration reviews and contribute to Cloud Security Posture Management (CSPM) tooling.
• Advise on secure design principles for new cloud workloads and architecture changes.
• Support Infrastructure and Platform teams in embedding security into IaC pipelines and CI/CD processes.

• Contribute to the maintenance of the risk register, control evidence and policy library.
• Support internal and external audit activity, including evidence preparation, responding to findings and tracking remediation activities.
• Assist in maintaining compliance with FCA expectations, PCI DSS and relevant data protection requirements.
• Horizon‑scan for emerging threats and regulatory changes relevant to the business.

• Act as a trusted technical advisor to colleagues across TSS and the wider business.
• Contribute to the Cyber team’s strategy, roadmap and continuous improvement initiatives.
• Act as a subject matter expert, providing internal cyber security consultancy across the business.
• Support engineering squads as a trusted source of cyber security expertise.

• Broad cyber security knowledge across technology, risk and engineering, with experience operating across multiple disciplines.
• Strong hands‑on experience in a cyber security role, ideally within a regulated financial services environment.
• Strong working knowledge of AWS security services, including Guard Duty, Security Hub, Cloud Trail,…