Embark on a transformative journey as a Senior Cyber Threat Hunting Analyst - AVP. At Barclays, our vision is clear –to redefine the future of banking and help craft innovative solutions. As part of the Chief Information Security Office, working within Cyber Operations, the Threat Hunting team is responsible for performing proactive hunting activities across Barclays network estate to detect & mitigate advanced threats. As a Cyber Threat Hunting Lead Vice President at Barclays, you’ll lead the proactive search for advanced threats, uncovering risks before they become incidents and helping safeguard one of the world’s leading financial institutions. Combining deep technical expertise with strategic leadership, you’ll shape threat hunting capabilities, influence detection strategy, and drive innovation across cyber operations. This is a unique opportunity to work with cutting-edge technologies, tackle some of the industry’s most complex security challenges, and see the direct impact of your work on Barclays’ resilience and future success.
To be successful as a Senior Cyber Threat Hunting Analyst - AVP, you should:
Demonstrate expert, hands-on Cyber Threat Hunting experience, developing intelligence-led, IOC-pivot, hunt-generated and incident-driven hypotheses to uncover hidden adversary activity across Barclays’ estate and services
Bring deep knowledge of adversary tradecraft, attacker TTPs, attack paths, MITRE ATT&CK-aligned behaviors and enterprise telemetry, using that knowledge to assess exposure, identify control gaps and prioritize hunt activity
Translate hunt findings into actionable defensive improvements by working closely with Cyber Threat Intelligence, CSOC, Incident Response, Detection Engineering, Purple Team and Vulnerability Management, ensuring hunt outcomes improve detection, response and control effectiveness
Communicate complex hunt findings clearly to senior technical and non-technical stakeholders, producing concise evidence-based reporting, recommendations and follow-up actions for wider action within Barclays
Other highly valued skills include:
Practical experience with enterprise-scale hunting and analytics toolsets, including SIEM/search platforms, endpoint, identity, cloud, network, threat intelligence and SOAR-enabled workflows
Exposure to Purple Team and Detection Engineering collaboration, including validating telemetry, confirming detections, identifying candidate hunts and shaping detection suggestions without owning those functions
Familiarity with Financial Services cyber risk, regulatory, control and evidence expectations, supported by relevant professional accreditation such as CISSP, CompTIA Security+, GIAC/SANS, CREST, OffSec or equivalent practical experience
You may be assessed on the key critical skills relevant for success in this role, such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, as well as job-specific technical skills.
This role is located in our Whippany, NJ office.
Minimum Salary: $125,000
Maximum Salary: $170,000
The minimum and maximum salary/rate information above includes only base salary or base hourly rate. It does not include any other type of compensation or benefits that may be available.
Barclays employees are eligible for a suite of competitive and generous employee benefits, including medical, dental and vision coverage, 401(k), life insurance, and other paid leave for qualifying circumstances.
This position is eligible for an incentive award.
Purpose of the role
Safeguards the organisation through continuous cyber security monitoring, rapid threat detection, and effective incident response. Operating at the centre of the Cyber Security Operations Centre (CSOC), it ensures security events are quickly identified, assessed and addressed using advanced monitoring tools and established response processes. Provide specialist data leakage prevention by triaging potential leakage alerts and escalating through tested runbooks. Working collaboratively across cyber operations and wider teams, strengthens organisational resilience through robust detection capabilities, thorough investigations, and ongoing enhancement of security controls.
Accountabilities
Maintain security monitoring capabilities, including perimeter security controls, in addition to endpoint security tooling, to identify, block and respond to potential cyber security incidents
Continuously monitor and analyse security events using Security Information and Event Management (SIEM) and related tooling to detect anomalous activity, correlate alerts, and drive rapid and effective triage across all cyber threat vectors.
Identify emerging threats, attack techniques and relevant technologies, leveraging industry intelligence, threat research, and collaboration with both internal and external stakeholders to strengthen detection and response capabilities.
Lead and coordinate cyber security incident response, ensuring effective containment, remediation, root‑cause analysis and closure in line with established runbooks, policies and regulatory expectations.
Act as a specialist for data leakage prevention including triaging data leakage alerts, validating true positives, and escalating incidents via tested runbooks to prevent unauthorised data exfiltration.
Assistant Vice President Expectations
To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
Take ownership for managing risk and strengthening controls in relation to the work done.
Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc).to solve problems creatively and effectively.
Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
Influence or convince stakeholders to achieve outcomes.
All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.
