Digital Threat Analyst

We are seeking a Digital Threat Analyst to join the team! Are you a curious, detail-oriented professional with a passion for solving complex online threat challenges? This is a compelling opportunity to join a growing cybersecurity business, playing a key role in detecting, investigating, and disrupting digital threats targeting leading organisations' brands, customers, and employees. Working directly with clients and across phishing, domain abuse, and online impersonation cases, this role offers genuine ownership, variety, and the chance to shape service delivery as the business continues to scale. We help organisations detect, investigate, and disrupt digital threats targeting their brands, customers, and employees. Combining automation, threat intelligence, and expert analysis, their platform identifies online abuse and coordinates enforcement across the internet. As they continue to grow with new clients and expanding services, this is an exciting time to join their Threat Operations team and help shape how the service is delivered at scale. What you'll be doing? Conducting digital threat investigations — Reviewing platform alerts and client submissions, assessing risk, and gathering evidence using open-source intelligence, DNS and registration data, and technical analysis. Validating platform workflows — Checking that monitoring, case routing, and automation are working effectively, investigating missed threats and gaps that could impact client coverage. Managing case priorities — Prioritising work against risk and service levels, following established processes, and maintaining accurate and up-to-date case records. Progressing enforcement cases — Using reporting and enforcement routes across registrars, hosting and DNS providers, social platforms, marketplaces, and other online services to drive cases toward resolution. Escalating and resolving stalled cases — Stepping in when enforcement stalls or the platform cannot determine next steps, reviewing prior actions, and progressing the case through alternative approaches. Supporting client relationships — Understanding each client's brand, priorities, and agreed service scope, providing clear updates, explaining findings, and participating actively in client meetings. Improving service delivery — Developing repeatable enforcement workflows from new or difficult cases, and identifying opportunities to improve monitoring, automation, and team processes. Staying current on emerging threats — Keeping up to date with evolving threats and changes to provider policies to ensure the service remains sharp and effective. Contributing to team capability — Supporting the development of procedures, quality checks, training, and knowledge sharing across the broader team. Who are we looking for? Relevant industry experience — Experience in cybersecurity, threat intelligence, fraud, brand protection, trust and safety, online investigations, or a related technical environment is essential. Threat and fraud knowledge — A strong understanding of phishing, impersonation, domain abuse, and online fraud. Enforcement reporting experience — Experience reporting threats to online service providers, tracking responses, and following up when initial action is unsuccessful. Open-source investigation skills — Strong investigative skills, including the use of DNS, domain registration data, and other online intelligence sources. Customer-facing experience — The ability to explain technical findings clearly, lead operational discussions, and provide confident updates to clients. Judgement and attention to detail — Sound judgement combined with meticulous attention to detail, with the ability to manage concurrent cases and adapt when a standard workflow does not work. Case management confidence — Comfortable using case management systems and reviewing data to identify gaps or unexpected results. Enforcement route experience — Experience using a range of enforcement routes such as registrars, hosting and DNS providers, social platforms, or marketplaces is desirable. Trademark and copyright knowledge — Knowledge of trademark, copyright, DMCA, or platform policy-based enforcement is desirable and will be well regarded. Enterprise client experience — Experience supporting enterprise clients or working in brand protection, digital risk protection, trust and safety, fraud, or security operations is advantageous. DNS infrastructure knowledge — Deeper knowledge of DNS infrastructure and domain registration processes is desirable but not essential. Why you should consider this opportunity? We offer an attractive remuneration package and other benefits, such as: Meaningful work — Help organisations respond to phishing, scams, and impersonation that can cause real harm to their customers and brand reputation. Direct client engagement — Build genuine relationships with major organisations, helping them understand the threats they face and the action being taken on their behalf. Genuine influence — Use insights from challenging cases to help shape enforcement workflows, platform improvements, and service delivery as the business grows. Ownership of outcomes — Join a small, close-knit team where you can follow issues through to resolution and see the direct impact of your work. Career growth — Develop your expertise and take on broader responsibility as the business continues to expand. Hybrid working arrangement — A flexible hybrid model with two days in the office (Tuesdays and Thursdays) and three days working from home. Premium office environment — Based at The Forum in Cremorne, a vibrant coworking space featuring beer taps, a golf simulator, a rooftop basketball court, and a beer garden, with excellent access to public transport. How to apply Ready to join this role? Click Apply now to submit your resume and share your availability and expected salary with us! We welcome applications from professionals who enjoy solving difficult problems and taking ownership of outcomes — if this sounds like you, we would love to hear from you. All information received will be kept strictly confidential and will be used only for employment-related purposes.