NMC Senior Cyber Threat Intelligence Specialist

• Support advanced threat hunting activities across national policing infrastructure, identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.
• Profile cyber adversaries by analyzing behavioral patterns, infrastructure, and motivations to inform strategic and tactical defense measures.
• Collaborate with national partners including NCSC and NCA to share intelligence, coordinate responses, and align threat assessments.
• Produce high-quality, actionable intelligence reports and briefings for a range of stakeholders, including technical teams, senior police leadership, and government departments.
• Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defense.
• Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives.
• Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence-led responses.
• Mentor and develop NMC colleagues, fostering a culture of continuous learning and analytical excellence.
• Perform a leadership role during the manager's absence, overseeing team operations, prioritizing workloads, and ensuring service continuity.
• Translate complex threat intelligence into clear, concise insights tailored to operational, strategic, and executive audiences.
• Present at various senior boards and forums (internal and external) on the benefits of establishing a healthy cyber security posture.

• Deep understanding of adversarial TTPs and threat actor lifecycles.
• Proven experience in malware, phishing, and SIEM log analysis.
• Strong grasp of threat modelling and risk assessment frameworks.
• Skilled in OSINT collection and analysis.
• Demonstrated leadership in CTI environments, including mentoring and service development.
• Excellent communication skills - able to translate complex threats into clear insights.
• Experience supporting cyber incident response under pressure.
• Ability to work independently and manage stakeholder relationships effectively.
• Eligible for SC and NPPV3 clearance.

Desirable:

• Highly experienced in cyber threat intelligence or analytical roles.
• GIAC Cyber Threat Intelligence (GCTI) or CREST Registered Threat Intelligence Analyst.
• Experience developing cybercrime mitigation strategies.
• Understanding of UK policing cyber environments and threat landscape.
• Completed intelligence analysis training (e.g., NIAT, RISC UK).

• Balance is important and we want you to take time off to recharge - we offer 28 days' annual leave plus bank holidays, rising to 30 days after 5 years of service.
• We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts
• Plan for the future - we offer an excellent pension scheme and life assurance cover

You can find out more here: Benefits - Police Digital Service (pds.police.uk)

About Police Digital Service

We exist to harness the power of digital, data and technology to enable UK policing to better protect the communities it serves. Ours is a team of experts in commercial services, technical assurance, data, digital transformation and innovation, with a unique experience in policing and national programme delivery.

Our Values are:

• We value People
• We do the right thing
• We are innovative
• We are one Team
• We are proud and passionate

At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week. Please note that in Q3 of 2025, the NMC will be relocating to offices in the Wigan area. All applicants must be eligible for NPPV3 and SC clearances. Successful applicants will require NPPV3 clearance to have been approved before starting with PDS.