Threat Intelligence Analyst - SC Cleared

We are seeking three Threat Intelligence Analysts to join a specialist consultancy supporting the delivery of cyber security services across a range of government projects and digital transformation programmes.

This is an exciting opportunity to work within a complex and evolving threat landscape, supporting the protection of critical public services and highly sensitive environments. As a Threat Intelligence Analyst, you will be responsible for identifying, analysing, and communicating cyber threats that may impact clients, systems, and services.

Working closely with Security Operations, Incident Response, Engineering, and wider Cyber Security teams, you will help build situational awareness, deliver actionable intelligence, and strengthen detection and response capabilities across multiple government-focused engagements. Key Responsibilities

Threat Monitoring & Intelligence Analysis

• Monitor and assess a wide range of intelligence sources, including OSINT, commercial intelligence platforms, security telemetry, online databases, and intelligence feeds.
• Identify, analyse, and prioritise actionable cyber threats relevant to client environments.
• Maintain awareness of emerging threat actors, campaigns, vulnerabilities, and attack techniques.
• Develop intelligence-led insights to support proactive cyber defence activities.

Research & Reporting

• Conduct in-depth research into cyber threats, threat actors, vulnerabilities, and industry trends.
• Produce high-quality intelligence reports, threat assessments, executive summaries, and technical briefings.
• Deliver actionable intelligence products to both technical and non-technical stakeholders.
• Communicate complex cyber threats in a clear and accessible manner.

Threat Hunting & Indicators of Compromise

• Analyse Indicators of Compromise (IoCs), including malicious IP addresses, domains, file hashes, and malware indicators.
• Support the identification of threat actor behaviours, tactics, techniques, and procedures (TTPs).
• Develop recommendations to strengthen defensive controls and improve detection capabilities.
• Contribute to proactive threat hunting and intelligence-led investigations.

Incident Response Support

• Support cyber incident investigations throughout the intelligence life cycle.
• Work closely with Incident Response and Security Operations teams to enrich investigations with threat intelligence.
• Assist with incident containment, remediation activities, and post-incident analysis.

Threat Modelling & Intelligence Frameworks

• Apply recognised threat intelligence methodologies including:
• MITRE ATT&CK
• Cyber Kill Chain
• Pyramid of Pain
• Diamond Model
• Identify intelligence gaps and opportunities to improve threat detection and response capabilities.

Strategic Threat Intelligence

• Contribute to tactical, operational, and strategic intelligence activities.
• Support the development and maturity of threat intelligence capabilities.
• Provide proactive threat warnings and situational awareness to stakeholders.
• Support the protection of critical systems, services, and infrastructure through intelligence-led decision making.

• Minimum one year’s experience in Cyber Security or a related discipline.
• Strong understanding of:
• Cyber Threat Intelligence principles
• Threat Actor Analysis
• Intelligence Collection and Dissemination Processes
• Cyber Security Operations
• Experience using threat intelligence and analysis platforms such as:
• Recorded Future
• OpenCTI
• Cribl
• Splunk
• Other intelligence and SIEM technologies
• Knowledge of threat intelligence frameworks including:
• MITRE ATT&CK
• Cyber Kill Chain
• Pyramid of Pain
• Diamond Model
• Strong analytical, investigative, and problem-solving skills.
• Ability to identify, assess, and prioritise actionable intelligence.
• Excellent communication and stakeholder engagement skills.
• Active SC Clearance.

Preferred Certifications

The following certifications would be advantageous but are not essential:

• GIAC Cyber Threat Intelligence (GCTI)
• CISSP
• CEH
• GIAC Certifications
• CompTIA Security+
• Crest Certifications
• SANS Cyber Security Certifications