Threat Intelligence Analyst

About this role

Our client is establishing a brand-new Threat Intelligence function from the ground up to proactively defend national security assets. We are currently looking for both Senior Threat Intelligence Analysts and Intermediate Threat Intelligence Analysts to join their growing Cyber Security Operations team.

If you are an intelligence-led defender who thrives on transforming raw data into actionable insights, we want to hear from you.

The Opportunity

Our client has opportunities for experienced analysts to lead the strategic direction and for ambitious junior analysts to develop their skills in a complex, high-stakes IT/OT environment.

• Senior Threat Intelligence Analyst: Lead intelligence strategy, drive innovation in analytic practices, mentor the team, and influence senior stakeholders.
• Threat Intelligence Analyst (Intermediate): Deliver core intelligence outputs, support SOC and incident response teams, and grow your expertise in the intelligence lifecycle.

Key Responsibilities (Both Levels)

• Plan, gather, process, and analyse threat information from varied sources (open, closed, internal, dark web) relevant to the civil nuclear and critical infrastructure sectors.
• Produce high-value intelligence outputs, ranging from technical indicators (IOCs) to strategic advisory for business and operational risk decision-makers.
• Assess emerging threats, actor tactics, vulnerabilities, and trends, contextualising findings for organisational impact.
• Collaborate with SOC, engineering, and incident response teams to ensure intelligence integration and alignment with current threats.
• Maintain relationships with external partners, government bodies, and sector-specific threat-sharing groups.
• Develop and enhance processes, methodologies, and policies for the threat intelligence function.

Additional duties for the Senior Analyst

• Lead/direct intelligence planning, collection, and analysis initiatives.
• Drive strategic intelligence initiatives and pioneer new analytic practices.
• Mentor, develop, and manage junior analysts.
• Represent the client in threat intelligence communities and strategic forums.

What Our Client Is Looking For

Essential Skills (Both Levels)

• Proven experience in Cyber Threat Intelligence, including practical application of the intelligence lifecycle (planning, collection, analysis, dissemination).
• Strong analytical, investigative, and report-writing abilities.
• Familiarity with Threat Intelligence Platforms (TIPs), OSINT, SIEM, and frameworks such as MITRE ATT&CK.
• Excellent written and verbal communication skills, with the ability to produce clear, concise reports for technical and non-technical audiences.
• Ability to work with incomplete, ambiguous, or conflicting information and make reasoned judgements.

Desirable

• Sector-specific knowledge (nuclear, critical infrastructure, or other regulated industries).
• Relevant certifications such as SANS FOR578 (GCTI) or CREST CTIA.

The Senior Role Requires

• Extensive experience leading or managing threat intelligence functions in complex or regulated environments.
• Demonstrated ability to influence at a senior level and deliver projects/programmes independently.
• Proven experience mentoring, coaching, or managing a team of analysts.

The Intermediate Role Requires

• Solid foundational experience in threat intelligence or a closely related analytical field (e.g., SOC analysis, security research).
• Capability to execute assigned intelligence tasks with autonomy and escalate complex issues as needed.
• A strong eagerness to learn and contribute to team knowledge and capability development.

About intelligence & analysis roles for ex-police

Intelligence analyst and researcher roles in corporates, consultancies and government. The National Intelligence Model, source evaluation and analytical products give ex-officers a running start.