Threat Intelligence Analyst

Threat Intelligence Analyst

Our client a seeking a Threat Intelligence Analyst to join their security team.

Responsibilities

• Collaborate with Incident Responders, Security Operations and other teams to define and prioritise cyber threat indicators.
• Maintain a comprehensive understanding of the evolving threat landscape to provide high-level situational awareness and proactive warnings about emerging threats.
• Monitor and analyse intelligence sources, including internal data, open-source reports, online databases and restricted intelligence sources, to identify actionable areas of interest.
• Conduct in-depth research and produce detailed reports on cybersecurity and threat intelligence topics, including current threats, threat actors, vulnerabilities and evolving trends.
• Use Indicators of Compromise, including files, IP addresses and hashes, to identify threat actors, understand their methods and develop strategies to prevent future attacks.
• Conduct investigations following the intelligence cycle.
• Assist with the handling and remediation of security incidents.
• Support security-related programmes through data analysis, assessments and reporting.
• Apply common analysis techniques and frameworks, including Kill Chain, Pyramid of Pain, MITRE ATT&CK and Diamond Model, to enhance threat detection and response capabilities.
• Contribute to the strategic, operational and tactical components of the Intelligence function within the Threat Intelligence team.
• Ensure threat intelligence activities align with organisational security goals.

Qualifications, Experience & Skills

• At least one year of experience in cybersecurity or a related field (Threat Intelligence Analyst preferred)
• Strong understanding of threat intelligence concepts, frameworks and methodologies.
• Familiarity with threat intelligence and analysis tools and platforms, including Recorded Future, OpenCTI, Cribl and Splunk.
• Knowledge of threat modelling techniques, including Kill Chain, Pyramid of Pain, MITRE ATT&CK and Diamond Model.
• Strong analytical and problem-solving skills, with the ability to identify and prioritise actionable intelligence.
• Experience working with government or critical national infrastructure organisations is preferred.
• Advanced cybersecurity or threat intelligence certifications, such as GCTI, CISSP, CEH or GIAC, are preferred.
• Strong written and verbal communication skills, with the ability to produce high-quality intelligence reports and briefings.