NMC Senior Cyber Threat Intelligence Specialist
<p><b>Salary: £35,000 - 60,000 per year</b></p>
<b>Requirements:</b>
<ul><li>Deep understanding of adversarial tactics, techniques, and procedures (TTPs) and threat actor lifecycles.</li><li>Proven experience in malware, phishing, and SIEM log analysis.</li><li>Strong grasp of threat modeling and risk assessment frameworks.</li><li>Skilled in OSINT collection and analysis.</li><li>Demonstrated leadership in Cyber Threat Intelligence (CTI) environments, including mentoring and service development.</li><li>Excellent communication skills, able to translate complex threats into clear insights.</li><li>Experience supporting cyber incident response under pressure.</li><li>Ability to work independently and manage stakeholder relationships effectively.</li><li>Eligible for SC and NPPV3 clearance.</li><li>Highly experienced in cyber threat intelligence or analytical roles (desirable).</li><li>GIAC Cyber Threat Intelligence (GCTI) or CREST Registered Threat Intelligence Analyst (desirable).</li><li>Experience developing cybercrime mitigation strategies (desirable).</li><li>Understanding of UK policing cyber environments and threat landscape (desirable).</li><li>Completed intelligence analysis training (e.g., NIAT, RISC UK) (desirable).</li></ul>
<b>Responsibilities:</b>
<ul><li>Support advanced threat hunting activities across national policing infrastructure, identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.</li><li>Profile cyber adversaries by analyzing behavioral patterns, infrastructure, and motivations to inform strategic and tactical defense measures.</li><li>Collaborate with national partners including NCSC and NCA to share intelligence, coordinate responses, and align threat assessments.</li><li>Produce high-quality, actionable intelligence reports and briefings for various stakeholders, including technical teams, senior police leadership, and government departments.</li><li>Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defense.</li><li>Support and lead pre-incident planning, threat modeling, and attack surface reduction initiatives.</li><li>Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence-led responses.</li><li>Mentor and develop NMC colleagues, fostering a culture of continuous learning and analytical excellence.</li><li>Perform a leadership role during the managers absence, overseeing team operations, prioritizing workloads, and ensuring service continuity.</li><li>Translate complex threat intelligence into clear, concise insights tailored to operational, strategic, and executive audiences.</li><li>Present at various senior boards and forums (internal and external) on the benefits of establishing a healthy cybersecurity posture.</li></ul>
<b>Technologies:</b>
<ul><li>Support</li><li>LESS</li><li>Security</li></ul>
<p><b>More:</b></p>
<p>We are Police Digital Service, dedicated to harnessing the power of digital, data, and technology to enable UK policing to better protect the communities it serves. Our team consists of experts in commercial services, technical assurance, data, digital transformation, and innovation, all with unique experience in policing and national program delivery. We offer a friendly and flexible working environment with excellent benefits, including 28 days of annual leave plus bank holidays, rising to 30 days after 5 years. We also provide an excellent pension scheme, life assurance cover, and comprehensive training and development resources. Our values emphasize the importance of people, doing the right thing, innovation, teamwork, and pride in our work.</p>
<p>last updated 8 week of 2026</p>
<b>Requirements:</b>
<ul><li>Deep understanding of adversarial tactics, techniques, and procedures (TTPs) and threat actor lifecycles.</li><li>Proven experience in malware, phishing, and SIEM log analysis.</li><li>Strong grasp of threat modeling and risk assessment frameworks.</li><li>Skilled in OSINT collection and analysis.</li><li>Demonstrated leadership in Cyber Threat Intelligence (CTI) environments, including mentoring and service development.</li><li>Excellent communication skills, able to translate complex threats into clear insights.</li><li>Experience supporting cyber incident response under pressure.</li><li>Ability to work independently and manage stakeholder relationships effectively.</li><li>Eligible for SC and NPPV3 clearance.</li><li>Highly experienced in cyber threat intelligence or analytical roles (desirable).</li><li>GIAC Cyber Threat Intelligence (GCTI) or CREST Registered Threat Intelligence Analyst (desirable).</li><li>Experience developing cybercrime mitigation strategies (desirable).</li><li>Understanding of UK policing cyber environments and threat landscape (desirable).</li><li>Completed intelligence analysis training (e.g., NIAT, RISC UK) (desirable).</li></ul>
<b>Responsibilities:</b>
<ul><li>Support advanced threat hunting activities across national policing infrastructure, identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.</li><li>Profile cyber adversaries by analyzing behavioral patterns, infrastructure, and motivations to inform strategic and tactical defense measures.</li><li>Collaborate with national partners including NCSC and NCA to share intelligence, coordinate responses, and align threat assessments.</li><li>Produce high-quality, actionable intelligence reports and briefings for various stakeholders, including technical teams, senior police leadership, and government departments.</li><li>Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defense.</li><li>Support and lead pre-incident planning, threat modeling, and attack surface reduction initiatives.</li><li>Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence-led responses.</li><li>Mentor and develop NMC colleagues, fostering a culture of continuous learning and analytical excellence.</li><li>Perform a leadership role during the managers absence, overseeing team operations, prioritizing workloads, and ensuring service continuity.</li><li>Translate complex threat intelligence into clear, concise insights tailored to operational, strategic, and executive audiences.</li><li>Present at various senior boards and forums (internal and external) on the benefits of establishing a healthy cybersecurity posture.</li></ul>
<b>Technologies:</b>
<ul><li>Support</li><li>LESS</li><li>Security</li></ul>
<p><b>More:</b></p>
<p>We are Police Digital Service, dedicated to harnessing the power of digital, data, and technology to enable UK policing to better protect the communities it serves. Our team consists of experts in commercial services, technical assurance, data, digital transformation, and innovation, all with unique experience in policing and national program delivery. We offer a friendly and flexible working environment with excellent benefits, including 28 days of annual leave plus bank holidays, rising to 30 days after 5 years. We also provide an excellent pension scheme, life assurance cover, and comprehensive training and development resources. Our values emphasize the importance of people, doing the right thing, innovation, teamwork, and pride in our work.</p>
<p>last updated 8 week of 2026</p>