Job Description:

Role: Cyber Threat Intelligence Analyst

Location: Bath (Hybrid working)

Duration: 12 Months

Day rate: £550 Outside IR35

Active SC clearance required - preferably DV clearance

Role Overview

We are seeking a highly capable Cleared Cyber Threat Intelligence (CTI) Analyst to support a sensitive national‑security programme. The role focuses on identifying, analysing and reporting on cyber threats posed to government systems, critical national infrastructure and strategic interests.

You will operate in a highly secure environment, working closely with security operations, incident response, risk, and technical teams to deliver actionable intelligence that supports defensive and strategic decision‑making.

Key Responsibilities

• Collect, analyse and assess cyber threat intelligence from technical, human, open‑source and classified sources
• Monitor and analyse threat actor activity, including TTPs, malware, campaigns and infrastructure
• Produce high‑quality intelligence reports, briefings and threat assessments for technical and non‑technical stakeholders
• Support incident response and SOC teams with timely, contextual intelligence
• Maintain and develop threat intelligence repositories, playbooks and knowledge bases
• Contribute to strategic, operational and tactical intelligence outputs
• Brief senior stakeholders and security leadership as required
• Ensure handling of data complies with security, legal and governance frameworks

Required Skills & Experience

• Proven experience in a Cyber Threat Intelligence, Cyber Security, or Intelligence Analysis role
• Strong understanding of cyber threat actors, attack vectors, and threat landscapes
• Experience analysing malware, phishing, APT activity or cyber campaigns
• Familiarity with common CTI frameworks and standards (e.g. MITRE ATT&CK, Kill Chain, Diamond Model)
• Experience producing clear, actionable intelligence reporting
• Ability to assess confidence, credibility, and risk within intelligence products
• Comfortable working in highly classified / restricted environments

Desirable Experience

• Background in UK defence, intelligence, law enforcement, or national security organisations
• Experience with CTI platforms and tooling (e.g. MISP, ThreatQ, Anomali, OpenCTI)
• Technical knowledge of network security, cloud environments, or malware analysis
• Experience supporting strategic or policy‑level decision‑making