Cyber Threat Intelligence Analyst

Role: Cyber Threat Intelligence Analyst

Location: Bath (Hybrid working)

Duration: 12 Months

Day rate: £550 Outside IR35

Active SC clearance required - preferably DV clearance

Role Overview

We are seeking a highly capable Cleared Cyber Threat Intelligence (CTI) Analyst to support a sensitive national‑security programme. The role focuses on identifying, analysing and reporting on cyber threats posed to government systems, critical national infrastructure and strategic interests.

You will operate in a highly secure environment, working closely with security operations, incident response, risk, and technical teams to deliver actionable intelligence that supports defensive and strategic decision‑making.

Key Responsibilities

Collect, analyse and assess cyber threat intelligence from technical, human, open‑source and classified sources
Monitor and analyse threat actor activity, including TTPs, malware, campaigns and infrastructure
Produce high‑quality intelligence reports, briefings and threat assessments for technical and non‑technical stakeholders
Support incident response and SOC teams with timely, contextual intelligence
Maintain and develop threat intelligence repositories, playbooks and knowledge bases
Contribute to strategic, operational and tactical intelligence outputs
Brief senior stakeholders and security leadership as required
Ensure handling of data complies with security, legal and governance frameworks

Required Skills & Experience

Proven experience in a Cyber Threat Intelligence, Cyber Security, or Intelligence Analysis role
Strong understanding of cyber threat actors, attack vectors, and threat landscapes
Experience analysing malware, phishing, APT activity or cyber campaigns
Familiarity with common CTI frameworks and standards (e.g. MITRE ATT&CK, Kill Chain, Diamond Model)
Experience producing clear, actionable intelligence reporting
Ability to assess confidence, credibility, and risk within intelligence products
Comfortable working in highly classified / restricted environments

Desirable Experience

Background in UK defence, intelligence, law enforcement, or national security organisations
Experience with CTI platforms and tooling (e.g. MISP, ThreatQ, Anomali, OpenCTI)
Technical knowledge of network security, cloud environments, or malware analysis
Experience supporting strategic or policy‑level decision‑making