Senior Cyber Threat Analyst
| Posting date: | 27 November 2025 |
|---|---|
| Salary: | £44,720 per year |
| Additional salary information: | New entrants to the Civil Service will start their role on the salary band minimum £44,720 for National roles. You may be eligible for an additional non-pensionable allowance, pending a Capability and Skills assessment, with a value of up to £12,680. |
| Hours: | Full time |
| Closing date: | 04 December 2025 |
| Location: | Liverpool |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 438840/1 |
Summary
This role manages the response procedures and investigations of security events or incidents.
You’ll use your skills to:
- Lead a response team, developing capability to meet emerging threats and implement complex solutions.
- Support strategy and policy development for risk response focussing on process improvement.
- Support the management of the response to incidents, communicating with other business areas to ensure an effective response and mitigate against future incidents.
You’ll join an expert team of cyber professionals, committed to fighting cyber-attack across a complex network of systems. You’ll be aided by a supportive organisational culture, and a commitment to further your continuous development.
Where business needs allow, some roles may be suitable for a combination of office and home-based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office. Applicants can raise any queries to the email address at the bottom of the advert.
Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.
Response managers play a critical role in safeguarding the Home Office’s infrastructure and critical national infrastructure. Response managers use targeted threat intelligence to understand threats to our systems, apply that intelligence to guide threat hunting, and leverage threat modelling to strengthen and improve the Home Office’s overall security posture.
Your main day-to-day responsibilities could include:
- Proactively monitoring the internal and external threat landscape to identify cyber security threats to help inform defensive priorities and ensure detection capabilities remain effective.
- Analyse and prioritise risks to networks, systems, and applications using threat intelligence; taking a risk-based approach to respond to threats where appropriate.
- Conducting incident response exercises including red / purple teaming. Communicating the results of investigations and risk mitigations to improve the response to new threats and attack vectors. Conducting post-incident reviews.
- Conducting Threat Hunting activities against Critical National Infrastructure through SIEM and EDR. Performing digital forensics processes to gather evidence of potential security breaches.
- Conducting Threat Modelling that aligns to NCSC guidance and incorporates frameworks like STRIDE. Identify and prioritise threats and attack vectors to improve detection coverage of onboarded systems.
- Conducting Threat Intelligence activities against prominent threat actor groups. Communicating intelligence and risks to improve the response to new threats and attack vectors across networks, systems and applications.
- Continuously seeking to identify service and process improvements leveraging your knowledge of industry best practices and problem-solving skills to improve security operations.
- Carrying out response policies and processes in line with appropriate standards. Providing standardised advice on mitigation and escalating to a team leader where appropriate.
Proud member of the Disability Confident employer scheme