Cyber Threat Intelligence Lead
| Posting date: | 09 June 2026 |
|---|---|
| Salary: | £57,204 to £68,558 per year |
| Additional salary information: | Offers above the Band minimum are subject to our assessment of your skills and experience as demonstrated at interview. Salaries over the Band minimum will be paid as a non-pensionable allowance |
| Hours: | Full time |
| Closing date: | 24 June 2026 |
| Location: | London |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 464975/2 |
Summary
We are looking for a cyberthreat intelligence analyst who will help us to identify and understand the cyberthreats facing the organisation, and will provide decision makers and technical teams with actionable information needed to help them to effectively secure their services. This is vital to align our threat model against the real-world threat to the Cabinet Office, and therefore core to strategic priorities. The role will closely support the Cyber Security team, to provide automated ingestion of tactical insights on the real-world threat, and input to threat modelling, security reviews, red teams, alert/vulnerability, and incident response.
- Perform threat identification and collection activities through our CTI platform and open-source intelligence gathering
- Maintain knowledge and understanding of the cyberthreats facing the Cabinet Office and the IT and digital services that it delivers
- Coordinate the implementation, and manage the operation of, threat intelligence tools and platforms; Act as SME for threat intelligence through reporting and briefings at strategic, tactical and operational levels, providing actionable and timely insights on relevant cyberthreats using robust analytical methodologies
- Provide subject matter expertise on actual or anticipated threats to assist stakeholders in their proactive risk management, mitigation and control
- Support threat detection and incident response activities with research and analysis
- Build relationships and work with stakeholders from within Cyber Security and the wider organisation to define standing intelligence requirements
- Build relationships and work with other government departments and the National Technical Authorities to share intelligence enable the wider organisation to use threat intelligence for informed decision making.
Proud member of the Disability Confident employer scheme
Disability Confident
About Disability Confident
A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident.