indeed
Senior Threat Intelligence Analyst
NTT DATA
London, GBR
Senior
Onsite
Discovered 2 weeks ago
Cyber threat intelligenceThreat actor and campaign analysisOSINT researchStructured analytical techniquesCollection managementIntelligence reporting
Key Skills for This Role
Cyber threat intelligenceThreat actor and campaign analysisOSINT researchStructured analytical techniquesCollection managementIntelligence reporting
Full Job Posting
Team leadership and delivery
- Lead and coordinate team work, objectives, priorities, quality expectations, and deadlines.
- Provide technical supervision, peer review, escalation support, coaching, and mentoring.
- Manage workload, service risks, dependencies, client priorities, and delivery standards.
- Represent the capability as deputy or workstream lead when required.
Threat intelligence direction and analysis
- Define intelligence requirements and collection plans aligned to client exposure and decision needs.
- Research OSINT, commercial and government feeds, technical telemetry, malware reporting, sharing communities, and other lawful sources.
- Analyse threat actors, campaigns, malware, infrastructure, indicators of compromise, and tactics, techniques, and procedures.
- Assess source reliability, credibility, confidence, and intelligence gaps; distinguish verified reporting from analytical judgment.
- Produce strategic, operational, and tactical intelligence with likely impact and recommended action.
- Monitor geopolitical, sector, regulatory, and technology developments affecting UK and international clients.
Production and stakeholder engagement
- Own and assure executive briefs, campaign assessments, actor profiles, vulnerability intelligence, sector reports, and incident packages.
- Brief leaders, clients, security operations, incident responders, detection engineers, vulnerability teams, and risk stakeholders.
- Present conclusions, confidence, assumptions, gaps, and recommended actions; respond to challenge and alternative hypotheses.
- Build relationships with clients, internal teams, government bodies, industry groups, and intelligence-sharing communities while protecting sensitive information.
Operational integration and improvement
- Integrate intelligence into SIEM, SOAR, threat hunting, detection engineering, incident response, and vulnerability prioritisation.
- Guide use of MITRE ATT&CK, STIX/TAXII, the intelligence cycle, Diamond Model, and suitable analytical techniques.
- Develop and quality-assure correlation rules, watchlists, enrichment logic, automation, and playbooks while controlling false positives and operational impact.
- Use lessons learned, stakeholder feedback, and measurable outcomes to improve intelligence work and decisions.
- Support service development, proposals, client workshops, and evolving intelligence methods and offerings.
Experience and knowledge
- 3–5 years of practical cyber threat intelligence delivery, including complex assessments and reviewing other analysts’ work.
- Experience leading, coordinating, or technically supervising a team, workstream, or intelligence function and managing delivery through others.
- Strong knowledge of the intelligence cycle, structured analysis, collection management, source evaluation, threat actor analysis, and intelligence reporting.
- Deep working knowledge of MITRE ATT&CK and MISP, ThreatConnect, Anomali, or an equivalent platform.
- Practical experience with SIEM and SOAR integration into security operations.
- Ability to analyse malicious infrastructure, indicators of compromise, and malware reporting.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at NTT DATA
Cross Technology Service Delivery Field Support Engineer (L1)
Mumbai, IND
MidFull-time
Discovered TodayView →
Cross Technology Service Delivery Field Support Engineer (L1)
Mumbai, IND
Discovered TodayFull-time
Networking Managed Services Engineer (L2)
Mumbai, IND
Discovered TodayFull-time
Monitoring Platform SME
Bengaluru, IND
Discovered TodayFull-time
MS Network engineer
Bengaluru, IND
Discovered TodayFull-time
Security Managed Services Engineer (L3)
Bengaluru, IND
Discovered TodayFull-time
Managed Services Client Service Desk Administrator
Hyderabad, IND
Discovered TodayFull-time
Managed Services Client Service Desk Administrator
Hyderabad, IND
Discovered TodayFull-time
Security Threat Intelligence and Hunting Analyst
Hyderabad, IND
Discovered TodayFull-time