The Opportunity
You will be acting as a team leader within the Strategic Threat Intelligence team, reporting to the Strategic Threat Intelligence Manager. As a senior member in this team, you will have some limited line management responsibilities but will be expected to be heavily involved in the training and mentoring of other Threat intelligence team members, as well as supporting the overall growth of the Strategic Threat Intelligence team. You will be expected to have strong consultancy skills and experience in delivering large/complex pieces of client facing work where you will need to be able to manage multiple internal and external stakeholders.
Key Accountabilities
1. Support the development and growth of our Strategic Threat Intelligence capabilities in line with our overall Threat Intelligence and Corporate Strategy
2. Support and lead the delivery of Regulator-driven Threat Intelligence Engagements (CBEST, TIBER, CORIE, iCAST, AASE)
3. Deliver services from our Threat Intelligence portfolio: Online Exposure Assessments, VIP Assessments, Threat Intelligence Maturity Assessments, Strategic Threat Landscape Reports and Regulatory Threat Intelligence.
4. Have limited Line management responsibilities as the team grows
5. Play a key role in setting the intelligence direction and collection priorities for NCC Group.
6. Work under operational time pressure, be expected to self-manage tasks, meet deadlines in support of customer and NCC Group requirements.
7. Understand the motivations of relevant cyber threat actors, their targets, and their TTP’s,
8. Maintain a working knowledge of the cyber threat to various economic sectors, regions, and countries.
9. Set an example in both output and work ethic. Your support to the wider organisation will be critical in the development of NCC Group’s Threat Intelligence capabilities.
Functional and Technical Skills
10. Be familiar with Threat Intelligence Principles, and Testing Frameworks such as CBEST and TIBER.
11. Hold a CREST Certified Threat Intelligence Manager (CCTIM) - or be willing to work towards this
12. Have excellent communications skills, both in terms of written and verbally delivered work.
13. Previous experience as a threat intelligence analyst or similar position.
14. Knowledge of networking protocols, including TCP/IP, Domain Name System (DNS), subdomains
15. Knowledge of ‘cyber’ terminology and concepts
16. Can conduct research and use reconnaissance skills, especially the use of OSINT research techniques.
17. Have experience with Threat Intelligence Platforms e.g. MISP /OpenCTI
About Your Application
We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email
All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf (nccgroupplc.com). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.