Cyber Operations support safe care and build public trust by enhancing NHS England’s cyber resilience and enabling the wider health system to remain secure.
Senior Cyber Security Analyst – Threat Intelligence
This role is within the Cyber Security Threat Intelligence team, part of the National CSOC in the Cyber Security Operations Unit (CSOU). The analyst will collect, analyse and disseminate cyber threat intelligence to protect NHS England and the broader Health & Care estate.
Responsibilities
* Generate strategic and technical threat intelligence products for CSOC stakeholders.
* Supervise a team of threat intelligence analysts and report to senior leadership.
* Act as a quality and audit layer for written threat intelligence products.
* Make CTI decisions within incident response scenarios and lead in‑depth CTI investigations.
* Serve as the escalation tier for cyber threat intelligence tasks within security tooling such as EDR and SIEM.
* Interrogate threat intelligence and internal security instrumentation to identify relevant cyber threats.
* Proactively research and assess the tactics, techniques and procedures (TTPs) of cyber threat groups.
* Develop analytical procedures to meet evolving requirements and support team development.
* Deliver technical capability development and identify and implement automation use‑cases within CTI and Security Operations.
* Support the ongoing development and continuous improvement of the CSOC CTI function in line with industry best practice.
Eligibility and Requirements
* All NHS England Cyber Security personnel must hold a minimum of Security Clearance (SC) level.
* SC clearance requires 5 years of continuous UK residency (reduced to 3 years with additional overseas checks for the previous two years). Postings abroad for government service are considered.
* Failure to achieve SC clearance after an offer will result in the offer being withdrawn.
* Staff recruited from outside the NHS will normally be appointed at the bottom of the pay band.
Note: This advert closes on Monday 1 Jun 2026.
#J-18808-Ljbffr