8258 - Senior Cyber Threat Intelligence Analyst

Senior Cyber Threat Intelligence Analyst

Location: National*

Closing Date: 11th August

Interviews: W/C 25th August (subject to change)

Grade: SEO

(MoJ candidates who are on a specialist grade, will be able to retain this grade on lateral transfer)

Salary: London: £47657 – £56050 (which may include an allowance of up to £8393). National: £41463 – £51675 (which may include an allowance of up to £10212).

Working pattern: Full time, part time, flexible working, job share.

Contract Type: Permanent.

*We offer a hybrid working model, allowing for a balance between remote work and time spent in your local office. Office locations can be found ON THIS MAP

The Role

We’re recruiting for a Senior Cyber Threat Intelligence Analyst here at Justice Digital, to be part of our warm and collaborative Digital Infrastructure and Security Operations (DISO) team.

This role aligns against Vulnerability Management Lead from the Government Security Profession Framework.

Justice Digital is looking for a Senior Cyber Threat Intelligence Analyst to join our CTI Team, a maturing capability within the Security Operations team. This is an exciting opportunity to contribute to the protection of the Ministry of Justice’s (MOJ) technology, systems and services, and the vital information they contain and process.

As a Senior Threat Intelligence Analyst at the MoJ, you will lead the analysis, collection, and dissemination of actionable threat intelligence. Your deep understanding of adversary tactics, techniques, and procedures (TTPs) will help to inform and improve MOJ cybersecurity defences—helping to predict and mitigate against emerging threats.

You will work closely with security engineers, incident response teams, and external partners, translating raw intelligence into strategic insights that drive operational security decisions. Responsibilities include tracking threat actors, researching tactics and techniques, and producing high quality intelligence reports for key stakeholders, as well as playing a part in the mitigation and remediation of MOJ cyber security incidents.

To help picture your life at MoJ Justice Digital please take a look at our blog and our Digital and Technology strategy 2025

Key Responsibilities:

Monitor and analyse the cyber threat landscape to identify advanced persistent threats, malware trends, and emerging cyber adversaries.
Analyse cyber threat actors’ infrastructure, TTPs, and motivations, building detailed adversary profiles that fuel proactive defence measures. Track adversary movements and historical trends to better predict their future actions.
Proactive attack surface management- continuously discovering, monitoring, and reducing the points of exposure across the MOJ’s digital environment, before they are exploited by adversaries.
Utilise frameworks such as MITRE ATT&CK, the Diamond Model, and OSINT methodologies to correlate threat data.
Produce clear and actionable intelligence reports—ranging from technical briefings to strategic analyses—that support decision making across the organisation. This will include delivery of verbal presentations and threat briefs, in-person and virtually, to internal and external stakeholders at all seniority levels.
Leading collaboration activities with internal teams across the organisation in order to provide further internal understanding of potential adversaries and attack vectors. This will include development of relationships with the wider information security teams across the organisation, e.g. SOC Detect and Respond, Incident Response, and engineering teams to assess and enhance current threat defences.
Leading the CTI response for the SOC for mitigation and remediation of MOJ cyber security incidents.
Relationship management within the wider Information Security community. Representation of the MOJ in a wide range of fora, to ensure impactful collaboration across Government Security communities including direct engagement with NCSC and the NCA.
Ownership of CTI Vendor relationships – driving effective integration and usage of vendor platforms, in order to drive best value and effect for the MOJ.
Senior intelligence practitioner for the team – able to share best practice and oversight of intelligence outputs to ensure the highest quality.
Contribute to development and maintenance of threat intelligence processes and procedures to ensure efficient and effective threat analysis.
Line Management/People Management responsibilities – Managing, supporting and mentoring junior members of the wider SOC team, as well as deputising for the CTI Team Lead, where appropriate.

If this feels like an exciting challenge, something you are enthusiastic about, and want to join our team please read on and apply!

#J-18808-Ljbffr