Threat Intelligence Analyst in Wokingham

Reliable energy systems are fundamental to everyday life in Great Britain. They underpin homes, businesses, public services, and critical national infrastructure, and are essential to economic stability, public safety, and social wellbeing. As the energy system evolves through decarbonisation, increasing electrification, and greater interdependence across sectors, ensuring that it remains secure, reliable, and resilient is more important than ever.

Recent events, including the North Hyde substation fire and subsequent review, and the Iberian Peninsula blackout, have reinforced the importance of understanding and strengthening resilience across the whole energy system – not only today, but for the future. The Whole Energy System Resilience (WESR) directorate strengthens whole‑energy‑system resilience by being a catalyst for change – turning insight into coordinated, prioritised action that reduces risk and builds capability across the system.

WESR delivers this through analysis, assessments, reviews, emergency exercises, and plans that drive tangible improvements with our partners. WESR operates through a continuous improvement cycle that includes learning systematically about energy system risks and resilience, conducting prioritised assessments to generate insights and advice, and translating insights into actions that drive tangible improvement.

This role is to provide threat intelligence for the energy sector. You will form part of a team to establish the threat intelligence function for the energy sector, determining governance, requirements, inputs, and outputs. You will advise on the threat landscape and provide insights which inform sector risk assessments and advice to Government. In delivering threat intelligence products for the energy sector, you will add value by providing impact assessment and recommendations.

The customer‑driven approach will be further supported by a mindset of continuous improvement. You will develop a deep understanding of the threat landscape and the intelligence cycle. This role can be based out of Warwick, Wokingham or Glasgow, with travel to the other two on occasion. We continue to offer hybrid working from office and home, and are open to flexible working arrangements. This role is designated as requiring a National Security Vetting (NSV) clearance (SC). The level of clearance associated with this role (SC) will usually need you to have been a resident in the UK for the last five years to apply.

Delivery Key Accountabilities:

• Provide expertise in physical and personnel threat intelligence and communicate risk to Government and the energy sector.
• Identify requirements and develop appropriate physical and personnel threat intelligence outputs, including strategic, technical, and tactical intelligence.
• Collate, record, evaluate, analyse, and disseminate all source intelligence reporting with a focus on outputs relevant to the future system operator and the whole energy sector.
• Provide primary and secondary source intelligence reports, updates, and threat assessments to support operational understanding and threat awareness for the future system operator and the whole energy sector.
• Deliver information in formal reports or as presentations and briefings to internal and external customers.

Subject Matter Expertise:

• Implement intelligence cycles to advance understanding of current and emerging threats.
• Support knowledge sharing and collaboration between the threat intelligence function and other teams.
• Observe strict non‑disclosure rules about your work, the extent of which may vary.
• Conduct analysis and research to determine the identity, motivations, relationships, targets/victims, capabilities, tooling, and infrastructure of threat actors relevant to the future system operator and the whole energy sector.

Outreach:

• Determine appropriate sources and stakeholders and establish relationships to provide intelligence fusion opportunities.
• Develop partnership with Security Operations and Incident Management, to embed threat intelligence into detection and response capabilities.
• Develop relationships with government and energy sector stakeholders to improve understanding of threat intelligence for the future system operator and the whole energy sector.

About You:

• Team player and adept at working in multi‑disciplinary and diverse teams.
• Proven analytical skills and capable of solving new and complex problems.
• Excellent written and verbal communication skills with the ability to communicate the impact and importance of detailed technical information to non‑technical and senior audiences.
• Managing and building relationships with customers and stakeholders.
• Previous experience in critical national infrastructure or a similar sector, involving the analysis and delivery of threat intelligence.
• Must have, or be willing to undertake, National Security Vetting.

Qualifications:

• Essential: Degree‑level qualification or equivalent experience with significant demonstrable experience in intelligence and threat analysis.
• Desirable: Additional professional security qualifications/certifications in appropriate areas.

What You'll Get:

• A competitive salary of £58,000 – £65,000 dependent on experience and capability.
• As well as your base salary, NESO's core benefits are the essential perks and advantages that form part of your employee package.
• You will receive a bonus based on company performance.
• 26 days annual leave as standard.
• A competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%.
• Annual enrollment to NESO Savings Plan, when you save between £20 and £500 a month from your take‑home pay, we will pay a 50% matching contribution.

Benefits:

• Flexible Bank Holidays & Holiday Trading
• Additional Birthday Day Off
• Cycle to Work Scheme, Retail & Gym Discounts
• Private Medical Insurance, Critical Illness Insurance & Personal Accident Insurance

About Us:

At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britain's energy future. We already operate the world's fastest decarbonising electricity system and are working towards our ambition to run it carbon‑free for a short period this year – provided the market supplies electricity exclusively from renewable sources. Alongside this, we provide expert advice to government on how to deliver a clean power system by 2030.

In autumn 2024, the Electricity System Operator (ESO) transitioned to become NESO – an independent, expert public corporation with a whole‑system view across electricity, gas, and hydrogen. NESO operates independently and transparently, always acting in the best interests of all energy users. Licensed and regulated by Ofgem, we make impartial decisions that balance sustainability, affordability and security.

Our organisation is fully independent from government, the regulator and all commercial interests, with a clear focus on system‑wide benefit, long‑term value and public value. The time to deliver is now. Join the energy transformation and help shape the future. NESO recognises the potential of bright and talented individuals, and we encourage you to join us as Great Britain’s energy system undergoes an ambitious, exciting, and vital transformation. Together with industry, we are creating a cleaner, more sustainable energy future.

Legal Statement: We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds. We are committed to building a workforce that represents the communities we serve, and a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.