Threat Intelligence Analyst in England

Reports to: Director of Threat and Incident Management (US based)

Location: United Kingdom - hybrid. Must be available to work from the Security Operations Centre in Milton Keynes during emergency activations or heightened security incidents.

Key Areas of the Role

About our team: We are a dynamic, dedicated team that provides management and support for a global guarding services account that spans across 30+ countries. Our client is an industry-leading datacenter organisation, and we pride ourselves in delivering best‑in‑class solutions through our teams made up of Security Operations, Shared Services, Threat and Incident Management, Environmental Health and Safety, and Human Resources. As part of this team, you'll work alongside and collaboratively with a group of professionals that are committed to excellence and innovation.

Responsibilities

The Threat Intelligence Analyst role is responsible for furthering our Open‑Source Intelligence (OSINT) collections and analysis practice in support of the Datacenter Physical Security Operations program, which is a complex, multi $100M global client account providing physical security to datacentres around the globe. As a Threat Intelligence Analyst, you will be responsible for transforming data into actionable insights with a focus on insider threats, adversary analysis, cyber physical security, and supply chain vulnerabilities. This role requires someone with an investigative mindset, capable of digging deep into diverse datasets and uncovering connections that would likely be missed by others. The ideal candidate can adapt to emerging challenges, tools, and data types and conduct comprehensive analysis. This role will also be to create graphics and reports to communicate findings to various stakeholders which could include executive audiences.

The successful candidate will be an intellectually curious, self‑directed individual with excellent organisational skills and attention to detail. This role is collaborative in providing direct support to the client and for Securitas internal teams. The Threat Intelligence Analyst will report to the Director of Threat and Incident Management (DTIM) and work closely with the client Principal Threat Manager. The successful candidate will be able to demonstrate understanding and engagement with the Securitas Core Values of Integrity, Vigilance and Helpfulness, whilst showing a natural ability to recognise risk within the workplace and consider safety as a priority, complying with relevant policies, procedures and training as provided by the Company.

You will partner closely with the Securitas Risk Intelligence Centre (RIC) and client security teams to deliver continuous intelligence support through daily stand‑up calls, 24/7 Teams channel engagement, training, and regular touchpoints. It involves conducting in‑depth intelligence collection based on client taskings, tracking and assessing emerging threats from known and potential adversaries, and identifying tactics, techniques, and procedures (TTPs). Using advanced OSINT tools such as Hunchly, Maltego, Shodan, and other platforms.

The role collects and processes data into databases, templates, and link or network analysis to produce actionable intelligence products. These outputs may include alerts, assessments, investigations, and written or verbal briefings tailored to the client or other stakeholders. Beyond intelligence gathering, the position contributes to the security of the broader business ecosystem by assessing third‑party vendors and supply chain partners for vulnerabilities and collaborating across internal teams, external agencies, and global communities to strengthen the datacentre physical security program. It also involves translating business requirements into intelligence reports, staying abreast of emerging research sources and OSINT innovations, and participating in strategy discussions to continuously improve intelligence operations. Throughout, the role maintains a customer‑service mindset, working proactively with the client to address questions, concerns, and evolving security needs.

Driving Performance

• Takes Ownership
• Expects Excellence
• Delivers Sustainable Results
• Builds High Performing Teams

Developing Yourself & Others

• Is Respectful
• Is Empowering
• Leads by Example
• Gives & Asks for Feedback

Values Diverse Perspectives

Analytical & Problem‑Solving Skills

High‑level analytical reasoning, critical thinking, and problem‑solving ability. Ability to organise and present complex data effectively to diverse audiences.

Professional Attributes

Excellent communication, collaboration, and organisational skills. Capacity to work independently and adapt quickly to new environments and tools. Ability to thrive under pressure.

Proven track record of:

• Professionalism
• Sound judgment

Person Specification

Experience:

• Minimum 5 years in the discipline, or equivalent education and experience.
• At least 3 years in specialised OSINT collection and analysis with a proven portfolio.
• At least 3 years as an OSINT collector in fields such as investigative journalism, threat intelligence, or government intelligence.
• Minimum 1 year in full data warehouse implementation and developing high‑performance reporting and visualisation solutions.

Technical Expertise:

• Navigating social media platforms, public records, forums, deep and dark web.
• Managing signature and attribution.
• Strong command of advanced internet research methods: Boolean logic and advanced search techniques.
• Social networking tools and commercial databases.
• Deep and dark web understanding.

Full 5‑year checkable employment history. Must be willing to participate in a pre‑employment screening process, including drug screening and background investigation. Must have the right to work in the UK. Valid passport or have the ability to obtain one. Ability to travel international or domestic as required at least 10% of the time or more, occasionally with limited notice. Must be flexible and able to work evenings and weekends when required ie. during an emergency or high priority event. Ability to fluently speak, read, write and understand English. Works with integrity whilst unsupervised whilst maintaining confidentiality. Robust general IT knowledge and ability.

What you'll get

We offer more than just a job - we offer the chance to be part of a supportive, collaborative team where your growth and contributions truly matter. In this role, you'll thrive in a fast‑paced, dynamic environment while working on a prestigious multinational client account, giving you firsthand exposure to global operations and cross‑regional collaboration. Beyond day‑to‑day, you'll enjoy opportunities to travel both locally and internationally. We're committed to employee development, with access to continuous learning, training programs, and career growth pathways designed to help you succeed and advance. We believe great work deserves great rewards—and we're committed to staying competitive. This role offers a competitive salary and additional benefits. We invest in you so you can thrive—at work and beyond.