Cyber Threat Intelligence Analyst Ref. 3768 in London

Flexible working options are available, including part-time, compressed hours, and some flexibility around start and finish times. This is an office-based role, so homeworking isn’t available.

MI5 keeps the country safe from serious threats like terrorism and attempts by states to harm the UK, its people, and way of life. We carry out investigations by obtaining, analysing, and assessing intelligence, and then work with a range of partners including MI6 and GCHQ, to disrupt these threats. Through our protective security arm, we provide advice and guidance to government, businesses, and other organisations on how to keep themselves safe. A role in MI5 means you’ll do unique and challenging work in a supportive and encouraging environment, making a real difference to UK national security.

As a Cyber Threat Intelligence Analyst, you’ll support MI5’s cyber threat work and partner strategy. Working at pace to analyse data and detect malicious activity that could harm national security, you will identify, investigate, and analyse cyber threats, carrying out meaningful work that keeps the UK safe.

Responsibilities:

• Carry out network analysis, applying an understanding of internet protocols to review network indicators, events, and topologies.
• Apply disk and memory forensics knowledge to operating system artefacts, files and malware.
• Produce accurate reports or develop analytical or workflow capabilities.
• Perform intricate cyber analysis tasks and brief internal and external stakeholders.
• Use a variety of cyber tools and collaborate with partners across government, finance, and the wider public sector.

About you:

You don’t need a specific degree to apply, but you’ll need significant experience working in cyber security, networking protocols, and data analysis, as well as either network- or host-based forensics. You’ll come from an applied cyber background, where you’ve gained experience in threat analysis, SOC analysis, threat intelligence, or similar. This may include experience in other government departments, law enforcement, or financial, regulatory, or legal institutions.

Required skills and tools:

Proficiency with forensic tools (X-Ways, FTK, EnCase) and network and security analysis programmes (Elasticsearch, Splunk, Wireshark) is desirable, although no single tool is essential. Awareness of coding and programming to read and understand inputs is also valuable.

Training and development:

Upon joining, you’ll complete an organisation-wide Induction Roadmap, departmental induction, and team rotations. You’ll receive a yearly learning budget, personal learning days, and access to internal and external training courses. Membership of the Cyber Technical Framework (CTF) is available and based on an application process supported by skills-based assessments.

Rewards & benefits:

Starting salary of £53,267 plus other benefits, including:

• 25 days annual leave, rising automatically to 30 days after 5 years of service, plus an additional 10.5 days of public and privilege holidays
• Opportunities to be recognised through employee performance scheme
• Interest-free season ticket loan
• Excellent pension scheme
• Cycle to work scheme
• Facilities such as a gym, restaurant, and on-site coffee bars (at some locations)
• Paid parental and adoption leave

Equal opportunities:

At MI5, diversity and inclusion are critical to our mission. We welcome and encourage applications from everyone, including those from groups that are underrepresented in our workforce, such as women, people from ethnic minority backgrounds, people with disabilities, and those from low socio-economic backgrounds.

Disability confident:

MI5 is proud to be Leader in the DWP’s Disability Confident scheme. We will offer a fair and proportionate number of person-to-person interviews to any candidate who self-identifies as disabled and meets the essential criteria for the role. The essential criteria are:

• Pass the online Situational Judgement Test (SJT)
• Demonstrate good technical understanding of cyber security and networking protocols
• Have experience of data analysis

Eligibility:

To work at MI5 you must be a British citizen or hold dual British nationality, and you must obtain the highest security clearance, known as Developed Vetting (DV). The role is based in Central London; applicants should live within a commutable distance.