Senior Threat Intelligence Lead

**Details**:
**Reference number**:

- 384388

**Salary**:

- £42,385 - £51,540
- A Civil Service Pension with an employer contribution of 28.97%

**Job grade**:

- Senior Executive Officer

**Contract type**:

- Permanent

**Business area**:

- DESNZ - Integrated Corporate Services - Digital

**Type of role**:

- Analytical
Digital
Information Technology

**Working pattern**:

- Flexible working, Full-time, Job share, Part-time

**Number of jobs available**:

- 1

Contents

Location

About the job

**Benefits**:
Things you need to know

Location
- Birmingham, Cardiff, Darlington, Edinburgh, London, Salford

About the job

**Job summary**:
The Integrated Corporate Services (ICS) is a new shared corporate service, launched in July 2023. It provides corporate services (HR, Finance, Digital, Commercial, Security and Estates) across the Department for Energy Security & Net Zero (DESNZ) and the Department for Science, Innovation & Technology (DSIT).

Our team of just over 300 professionals will be leading the way in how these functions will be delivered in the future. Our ambition is to be the leading provider of integrated corporate services for government and set the standard for quality, efficiency, and innovation in our field.

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service D&I Strategy.

**Find Out More**

**Job description**:
Join ICS Digital, where innovation meets expertise to create digital solutions. We are a cohesive digital community who work in the open, solving problems together and fostering a culture of transparency and collaboration. Our commitment to user-focused design and data-driven decision-making ensures that we deliver accessible services tailored to the needs of our customers.

The ICS Cyber team work within ICS Digital to monitor and protect the systems and services we provide to our customers in DSIT and DESNZ.

As the Senior Threat Intelligence lead in the ICS Cyber team you will be at the forefront of safeguarding our digital assets and data. With a deep understanding of Threat Intelligence, and how to use it effectively you will be a key part of our cyber team with an ability to use the Threat intelligence to develop our Cyber defensive capabilities. You will work closer with our Cyber team and with our key stakeholders to ensure that our systems remain as safe as possible in the ever-evolving threat landscape.

The role is critical in developing our defensive capabilities, utilising the threat intelligence we have available to use, and leveraging the benefits of this intel across the wider customer base we serve in DSIT and DESNZ. Your expertise in Threat intelligence, and its effective use will be pivotal in protecting our critical systems and data.

**Person specification**:
**Key Responsibilities**
- The production of a wide variety of intelligence products, both individually and in conjunction with internal and external partners.
- Identifying, collating and analysing strategic and tactical intelligence from multiple sources.
- Modelling threats and adversary TTPs in line with industry frameworks and standards.
- Disseminating reports and the collection of feedback.
- Collaborating with stakeholders to understand and refine intelligence requirements.
- Delivering briefings to internal and external stakeholders when necessary and managing the relationships with these stakeholders and counterparts.

**Skills and Experience**

**Essential skills**
- Experience of producing high quality finished intelligence products, analysing a range of threat information and a baseline understanding of cyber security concepts.
- Experience of using the MITRE ATT&CK Framework and other kill chain models to analyse intrusions and generate scenarios; experience of project management and using / developing threat intelligence capabilities i.e. Threat Intelligence Platforms.
- Experience analysing open-source and commercial information in order to generate a comprehensive understanding of the threat landscape.
- Experience of effectively communicating threat intelligence through the appropriate use of high-quality written reports and verbal briefings.

**Desirable skills**
- Experience of working in an operationally-focused and high-pressure environment.
- The ability to learn quickly and grasp essential details and be comfortable utilising others expertise to inform decision making and assessments.
- An awareness of the current threat landscape, including adversary tactics, techniques, procedures and capabilities, and the intrusion lifecycle.
- Please, no recruitment agencies.

**Behaviours**:
We'll assess you against these behaviours during the selection process:

- Developing Self and Others
- Working Together

**Technical skills**:
We'll assess you against these technical skills during the selection process:

- Data analysis and synthesis
- Data modelling
- Problem management