Senior Tactical Threat Intelligence Lead

NCC Group; Madrid; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension & Life Assurance

Share Save Scheme

Job summary

NCC Group is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence through high-quality threat intelligence that informs detection, response, and strategic decisions. You will analyze threat actors, TTPs, and infrastructure across the intelligence lifecycle, producing actionable outputs for technical and non-technical stakeholders.

The role requires collaboration with DFIR/SOC, development of detection content like YARA rules, and contributions to threat hunting and

Qualifications

• Experience in cyber threat intelligence lifecycle and threat actor tracking.
• Familiar with ATT&CK framework and threat reporting for technical and non-technical audiences.
• Strong analytical and research skills with ability to communicate findings clearly.

Responsibilities

• Identify threat actors, TTPs, infrastructure, and IoCs across the intelligence lifecycle.
• Monitor C2 infrastructures, domains, and campaigns with contextual analyses.
• Produce finished intelligence products for diverse audiences and RFIs from stakeholders.

Skills

Threat intelligence analysis

MITRE ATT&CK mapping

C2 infrastructure analysis

Network protocols

DFIR collaboration

Education

SANS FOR578 (Cyber Threat Intelligence)

CREST CRTIA or equivalent

Tools

YARA rules

OpenCTI

MISP

STIX/TAXII

Sandbox analysis

Job description

NCC Group is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence through high-quality threat intelligence that informs detection, response, and strategic decisions. You will analyze threat actors, TTPs, and infrastructure across the intelligence lifecycle, producing actionable outputs for technical and non-technical stakeholders.

The role requires collaboration with DFIR/SOC, development of detection content like YARA rules, and contributions to threat hunting and