Senior Tactical Threat Intelligence Lead

NCC Group; Madrid; Presencial; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension & Life Assurance

Share Save Scheme

Descripción de la vacante

NCC Group is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence through high-quality threat intelligence that informs detection, response, and strategic decisions. You will analyze threat actors, TTPs, and infrastructure across the intelligence lifecycle, producing actionable outputs for technical and non-technical stakeholders.

The role requires collaboration with DFIR/SOC, development of detection content like YARA rules, and contributions to threat hunting and

Formación

• Experience in cyber threat intelligence lifecycle and threat actor tracking.
• Familiar with ATT&CK framework and threat reporting for technical and non-technical audiences.
• Strong analytical and research skills with ability to communicate findings clearly.

Responsabilidades

• Identify threat actors, TTPs, infrastructure, and IoCs across the intelligence lifecycle.
• Monitor C2 infrastructures, domains, and campaigns with contextual analyses.
• Produce finished intelligence products for diverse audiences and RFIs from stakeholders.

Conocimientos

Threat intelligence analysis

MITRE ATT&CK mapping

C2 infrastructure analysis

Network protocols

DFIR collaboration

Educación

SANS FOR578 (Cyber Threat Intelligence)

CREST CRTIA or equivalent

Herramientas

YARA rules

OpenCTI

MISP

STIX/TAXII

Sandbox analysis

Descripción del empleo

NCC Group is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence through high-quality threat intelligence that informs detection, response, and strategic decisions. You will analyze threat actors, TTPs, and infrastructure across the intelligence lifecycle, producing actionable outputs for technical and non-technical stakeholders.

The role requires collaboration with DFIR/SOC, development of detection content like YARA rules, and contributions to threat hunting and