Intelligence Analyst

Government Recruitment Service; City Of London; On-site; GBP 40,000 - 55,000; Full time

Job summary

A government agency in the UK is seeking a Cyber Threat Intelligence Analyst to work at the core of cyber security efforts. In this role, you will analyze and disseminate vital threat intelligence, collaborating across departments to strengthen responses to cyber threats. The ideal candidate will have strong analytical skills and a background in cyber security or intelligence analysis. A willingness to obtain a security clearance is required.

Qualifications

• Experience in cyber security or intelligence analysis.
• Ability to understand complex data and generate actionable insights.
• Willingness to undergo Developed Vetting clearance.

Responsibilities

• Develop Subject Matter Expertise in relevant cyber threats.
• Lead threat intelligence collection and analysis across government.
• Monitor threat sources to identify actors and trends.
• Support incident response with timely intelligence.

Skills

Cyber threat analysis

Communication with stakeholders

Data analysis

Job description

This is an exciting opportunity to work at the heart of Government cyber security, as part of the Government Cyber Coordination Centre (GC3). The GC3 is a joint initiative sponsored by the Government Digital Service (GDS) and the National Cyber Security Centre (NCSC). The GC3 coordinates the cross-Government response to cyber security vulnerabilities, threats, and incidents, enhancing cyber resilience and enabling the Government to more efficiently and effectively protect public services and “defend as one”.

IMPORTANT

In June 2025, the Government Cyber Unit moved from the Cabinet Office to the Department for Science, Innovation and Technology (DSIT) as part of a machinery of government (MoG) change. This role is in scope to transfer to DSIT when the change takes effect. We are currently consulting with Trade Unions on which policies, terms and conditions will apply on transfer. The statement of changes applied to all other Cabinet Office staff will also apply to you if you are successful.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed before taking up post is Security Check (SC) but candidates must be willing to undergo Developed Vetting (DV) clearance whilst in post where necessary.

We are recruiting for HEO Intelligence Analysts within the Government Cyber Coordination Centre (GC3). These roles sit at the heart of the UK Government’s efforts to detect, assess, and respond to cyber threats and incidents affecting public sector systems.

As the GC3 Cyber Threat Intelligence Analyst, you will be responsible for the collection, analysis and dissemination of threat intelligence across government, turning complex data into actionable insights to understand and prevent significant, cross-cutting cyber threats.

You will generate regular threat reports and help to ensure cross-government collaboration so that departments are sharing and receiving the intelligence needed to “defend as one”. This role reports to the Cyber Threat Intelligence Lead.

As an Intelligence Analyst you will be responsible for:

• Developing Subject Matter Expertise in and maintaining situational awareness of relevant cyberthreats, using all resources available to you;
• Lead the collection, analysis and dissemination of threat intelligence across HM Government, coordinating with NCSC, law enforcement, and departmental security teams;
• Understanding the wider technology and threat environments for Government, to inform and provide context for your products and assessments;
• Drive cross-government cyber threat intelligence collaboration and communication, ensuring departments share and receive necessary intelligence to defend as one;
• Monitor a diverse range of sources (open, closed, and internal) to identify threat actors, campaigns and trends; maintain a current view of the threat landscape;
• Support incident response with timely intelligence and remediation guidance;
• Producing high-quality, insightful and impactful reporting which enables customers to make effective decisions about the cyberthreat.