NMC Hybrid Template

Police Digital Service; Wigan; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

28 days annual leave

Flexible working hours

Employee assistance program

Pension scheme

Health/wellbeing services

Volunteer day

Job summary

Police Digital Service is seeking a Senior Cyber Threat Intelligence Specialist to lead threat intelligence for national policing. You will profile adversaries, support threat hunting, coordinate with partners like NCSC and NCA, and mentor the NMC team while shaping intelligence-led defence across UK policing.

Hybrid working with incident leadership and executive reporting awaits, translating complex threats for senior audiences and ensuring continuity during live incidents.

Qualifications

• Deep understanding of adversarial TTPs and threat actor lifecycles.
• Proven experience in malware, phishing, and SIEM log analysis.
• Strong grasp of threat modelling and risk assessment frameworks.
• Skilled in OSINT collection and analysis.
• Demonstrated leadership in CTI environments, including mentoring and service development.
• Excellent communication skills - able to translate complex threats into clear insights.
• Experience supporting cyber incident response under pressure.

Responsibilities

• Profile cyber adversaries by analysing behavioural patterns, infrastructure, and motivations to inform strategic and tactical defence measures.
• Support advanced threat hunting activities across national policing infrastructure, identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.
• Collaborate with national partners including NCSC and NCA to share intelligence, coordinate responses, and align threat assessments.
• Produce high-quality, actionable intelligence reports and briefings for a range of stakeholders, including technical teams, senior police leadership, and government departments.
• Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence.
• Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives.
• Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence-led responses.
• Mentor and develop NMC colleagues, fostering a culture of continuous learning and analytical excellence.
• Perform a leadership role during the manager’s absence, overseeing team operations, prioritizing workloads, and ensuring service continuity.
• Translate complex threat intelligence into clear, concise insights tailored to operational, strategic, and executive audiences.
• Present at various senior boards and forums (internal and external) on the benefits of establishing a healthy cyber security posture.

Skills

Leadership

Communication

Stakeholder management

Threat modelling

OSINT collection

Tools

SIEM

Job description

Join Police Digital Service as a Senior Cyber Threat Intelligence Specialist

Salary starting at £60,000 per annum

About Police Digital Service

To protect people from harm in our rapidly changing world, police services must not only keep up with technology and business changes but develop capabilities and ways of working that will enable them to adapt to and deal with the complexity of modern criminality.

Police Digital Service strives to be the go-to partner for technology developments and programmes across UK policing. Our team provides technical advice and delivers services to help policing and law enforcement organisations across the UK prioritise and focus on technology efforts.

The National Management Centre (NMC) is part of Police Digital Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both the national and force level.

Key Responsibilities

• Profile cyber adversaries by analysing behavioural patterns, infrastructure, and motivations to inform strategic and tactical defence measures.

• Support advanced threat hunting activities across national policing infrastructure, identifying indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat patterns.

• Collaborate with national partners including NCSC and NCA to share intelligence, coordinate responses, and align threat assessments.

• Produce high-quality, actionable intelligence reports and briefings for a range of stakeholders, including technical teams, senior police leadership, and government departments.

• Correlate intelligence from multiple sources (OSINT, SIGINT, internal telemetry, etc.) to build a comprehensive threat picture and drive proactive defence.

• Support and lead pre-incident planning, threat modelling, and attack surface reduction initiatives.

• Act as a senior point of contact during live incidents, supporting decision-making and coordinating intelligence-led responses.

• Mentor and develop NMC colleagues, fostering a culture of continuous learning and analytical excellence.

• Perform a leadership role during the manager’s absence, overseeing team operations, prioritizing workloads, and ensuring service continuity.

• Translate complex threat intelligence into clear, concise insights tailored to operational, strategic, and executive audiences.

• Present at various senior boards and forums (internal and external) on the benefits of establishing a healthy cyber security posture.

What you need to succeed in the role

Essential criteria

• Deep understanding of adversarial TTPs and threat actor lifecycles.

• Proven experience in malware, phishing, and SIEM log analysis.

• Strong grasp of threat modelling and risk assessment frameworks.

• Skilled in OSINT collection and analysis.

• Demonstrated leadership in CTI environments, including mentoring and service development.

• Excellent communication skills - able to translate complex threats into clear insights.

• Experience supporting cyber incident response under pressure.

• Ability to work independently and manage stakeholder relationships effectively.

Desirable criteria

• Highly experienced in cyber threat intelligence or analytical roles.

• GIAC Cyber Threat Intelligence (GCTI) or CREST Registered Threat Intelligence Analyst.

• Experience developing cybercrime mitigation strategies.

• Understanding of UK policing cyber environments and threat landscape.

• Completed intelligence analysis training (e.g., NIAT, RISC UK).

Why Join us?

• Balance is important and we want you to take time off to recharge - we offer 28 days’ annual leave plus bank holidays, rising to 30 days after 5 years of service. Holiday Purchase also available

• Flexible working hours - We trust you to do your job and we appreciate that life doesn’t always fit around a 9 to 5 workday. We operate core hours of 8 to 6, Monday to Friday (37hr week)

• We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts

• Plan for the future - we offer an excellent pension scheme and life assurance cover

• Put your mind at rest regarding your health - offering remote GP, mental health and physiotherapy appointments via video consultation

• Family - Enhanced maternity and paternity pay along with a flexible return to work

• Community - one paid day off per year for volunteering

You can find out more here:
Benefits - Police Digital Service (pds.police.uk)

Diversity, equity and inclusion

We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.

Working Arrangements

At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week.

All applicants must be eligible for NPPV3 and SC clearances. Successful applicants will require NPPV3 clearance to have been approved before starting with PDS.