Senior Analyst - Tactical Intelligence

nccgroup; Cheltenham; On-site; GBP 70,000 - 95,000; Full time

Job summary

NCC Group in the United Kingdom is seeking a Senior Analyst - Tactical Intelligence to strengthen cyber defence by delivering high-quality threat intelligence that informs detection, response, and strategic decisions.

You will operate across the full intelligence lifecycle, translating complex technical findings into actionable insights for technical and non-technical stakeholders, supporting incident response and intelligence-led security operations.

Responsibilities

• The purpose of this role is to strengthen the organisation’s cyber defence capabilities by generating high-quality, actionable threat intelligence that informs detection, response, and strategic decision‑making.
• Operating across the full intelligence lifecycle, the role transforms complex technical findings into meaningful insights for both technical and non‑technical stakeholders, enabling the organisation to anticipate adversary activity and support incident response.
• The role also contributes to continuous improvement through research, tooling development, collaboration with wider security teams, and active participation in the broader threat intelligence community.

Job description

Senior Analyst - Tactical Intelligence

UK (Manchester, Cheltenham or London), Spain (Madrid), the Netherlands (Rijswijk)

The purpose of this role is to strengthen the organisation’s cyber defence capabilities by generating high‑quality, actionable threat intelligence that informs detection, response, and strategic decision‑making. The position exists to proactively identify, analyse, and communicate emerging threats, including adversary behaviours, malware, and infrastructure, while ensuring intelligence outputs are operationally relevant, technically robust, and aligned to business and security priorities.

Operating across the full intelligence lifecycle, the role transforms complex technical findings into meaningful insights for both technical and non‑technical stakeholders, enabling the organisation to anticipate adversary activity, enhance detection engineering, support incident response, and advance intelligence‑led security operations. The role also contributes to continuous improvement through research, tooling development, collaboration with wider security teams, and active participation in the broader threat intelligence community.