Senior Cyber Threat Intelligence Analyst, Intel Delivery

WeAreTechWomen; United Kingdom; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading technology firm in the United Kingdom is seeking a Cyber Threat Intelligence (CTI) technical specialist. This role involves supporting a government client with on-site work 3-4 days weekly. The ideal candidate will have extensive cyber security experience, especially in CTI integration and data analysis. A Bachelor's degree is required, along with 5 years of relevant experience and security clearance. This position promises a dynamic work environment within a team of cyber security experts.

Qualifications

• 5+ years of experience in a cyber security role within regulated environments.
• Active UK Security Check (SC) clearance required.
• Experience integrating CTI with security solutions.

Responsibilities

• Track cyber threats and act as a CTI center of expertise.
• Integrate CTI into the customer's mission.
• Present intelligence findings to various audiences.

Skills

Cyber security experience

CTI integration

Security clearance

Report authoring

Data analysis

Education

Bachelor's degree or equivalent experience

Master's degree or advanced certifications

Tools

SIEM

EDR

MITRE ATT&CK

Job description

Must be a British citizen to meet customer and compliance requirements, including potential access to classified information.

This position requires onsite client-facing work 3-4 days per week at central London customer location to support their CTI requirements and integrate to enable their public‑sector focused cyber defence mission.

Note: Google's hybrid workplace includes remote roles.

Remote location: United Kingdom.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in a cyber security role (e.g., CTI Analyst, Computer Forensics, Incident Response, Security Engineer) within regulated environments.
• Experience integrating CTI with security solutions (e.g., IDS, EDR, SIEM, SOAR) to inform vulnerability management and network defense strategies.
• Experience authoring and tailoring CTI reports (operational, and tactical) for audiences, from technical teams to executive leadership.
• Experience with CTI analysis, including leveraging frameworks (e.g., MITRE ATT&CK) and managing TIPs to drive detection.
• Active UK Security Check (SC) security clearance and eligibility to obtain UK Developed Vetting (DV) security clearance.

Preferred qualifications:

• Master's degree in a related field or advanced certifications.
• Experience in SOC workflow optimisation, detection engineering, or automating intelligence processes to reduce mean‑time‑to‑detect.
• Experience leading or supporting cyber investigations, bridging the gap between intelligence and remediation.
• Experience of cross‑sector information sharing and adherence to strict information managing protocols (e.g., traffic light protocol (TLP).
• Experience analyzing data from security controls (e.g., firewalls, packet captures, malware triage) and standard enterprise IT and network logging formats.

About the job

In this role you will support Mandiant’s Advanced Intelligence Access (AIA) program. The AIA program enables customers, via an onsite Cyber Analyst, access to the totality of Mandiant’s Threat Intelligence. You will ensure the delivery of intelligence to each customer’s security or operational environments in order to detect and mitigate key threats. You will also act as a conduit to Mandiant’s extensive network of cyber security, threat intelligence, and information operations professionals.

You will be delivering key support to a UK government client. You will serve as a cyber threat intelligence (CTI) technical specialist, empowering the customer's mission; primarily through its operations and CTI team. You will be backed by Mandiant’s network of UK and global experts, supporting you with training, specialisms, access to industry‑leading tooling and proprietary data to fuel the analysis. You will blend this reach with your technical tradecraft to help secure the UK Public Sector.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation‑state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Track priority cyber threats, acting as an CTI center of expertise, using frameworks like MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) and Kill Chain. Leverage Mandiant tools and data to answer customer requests for information (RFIs).
• Support integration of CTI into customer's mission. Build processes for its application within varied cyber defence technology stacks, including SIEM and Threat Intelligence Platforms (TIP) systems (KQL, SPL, Sigma, Yara etc.).
• Perform tactical, and operational research and analysis of adversarial cyber threats, and author intelligence for HMG audiences.
• Present intelligence about threat groups, the methodologies and the motivations behind activity and convey the findings to audiences.
• Work with customers to plan their intelligence needs and requirements and prepare and deliver briefings and reports to the customers' executives, security team, and fellow analysts.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.