Senior Response Manager - Cyber Security Threat Intelligence

UK Home Office; Salford; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

Public holidays + privilege day

Hybrid working

Job summary

UK Home Office is seeking a Senior Response Manager within Cyber Threat Intelligence. You will support threat intelligence activities, monitor and investigate cyber threats, and help deliver strategic initiatives to reduce risk across the organisation.

You will collaborate with stakeholders, conduct exercises, and drive intelligence-led responses to security incidents to strengthen defences for future threats.

Qualifications

• Experience conducting threat intelligence analysis in a SOC environment.
• Able to communicate complex threat intel to technical and non-technical audiences.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain and Diamond Model.

Responsibilities

• Carry out threat intelligence activities per SOPs.
• Provide advice on mitigation and escalate as needed.
• Lead incident response exercises including red teaming and threat hunting.
• Identify, analyse threats and vulnerabilities; prioritise using risk-based approach.
• Triaging intelligence findings and supporting vulnerability management.
• Define intelligence requirements and communicate mitigation strategies.

Skills

Threat intelligence analysis

Threat modelling

Stakeholder collaboration

Team leadership

SIEM & TIPs

Risk frameworks

MITRE ATT&CK

Communication skills

Vulnerability management

Tools

SIEM

Threat Intelligence Platforms

Job description

Salary: £49,850 plus skills allowance of up to £7,550)

Advert Close: Thursday 1st October

The Senior Response Manager with Cyber Threat Intelligence is responsible for supporting threat intelligence activities, including the monitoring, analysis and investigation of cyber security threats, events and incidents. Working as part of a specialist Threat Intelligence team, you will help develop and enhance capabilities to address emerging threats, implement complex intelligence-led solutions, and deliver strategic initiatives focused on threat analysis, risk reduction and continuous improvement across the organisation. You will also support the development and management of intelligence-driven responses to security incidents, collaborating with stakeholders across the business to ensure effective incident handling and strengthen defences against future threats.

You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.

Threat intelligence professionals support the identification, analysis and assessment of threats whilst helping to improve organisational readiness through exercises, threat hunting hypothesis generation and red team activity. The Threat Intelligence function also advises product and service owners on emerging threats, risks and potential mitigations.

As a Senior Response Manager in Cyber Threat Intelligence, your main responsibilities will be to;

• Carrying out threat intelligence activities in line with defined Standard Operating Procedures.
• Providing advice on mitigation and escalating to a team leader where appropriate.
• Helping to conduct incident response exercises including red teaming and threat-hunting. Communicating the results of investigations and risk mitigations to improve the response to new threats and attack vectors. Conducting post-incident reviews.
• Identifying, analysing and classifying threats, adversary tactics, techniques and procedures (TTPs), security vulnerabilities in networks, systems and applications and mitigating or eliminating their impact. Assisting in the prioritisation of those vulnerabilities through a risk-based approach.
• Triaging intelligence findings, recommending mitigating measures, and supporting vulnerability management activities by providing advice on ways to improve control mechanisms and reduce risk.
• Defining intelligence requirements, methodologies and tools needed to identify and assess threats. Communicating common mitigation strategies and threat trends. Continuously seeking to identify potential service and process improvements leveraging your knowledge of industry best practices, good judgment and problem-solving skills to execute security operations and investigations.

You’ll have a demonstrable passion for Threat Intelligence, with the following skills, knowledge or experience in:

• Conducting Threat Intelligence analysis, collection and investigations within a Security Operations Centre environment, with an understanding of vulnerability research, malware analysis and digital forensic techniques.
• Communicating complex threat intelligence and threat assessments to technical and non-technical audiences using analytical frameworks and probabilistic language.
• Using common threat analysis models and frameworks such as STIX, MITRE ATT&CK, Cyber Kill Chain and Diamond Model.
• Building strong partnerships across technical teams, suppliers and stakeholders.
• Leading or managing a team in a technical environment and supporting the development of intelligence requirements and capabilities.
• Utilising Security Information and Event Management (SIEM) and Threat Intelligence Platforms (TIPs).
• Applying cyber security risk and control frameworks such as NIST, ISO27001, Cyber Essentials and NCSC guidance.

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one‑off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home‑based working. This is a non‑contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.