Threat Intelligence & Adversary Emulation Analyst (Hybrid)

Nuclear Decommissioning Authority; Greater London, Harwell; Hybrid; GBP 39,000 - 45,000; Full time

Benefits offered by this job

Generous annual bonus

Civil Service pension

30 days leave + holidays

Flexible working options

Job summary

The Nuclear Decommissioning Authority is seeking an experienced Cyber Threat Intelligence and Adversary Emulation Analyst. You will collect, analyse and disseminate closed group and open-source intelligence to support the NDA GSOC and customers, and drive adversary emulation programs with technical toolsets.

You will deliver intelligence briefings, assess threat actors and attack vectors, and collaborate with security teams to validate controls and improve resilience.

Qualifications

• Experience in cyber threat intelligence lifecycle and security operations.
• Ability to collect, analyse and interpret threat information to produce actionable intelligence.
• Strong understanding of cyber threats, attacker behaviours and MITRE ATT&CK concepts.

Responsibilities

• Analyse threat intelligence sources and validate credibility and relevance for NDA group threats.
• Provide threat intelligence to NDA GSOC customers via incident analysis and bulletins.
• Develop and deliver intelligence briefings and monthly threat trend reports.
• Coordinate with Cyber Threat Intelligence and Adversary Emulation Manager on threats and impact.
• Conduct adversary emulation activities using automated toolsets to test security controls.

Skills

Cyber Threat Intel

Threat Analysis

MITRE ATT&CK

Adversary Emulation

Reporting

Stakeholder Eng.

Team Leadership

Education

Cyber Security

Threat Intelligence

Computer Science

Digital Forensics

Job description

The Nuclear Decommissioning Authority is seeking an experienced Cyber Threat Intelligence and Adversary Emulation Analyst. You will collect, analyse and disseminate closed group and open-source intelligence to support the NDA GSOC and customers, and drive adversary emulation programs with technical toolsets.

You will deliver intelligence briefings, assess threat actors and attack vectors, and collaborate with security teams to validate controls and improve resilience.