Threat Intelligence Analyst

BAE Systems (New); Leeds; On-site; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a Cyber Threat Intelligence and Vulnerability Lead to enhance their Security Operations Centre. In this pivotal role, you will ensure the detection and reporting of potential cyber threats while leading a team dedicated to vulnerability management. Your expertise will guide the development of intelligence products tailored to client needs, ensuring high standards and relevance. This position offers a unique opportunity to work on critical national infrastructure projects, contributing to national security in a collaborative environment. If you're passionate about cybersecurity and ready to make an impact, this role is for you.

Benefits

Referral Bonus: £5,000

Qualifications

• 5+ years in threat intelligence or vulnerability management.
• Expertise in current and emerging cyber threats.

Responsibilities

• Ensure detection and reporting of cyber threats daily.
• Develop and review Priority Intelligence Requirements.

Skills

Threat Intelligence

Vulnerability Management

Technical Incident Response

Open-Source Research

Windows Operating System

Linux Operating System

Networking Concepts

Cloud Platforms

Education

Bachelor's Degree in Cybersecurity

Equivalent experience in SOC/Threat Intelligence

Job description

Location(s): UK, Europe & Africa : UK : Leeds

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments.

Cyber Threat Intelligence and Vulnerability Lead

Job Title: Cyber Threat Intelligence and Vulnerability Lead
Requisition ID: 121483

Location: Leeds (this is a 100% office based role due to the nature of the project)

Grade: GG10 – GG11

Referral Bonus: £5,000

Role Description

BAE Systems have been contracted to undertake the day to day operation of (and incremental improvement of) a dedicated Security Operations Centre (SOC) to support the defence of a major UK Critical National Infrastructure (CNI) organisation. The networks protected are predominantly hosted in cloud platforms, with many hundred systems within these environments that must be protected. The customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to.

This role requires a minimum of DV clearance.

This role reports to the Service Delivery Manager.

The Role

You will be:

• Accountable for ensuring all relevant potential cyber threats and key vulnerabilities are detected, triaged and reported on daily.
• Accountable for all regular reporting and ensuring the efficient delivery of all threat intelligence and vulnerability products by their respective deadlines.
  • Where there is not established schedule for a product, the lead is responsible for ensuring that an achievable deadline is set and the work is fairly tasked out.
• Responsible and accountable for the selection of key threat actors that pose the greatest risk to the client.
• Responsible for the development and continuous review of Priority Intelligence Requirements (PIRs), a tailored collection plan and implementation of both to ensure that the intelligence products are relevant to the client’s interests.
• Accountable for the quality of all Threat Intelligence and Vulnerability Reports, ensuring that when a product is delivered it is at the highest possible standard.
• Accountable for ensuring that all relevant processes are effectively documented and regularly reviewed.
• Responsible for providing well-reasoned and sound analysis, context and predictions into the relevant deliverables.
• Accountable for assessing the maturity of the established functions within the client and identifying areas for improvement, productising those improvements and delivering them.
• Accountable for the personal development of all members of the Threat Intelligence and Vulnerability team.
• Responsible for ensuring that during times of reduced capacity all ADHOC and regular products are completed and are at a sufficient quality for distribution.

Requirements

Technical

• 5+ years’ experience in threat intelligence, vulnerability management or conducting research and investigating cyber threats in a technical capacity.
• Experience in technical incident response and management.
• An expert understanding of current and emerging threats related to government and CNI.
• Excellent Open-Source research skills.
• Demonstrate a high level knowledge of Windows and Linux operating systems and the use of command line terminals.
• Demonstrate a high level knowledge of core networking concepts and technologies.
• Demonstrate a high level knowledge of and experience operating within cloud platforms.

Non-Technical

• Bachelor’s Degree in Cybersecurity, Computer Science or equivalent experience in a SOC/Threat Intelligence/Vulnerability Management field.
• Excellent written and verbal communication skills with the ability to communicate the risk, potential impact and importance of detailed technical information to non-technical and senior stakeholders.
• Team player and adept at working in a multi-disciplinary and diverse team.
• Self-motivated and motivates others, keeping morale and performance high.
• Experienced team leader & line management experience.

Life at BAE Systems Digital Intelligence

Diversity and inclusion are integral to the success of BAE Systems Digital Intelligence. We are proud to have an organisational culture where employees with varying perspectives, skills, life experiences and backgrounds – the best and brightest minds – can work together to achieve excellence and realise individual and organisational potential.