Threat Intelligence Specialist

Computacenter AG & Co. oHG; England; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading technology and services provider in the UK seeks an experienced professional to enhance threat intelligence capabilities. You will gather and analyze data to produce actionable intelligence, develop the Threat Intelligence Platform, and lead initiatives to safeguard against emerging threats. Candidates should have extensive experience in intelligence, excellent communication skills, and a strong background in cyber security.

Qualifications

• Current SC clearance or willingness to obtain.
• Extensive experience in intelligence collection and analysis.
• Experience with security incident management.

Responsibilities

• Gather and interpret data from various sources for intelligence.
• Monitor geopolitical events affecting cyber security.
• Lead threat intelligence initiatives across the organization.

Skills

Threat intelligence analysis

Geopolitical event monitoring

Communication skills

Cyber security knowledge

Technical understanding of networking

Tools

Threat Intelligence Platform

MITRE ATT&CK Framework

Job description

Overview

Select how often (in days) to receive an alert:

Location: UK - Mobile England | Job-ID: 215433 | Contract type: Standard | Business Unit: Cyber Security

Life on the team

The Cyber Threat Operations Team plays a vital role in protecting Computacenter from the latest threats and threat actors. We maintain a forward-looking mentality to identify emerging threats and trends, ensuring we stay one step ahead of security threats. Our team combines specialist skills in Threat Intelligence, Threat Hunting, Malware Analysis, Digital Forensics, Incident Response, and Threat Modelling.

At our core, we are driven by a mission to “investigate, collate and locate”: to unearth new threats, gather all available intelligence, and proactively respond. We apply technical expertise and global awareness to produce relevant, actionable intelligence that helps Computacenter minimise risk.

We stay ahead by continuously tracking adversaries, geopolitical developments, and technical advancements to understand the Tactics, Techniques, and Procedures (TTPs) of those who pose the greatest threats. Our culture of curiosity ensures no stone is left unturned, and we work across the business to deliver strategic, tactical, operational, and technical intelligence.

What you’ll do

You’ll be responsible for gathering, correlating, and interpreting data from various sources to produce actionable intelligence. You’ll oversee our Threat Intelligence Platform (TIP), ensuring we are aware of the latest, critical intelligence and ensuring our feeds are up to date and will be responsible for briefing our wider security function on identified threats, driving remediation ad readiness activities. You will also be responsible for leading threat-lead initiatives across the organisation to better protect Computacenter against emerging threats.

What this looks like:

• Take ownership of the Threat Intelligence Platform and related tooling, ensuring its effective utilisation for monitoring and analysing both cyber and geopolitical threats.
• Optimise the platform to enhance the team's capabilities in threat detection and response.
• Continue to develop access to internal data and leverage threat intelligence tooling to maximise intelligence opportunities.

Cyber Threat Analysis & Dissemination:

• Identify intelligence of concern for Computacenter across various sources and tooling and conduct analysis and assessment of such threats and their potential impact to the business.
• Monitor and analyse geopolitical events to identify potential impacts on the organisation's cyber security landscape.
• Using a variety of sources to increase knowledge, corroborate and parallel information. This involves engaging in communities and intelligence sharing initiatives.
• Have confidence in your ability to draw conclusions and provide intelligence led recommendations.
• Own and run regular briefings of Threat Intelligence to the wider security team.
• Respond to intelligence requests from internal teams, using all available sources of intelligence to produce assessments on the threat to support decision-making.
• Ensure clear and concise communication of assessments and complex bits of information for various stakeholders.
• Collaborate with cross-functional teams to address immediate intelligence needs and contribute to the overall security posture.
• Work closely alongside other Security Operations teams such as SOC.
• Develop hypotheses based on threat intelligence to direct joint operations with Cyber Threat technical resources to direct threat hunting.
• Continue to develop access to internal data and leverage threat intelligence tooling to maximise intelligence opportunities.
• Dark Web Monitoring to unearth threats to Computacenter.
• Collection of Priority Intelligence Requirements from key stakeholders.
• Effective tracking of intelligence activities against these PIRs.
• Reporting of service quality against KPIs.
• Required to work out of hours, when situation dictates, to support Incident Response activities.

What you’ll need

• Current SC clearance or the ability and willingness to undertake.
• Extensive and demonstratable experience in the collection, analysis, production and dissemination of intelligence.
• Experience of using a Threat Intelligence Platform
• Experienced in supporting security breaches, security incident management and delivering briefings to senior management.
• Excel in balancing priorities, being able to identify where Threat Intelligence could provide the most value in projects across the business.
• Excellent communication skills, including the ability to influence and persuade stakeholders to enact a more security focused approach.
• Demonstrable experience in Information and Cyber Security and a desire to continue building your knowledge on Cyber Security.
• Technical understanding of networking, internet protocols and information security.
• Experience of using MITRE ATT&CK Framework, Kill Chain, and Diamond Intrusion model.
• Advanced knowledge of global threats to international cyber security and conversant in the tactics, techniques and procedures used by adversaries.

About us

We are a leading independent technology and services provider, trusted by large corporate and public sector organisations. We are a responsible business that believes in winning together for our people and our planet. We help our customers to source, transform and manage their technology infrastructure to deliver digital transformation, enabling people and their business.

Our business may be about technology, but first of all it’s about people

With over 20,000 people across 22 countries, we are proud of our inclusive culture - where everyone can thrive, feel valued, and truly belong.

As an equal opportunities employer, we’re committed to ensuring fair and equal access to opportunities for all. Your application will be considered on its merits, regardless of your age, disability, ethnicity, gender identity, or any other characteristics protected by law. What matters most to us is that you share our vision and values, and bring the experience and skills we’re looking for.

We are proud to be a Disability Confident Employer. We welcome applications from disabled people and accept applications in alternative formats. We also guarantee to interview applicants who have a disability.

If you share our values and want to make a meaningful impact in a supportive, forward-thinking environment - we’d love to hear from you!