About the role

Location: London, UK

‍Duration: Permanent, full-time role

At Security Alliance a Senior Strategic Cyber Threat Intelligence Analyst identifies and collects threat information and intelligence relevant to our clients and produces high quality reporting they can rely upon.  The role centres around the collation and analysis of information from a broad spectrum of sources, including open-source reporting, bespoke tooling and inputs from SecAlliance’s own intelligence sharing communities. The analyst will report to the Strategic Intelligence LeadThis role will encompass working on one of the most interesting and exciting intelligence sharing initiatives in the world and will offer the candidate significant exposure to peers, clients and international cyber threat institutions.

Candidates must have the legal right to live and work in the UK at the time of application.

The analysts will be responsible for

• Collecting, analysing, assessing, producing, and disseminating informed and accurate reporting, providing actionable insight into the threat landscape.
• Information will also be fused with other non-cyber information where possible, providing actionable and relevant insight into a given event or incident.
• Building and maintaining relationships with partners, clients and peer analysts to ensure a more complete picture of the threat landscape.
• Identification, contextualisation, and analysis of threats, exploits, and vulnerabilities that pose previously unknown risks to our clients and partners.
• Maintaining a strong awareness of geopolitical developments and their interplay with CTI
• High quality strategic and technical report writing, using widely used standardised reporting structures in various forms.
• Training and stakeholder engagement with clients to ensure a seamless cross-organisational team of expertise.
• Be the direct link between SecAlliance and individual clients (or client communities), to develop relationships and encourage collaboration and intelligence sharing.
• Training and stakeholder engagement with clients to ensure a seamless cross-organisational team of expertise.
• Working under operational time pressure, self-managing tasks, meeting deadlines in support of client requirements.
• Leading research activities into threats and threat actors, deploying analytical techniques to create actionable intelligence.
• The mentoring of junior analysts to develop their analytical capabilities and overall competency help further their own careers.
• Working with other divisions within SecAlliance/CSIS, in order to ensure all services are underpinned by high quality and timely cyber threat intelligence.
• Developing new and innovative ways of undertaking the direction, collection, analysis and dissemination of intelligence

As a Senior Analyst, you are expected to set an example in both output and work ethic. Your support to the wider team and junior analysts will be critical in the development of the capability.

Essential Experience

• An experienced Cyber Threat Intelligence Analyst with at least four years direct, operational experience.
• Detailed understanding of the threat landscape and geopolitics, and how these influence the cyber threat landscape.
• The ability to write high quality, accurate, coherent informative intelligence reporting, provide detailed analyses of the threat landscape and assessments around the likely impact of events.
• Previous direct use of CTI methodologies such as investigative pivoting models, investigative frameworks, as well as MITRE ATT&CK, and the Extended Cyber Kill Chain.
• Experience in open-source collection, use of online tools, experience querying internal databases of information in support of investigative efforts.
• Professional experience writing short and long form reporting to a specified, technical writing style.
• A high level of professionalism, focus, and emotional maturity.
• Ability to manage one’s own workflow and work proactively.
• Maintain high standards of written work and ability to QC the work of junior analysts.

Desirable Experience

• Strong communicator with experience of taking complex technical findings and translating into clear business impact.
• Experience with Threat Intelligence Platforms such as MISP or OpenCTI.
• An area of expertise (e.g. geopolitical theme, industry vertical, threat actor type, etc).
• Experience mapping and tracking threat actor campaigns and/or threat hunting.