Cyber Threat Intelligence Analyst

As a Cyber Threat Intelligence Analyst, you will support MI5's mission by analysing a variety of data, to both understand and identify malicious cyber activity impacting our national security. It's a crucial and exciting role, with plenty of support and training, where you'll get great autonomy, development, and occasional national and international travel.

Open source software is accessible to anyone, meaning cyber threats are increasing every day. And this unique role means you'll be able to uncover these incidents through complex analysis tasks. Day to day, you'll work within a team of analysts on technical tasks, including network analysis of indicators, events and topologies and host analysis of operating system artefacts, files and malware.

Creating reports with your findings, you'll share them with technical and non-technical audiences. You'll help further enable analysis and automate workflow through programming as well as improve analysis techniques and capability through analytical tradecraft development. And you'll also get the chance to take on individual projects to improve teamwork., You'll receive a full induction when you join, getting to know our organisation and mission, before getting a department induction. And there are lots of opportunities to shadow and learn from other tech experts within your team. There's also an organisation-wide Induction Roadmap, with the chance to meet key partners, partners and stakeholders.

We encourage all our cyber technical specialists to join the Cyber Technical Framework (CTF).This has been developed to assess your knowledge, skills and attributes, while providing support to progress and grow as a leader with deep technical abilities. No matter what, you'll be given every opportunity to develop both professionally and personally in a way that suits you.

There's loads of room to explore and grow here at MI5. Recognising the skills and abilities of our colleagues as they progress is central to our culture, so you can look forward to constant support to develop during your career. We provide everyone with a yearly learning budget and personal learning days, as well as a tailored development plan to suit your goals and ambitions.

You will have good technical understanding of, and keen interest in, cyber security and networking protocols, and experience of data analysis - including networking forensics or host-based forensics. You will also be extremely curious, always eager to understand the 'why' and 'how' and be able to acquire and apply new technical skills quickly. You'll have a keen interest and positive attitude towards continued development of core technical skills.

You'll be a problem solver, always thinking independently and creatively. You're a confident planner, able to balance your workload and deliver to agreed deadlines.

Communication skills are key in this role, as you'll collaborate with a range of people and explain complex information to technical and non-technical audiences., MI5 are proud to have achieved Leader status within the DWP's Disability Confident scheme. This is aimed at encouraging employers to think differently about disability and take action to improve how they recruit, retain and develop disabled people. Being disability confident, we aim to offer a person-to-person interview to any candidate who self-identifies as disabled and meets the essential criteria for the role. This is our 'Offer of Interview' (OOI). To secure an interview for this vacancy, the essential criteria, to be assessed at application form sift, is as follows:

• You will be able to demonstrate good technical understanding of cyber security and networking protocols.


• You will have experience exploiting large volumes of data to produce accessible product and insight for both technical and non-technical audiences.
  
  MI5 keeps the country safe from serious threats like terrorism and attempts by states to harm the UK, its people and way of life. We carry out investigations by obtaining, analysing and assessing intelligence, and then work with a range of partners, including MI6 and GCHQ to disrupt these threats. Through our protective security arm, we provide advice and guidance to government, businesses and other organisations about how to keep themselves safe. A role in MI5 means you'll do unique and challenging work in a supportive and encouraging environment, making a real difference to UK national security.
  
  Starting salary of £48,928. This role qualifies for a specialist capability-based pay approach, based on our skills assessment at interview, you could be eligible for a skills payment, potentially increasing the salary to £57,362 - £61,732., Full time, part time and compressed hours will be considered., You'll receive a starting salary of £48,928 plus other benefits including:



• 25 Days Annual Leave automatically rising to 30 days after 5 years' service, and an additional 10.5 days public and privilege holidays.


• Opportunities to be recognised through our employee performance scheme.


• Personal Learning Budget.


• Interest-free season ticket loan.


• Excellent pension scheme.


• Cycle to work scheme.


• Facilities such as a gym, restaurant and on-site coffee bars (at some locations).


• Paid parental and adoption leave.



• The starting salary for this role is £48,928. This is a role that qualifies for a specialist capability-based pay approach that recognises and rewards cyber technical specialist expertise. Therefore, based on our assessment of skills and experience at interview, you may be eligible for additional skills payment, potentially increasing the salary to between £57,362 and £61,732. To retain the higher salary, you will need to demonstrate and accredit your skills based on our Cyber Technical Framework, within the first year of employment. If you are unable to evidence the required skills, you will be given the opportunity and support to rectify this. If this is not achieved by the end of your first year of employment, it may involve reverting to a lower pay level, within the stated range., Competency Interview.


• Technical interview.


• If successful, you will receive a conditional offer of employment.


Please note, you must successfully pass each stage of the process to progress to the next. Your application may take around 6 - 9 months to process including vetting, so we advise you continue any current employment until you have received your final job offer.

Before You Apply

To work at MI5 you need to be a British citizen or hold dual British nationality. You can read our full eligibility criteria here.

This role requires the highest security clearance, known as Developed Vetting (DV). It's something everyone in the UK Intelligence Community undertakes. You can find out more about the vetting process here.

Please note we have a strict drugs policy, so once you start your application, you can't take any recreational drugs and you'll need to declare your previous drug usage at the relevant stage.

Before you apply, we advise you to consider setting up a separate email address for your contact with us, to ensure your personal and application correspondence remain separate. Try to avoid having identifying features in your email address, such as your first and/or surname and date of birth. This is good practice and will help you to manage your application with us more discretely.