NMC Cyber Intelligence Threat Manager

Job Description

Join Police Digital Service asNMC Cyber Intelligence and Threat ManagerThis is an opportunity to play your part and protect our company, our customers and our communities from cyber attacks. Be part of a dedicated team and get ready to be challenged every day to make the most of your skills and experience. Youll learn fromthose around you, and from outstanding training and development resources to become even better at what you do. With thebest technology at your fingertips, youll be part of a friendly and flexible working environment where your contribution is always valued.About Police Digital ServiceWe exist to harness the power of digital, data and technology to enable UK policing to better protect the communities it serves. Ours is a team of experts in commercial services, technical assurance, data, digital transformation and innovation, with a uniqueexperience in policing and national programme delivery.The National Management Centre will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during andafter cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both the national and force level.Key Responsibilities

• Lead the NMCs Cyber Threat functions in coordination with the Strategic Threat Lead including the direction and coordination of day-to-day tactical and operational delivery of threat intelligence, threat hunting, vulnerability management and malware analysis.
• Lead the cyber threat technical response to incidents and critical vulnerabilities impacting UK Policing
• Work closely alongside all other cyber security functions supporting the continual improvement of wider capabilities
• Act as an escalation point for, and provide coaching and mentoring to, threat intelligence and threat hunting analysts
• Cyber incidents can and do arise 24/7 therefore ability to support and lead operations out-of-hours as required.
• Identify and deliver opportunities for continual improvement of each of the cyber threat services.
• Brief senior stakeholders and the wider policing community on the current threat landscape.
• Evaluate current and emerging tools and best practices relating to the analysis of advanced persistent threats including the tactics, techniques, and procedures (TTPs) of attackers.
• Lead analysis at the tactical and operational of cyber adversaries, methodologies under exploitation, and industry trends.
• Identify, develop, and train intelligence and threat hunt analysts
• Ability to work proactively to serve the policing community with no direct oversight, and to take ownership of deliverables.
• Provide expertise through the development and use of analytical products to assist mitigation practices at a tactical and operational level.
• Establishing and interpreting requirements to ensure the needs of key stakeholders are met.
• Be a member of the NMC Leadership Team.

What you need to succeed in the roleEssential:

• Breadth of experience across cyber threat intelligence, malware analysis, and threat hunting and ability to operate in all of these functions
• Experience investigating, managing, and coordinating the cyber threat response to cyber incidents
• Excellent knowledge of adversarial cyber actors, including their TTPs and the adversary lifecycle
• Demonstrated experience in a leadership role in a cyber security function
• An active interest in coaching and mentoring others
• Comprehensive experience in conducting malware, phishing, and SIEM log analysis
• Comprehensive awareness of the current cyber threat landscape
• Comprehensive experience with threat modelling systems and risk assessment models
• Demonstrated ability to manage customer relationships
• Strong leadership skills with the ability to prioritise and operate in a methodical and disciplined manner
• Excellent ability to translate complex cyber issues to relevant audiences, both verbally and written
• Experience in internal and external stakeholder management and engagement
• Ability to operate in high-pressured environments
• Ability to work independently and with no oversight and/or guidance
• Ability to acquire SC and NPPV3 level clearances

Desirable: CREST Registered Threat Intelligence Analyst Demonstrated experience in developing and delivering cybercrime or risk reduction recommendations and / or strategies Completed Intelligence Analysis course (e.g. NIAT, RISC UK or similar)Why Join us

• Balance is important and we want you to take time off to rechargeso we offer 28 days annual leave plus bank holidays, rising to 30 days after 5 years of service.
• We care about your well-beingwe have an employee assistance programme that offers not just welfare benefits and counselling at the end of a telephone line but also discounts.
• We want to help you plan for the futureso we offer an excellent pension scheme and life assurance cover.
• We want you to be able to put your mind at rest regarding your healthoffering remote GP, mental health and physiotherapy appointments via video consultation.

You can find out more here:BenefitsPolice Digital Service (pds.police.uk)Working ArrangementsThis is a hybrid role and regular travel to the Lancashire office will be required.