{"id":3756032,"url":"https://alion.io/job/ntt-data-senior-threat-intelligence-analyst","title":"Senior Threat Intelligence Analyst","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":94,"open_postings":105,"ghost_share":0,"stale_share":0.448,"repost_share":0.019,"time_to_fill_p50_days":17,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomali","optional":false},{"name":"Diamond Model","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"ThreatConnect","optional":false}],"status":"live","first_seen_at":"2026-10-21T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-05T02:54:23Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"The team you'll be working with:\nSenior Threat Intelligence Analyst\nUK Security Practice | Birmingham / UK-based with flexible hybrid working | Specialist and team lead\nRole summary\nThe Senior Threat Intelligence Analyst leads the delivery of high-quality cyber threat intelligence for clients and the NTT DATA UK Security Practice. The role combines hands-on analysis with day-to-day leadership of threat intelligence analysts, setting priorities, assuring analytical quality, developing team capability and translating intelligence into decisions across security operations, incident response, threat hunting, vulnerability management and risk leadership.\nThe postholder operates with substantial autonomy, manages complex assignments, influences technical and non-technical stakeholders, and is accountable for the quality, timeliness, legality and ethical integrity of intelligence outputs.\nWhat you'll be doing:\nTeam leadership and delivery management\nLead, allocate and coordinate the work of a threat intelligence team; set clear objectives, priorities, quality expectations and delivery deadlines.\nProvide technical supervision, peer review and escalation support while enabling analysts to exercise appropriate autonomy and judgement.\nCoach and mentor team members through structured feedback, knowledge sharing, skills development plans and support for professional certification.\nManage workload, service risks, dependencies and competing client priorities; escalate material issues with clear options and recommendations.\nEstablish and monitor delivery standards, analytical tradecraft, source handling, quality assurance and reusable intelligence processes.\nAct as deputy or workstream lead when required, representing the capability in client, operational and leadership forums.\nThreat intelligence direction, collection and analysis\nDefine and maintain priority intelligence requirements and collection plans aligned to client assets, business exposure, threat scenarios and decision needs.\nDirect and conduct research across OSINT, commercial and government feeds, technical telemetry, malware reporting, trusted sharing communities, underground sources and other lawful intelligence sources.\nAnalyse threat actors, campaigns, malware, infrastructure, indicators of compromise and tactics, techniques and procedures using structured analytical techniques.\nAssess source reliability, information credibility, confidence and intelligence gaps; distinguish verified reporting from analytical judgement.\nProduce strategic, operational and tactical intelligence explaining relevance, likely impact and recommended action rather than simply reproducing threat data.\nMaintain awareness of geopolitical, sector, regulatory and technology developments affecting UK and international clients.\nIntelligence production and stakeholder influence\nOwn and assure executive threat briefs, campaign assessments, actor profiles, vulnerability intelligence, sector reports and incident intelligence packages.\nBrief senior leaders, clients, SOC teams, incident responders, detection engineers, vulnerability teams and risk stakeholders using language appropriate to each audience.\nPresent defensible conclusions, confidence levels, assumptions, intelligence gaps and recommended actions; respond constructively to challenge and alternative hypotheses.\nBuild trusted relationships with internal teams, clients, government bodies, industry groups and intelligence-sharing communities while protecting sensitive sources and information.\nOperational integration and capability improvement\nIntegrate intelligence into SIEM, SOAR, TIP, threat hunting, detection engineering, incident response and vulnerability prioritisation workflows.\nGuide the use of MITRE ATT&CK, STIX/TAXII, the intelligence cycle, Diamond Model and suitable analytical techniques.\nDevelop and quality-assure correlation rules, watchlists, enrichment logic, automation and playbooks, with controls to limit false positives and unmanaged operational impact.\nUse lessons learned, stakeholder feedback and measurable outcomes to improve collection, analysis, dissemination and intelligence-led decisions.\nSupport service development, proposals, client workshops and the evolution of NTT DATA threat intelligence methods and offerings.\nWhat experience you'll bring:\n3-5 years practical experience delivering cyber threat intelligence, including complex assessments and review of other analysts’ work.\nDemonstrable experience leading, coordinating or technically supervising a team, workstream or intelligence function and managing delivery through others.\nStrong knowledge of the intelligence cycle, structured analytical techniques, collection management, source evaluation, threat actor analysis and intelligence reporting.\nDeep working knowledge of MITRE ATT&CK and platforms such as MISP, ThreatConnect, Anomali or equivalent; practical experience of SIEM, SOAR and security operations integration.\nAbility to analyse malicious infrastructure, IOCs, malware reporting and TTPs, and explain how intelligence should change detection, response, hunting, vulnerability or risk decisions.\nGood understanding of OSINT and dark-web research, including legal, ethical, operational-security and source-protection considerations.\nWorking capability in scripting or automation, preferably Python or PowerShell, and confidence working with APIs and structured intelligence formats.\nExcellent written and verbal communication, including executive briefing, client engagement, analytical review and constructive challenge.\nProfessional qualifications and development\nCandidates should demonstrate knowledge and practical capability broadly consistent with CREST Registered Threat Intelligence Analyst level. Equivalent evidence from recognised training, certification and relevant operational experience will also be considered.\nPreferred: CREST Registered Threat Intelligence Analyst (CRTIA).\nRelevant alternatives or complementary qualifications include GIAC Cyber Threat Intelligence (GCTI), supported by SANS FOR578, or other advanced threat intelligence, incident response, malware analysis, OSINT or security operations credentials.\nMust meet eligibility requirements for UK Security Check clearance.\nWho we are:\nAt NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.\nwhat we'll offer you:\nWe offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.\nYou can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/\nWe are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.\nBack to search\nEmail to a friend\nApply now","description_format":"text","description_chars":8139,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Cybersecurity","Health Care"],"lifecycle":[{"event":"open","at":"2026-11-04T16:56:35Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-11-04T06:27:35+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.805,"p_room":0.75,"age_days":15,"expected_fill_days":18,"reasons":["conf:2","win:late","comp:brand"],"computed_at":"2026-11-05T05:43:07Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-senior-threat-intelligence-analyst","json_url":"https://alion.io/job/ntt-data-senior-threat-intelligence-analyst.json","meta":{"generated_at":"2026-11-05T05:43:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6754,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-senior-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-senior-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-senior-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-senior-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-senior-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3756032}},{"tool":"search_jobs","arguments":{"company":"nttdata.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3756032},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}