Threat Team Lead

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK’s sustainable nuclear future.

To lead the Threat team in delivering proactive threat intelligence, threat hunting, and advanced analysis to identify, assess, and mitigate cyber threats targeting Sellafield Ltd’s critical infrastructure and information assets. The role ensures timely identification of emerging threats, supports incident response, and drives improvements in threat detection capabilities. The Team Lead will manage operational processes, develop team capability, and ensure compliance with regulatory and organisational security standards, contributing to the safe and secure operation of the nuclear site.

• Define and maintain the strategic roadmap supporting the Head of Cyber Security Operations for threat intelligence and threat hunting capabilities, ensuring alignment with organisational risk appetite and long-term cyber resilience goals.
• Lead the development and delivery of threat intelligence and threat hunting capabilities across IT and OT environments.
• Oversee collection, analysis, and dissemination of actionable threat intelligence to internal stakeholders.
• Drive proactive threat hunting activities to identify indicators of compromise and adversary techniques.
• Ensure timely escalation and coordination of threat-related incidents in line with organisational and regulatory requirements.
• Maintain and improve threat management processes, ensuring alignment with industry best practices and compliance frameworks.
• Develop and maintain threat dashboards and reporting for senior stakeholders and regulators where appropriate, ensuring KPIs are tracked for threat intelligence and hunting effectiveness, driving measurable improvements in detection and response.
• Integrate threat intelligence into SOC detection workflows and automation pipelines where appropriate.
• Collaborate with detection engineers, SOC analysts, and ICT teams to enhance detection coverage and response capabilities.
• Provide technical leadership, mentoring, and performance management for Threat Analysts.
• Promote continuous improvement initiatives, including automation and advanced analytics for threat identification.
• Ensure adherence to data protection, confidentiality, and security standards across all threat-related activities.

Essential Skills

• Degree or equivalent experience in a relevant discipline g., Cyber Security, Computer Science, Digital Forensics.
• Proven experience in threat intelligence, threat hunting, or advanced SOC operations.
• Strong knowledge of adversary tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK.
• Experience managing and developing technical teams in a threat analysis context.
• Knowledge of regulatory frameworks (e.g., GDPR, NIS Directive) and security standards (e.g., NCSC CAF).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and stakeholder engagement abilities.
• Experience in automating threat analysis and hunting processes.
• Ability to communicate technical threat information to both technical and non-technical audiences, including senior management.

Desirable Skills

• Professional certifications such as GPEN, GCTI, CISSP, CISM, or equivalent.
• Experience with threat intelligence platforms and integration into SIEM/SOAR.
• Familiarity with cloud threat detection and hybrid…