Cyber threat intelligence analyst

Cybersecurity is evolving fast, and so is Jisc. With the launch of our cutting-edge Security Operations Centre (SOC), we're tackling the growing complexity of digital threats head-on, protecting the UK's research and education sectors through advanced, integrated cyber defence.

Joining our Security Operations Team means working at the forefront of innovation, combining market-leading technologies with bespoke in-house solutions to deliver real-time intelligence, rapid incident response, and strategic guidance. If you're passionate about shaping the future of cybersecurity and making a tangible impact, this is your opportunity to be part of something transformative.

As a member of Jisc's CTI Team, you will focus on collecting, analysing and interpreting threat intelligence to identify emerging risks and support proactive defence. Working closely with our community, you'll provide intelligence-led insights on issues such as malware, phishing campaigns, DDoS activity and other network threats, ensuring members have the context and guidance needed to build resilience.

You will support Jisc's security services by monitoring multiple intelligence sources, correlating threat data and profiling adversary tactics, techniques and procedures. You'll assist the CTI Lead in developing threat profiles, producing intelligence reports and creating dashboards that deliver actionable intelligence to strengthen defences across the education and research sectors.

This role offers a valuable opportunity to gain hands-on experience in real-world cybersecurity operations while developing your capabilities against our skills framework.

You'll be supported in building technical expertise and broadening your understanding of threat intelligence, incident response, and security systems. We recognise that you may not have every skill listed, but we're looking for enthusiasm, a willingness to learn, and a proactive mindset to grow within a dynamic and supportive team.

• Work to continuously improve and develop the threat intelligence capability of CTI in accordance with the Cyber Threat Intelligence Lead and the Head of Security Operations defined requirements.
• Assist in the development and optimisation of key threat intelligence platforms to ensure that the services can proactively detect threats on the JANET network, that compromise our members infrastructure.
• Support other teams on detected security threats and advising of best course of action.
• To take part in the development of incident response drills and exercises to improve processes and procedures and to define improvement to incident response metrics.
• Liaise with several internal departments such as the wider Cyber security division, Janet network operations centre and the Janet service desk to detect and mitigate threats to the Janet network and its customers.

• Familiarity with a range of security tools and systems such as SIEMs, EDR's SOAR, IDS, WAF, DLP and DDoS mitigation systems.
• Strong knowledge of IT environments and core infrastructure, including the Microsoft Stack (Azure, Active Directory), virtualisation platforms, backup solutions, and cloud technologies.
• Familiarity in scripting to improve processes or automation.
• Understanding of CIA triad and how it may impact an organisation.
• Good understanding of common threat scenarios and vulnerability and malware analysis.
• Outstanding customer service skills with the ability to remain calm and composed under pressure.
• A degree or equivalent qualification in Computer Science, or demonstrable experience in an IT operational role such as system administration, network operations, or security analysis.

We know that sometimes people can be put off applying for a job if they think they can't tick every box, so we encourage you to apply even if you do not meet 100% of the requirements, but you feel this role is perfect for you. You may be just the right candidate for this or other roles!

Specific patterns for working in the office are not mandated, and the frequency of time worked in the office is agreed with your manager. Meeting in person is something we value so you may need to travel on occasion to any of our hub offices.

At Jisc, every role is meaningful, and every individual is valued. We foster a culture of continuous learning and personal growth, offering opportunities to develop new skills and…