Job Description

The Threat Intelligence function at Sellafield Ltd is responsible for planning, gathering, processing, and analysing cyber threat information specific to Sellafield Ltd and the broader civil nuclear sector. The team transforms this information into valuable and actionable intelligence to inform risk management, security operations, and strategic planning, supporting the proactive defence of the organisation’s critical assets.

This is a newly established threat function within the Cyber Security Operations function at Sellafield Ltd, designed to strengthen the organisations cyber security posture. Sellafield operates in a uniquely complex, regulated and high-stakes nuclear environment, where protection of critical assets is paramount.

The role must navigate the challenges of building foundational cyber capabilities from the group up, establishing robust security practices, integrating advanced detection technologies, and developing tailored processes to suit both legacy and emerging technologies. Operating at the intersection of IT and OT the function must ensure seamless delivery, compliance with stringent regulatory frameworks, and resilience against evolving threats.

Principal Accountabilities

For both roles, with the senior role leading/directing and the analyst role supporting/delivering:
• Plan, gather, process, and analyse information from varied sources (open, closed, internal, dark web) relevant to Sellafield Ltd and the civil nuclear sector.
• Produce high-value intelligence outputs, ranging from technical indicators to strategic advisory for business and operational risk decision-makers.
• Assess emerging threats, actor tactics, vulnerabilities, and trends; contextualise findings for impact on the organisation.
• Collaborate with SOC, engineering, and incident response teams to ensure intelligence integration and alignment with current and future threats.
• Maintain relationships with external partners, government, and sector-specific threat-sharing groups.
• Develop and enhance processes, methodologies, and policies for the threat intelligence function.

Additional duties for Senior Analyst:
• Lead/direct the planning, gathering, processing and analysis of information from varied sources relevant to Sellafield Ltd and the civil nuclear sector.
• Drive strategic intelligence initiatives and innovation in analytic practices.
• Mentor, develop, and manage junior analysts.
• Represent CS&IA in threat intelligence communities and forums.

Authorities & Dimensions

For Senior Threat Intelligence Analyst:
• Direct line management responsibility for junior analysts, including mentoring and performance management.
• Act as the primary escalation point within the threat intelligence function for complex or high-impact threats.
• Owns the panning and prioritisation of the threat intelligence programme, including developing internal requirements and driving external collaboration.
• Accountable for quality assuring the key threat intelligence reports and outputs consumed by senior stakeholders and board-level decision makers.
• Provide subject matter expertise and guidance for the integration of threat intelligence process across the wider CS&IA organisation.

Essential Skills

Essential for All:
• Cyber threat intelligence experience, including intelligence lifecycle (planning, collection, analysis, dissemination).
• Strong analytical, investigative, and reporting abilities.
• Familiarity with threat intelligence platforms, OSINT, SIEM, and frameworks such as MITRE ATT&CK.
• Excellent written and verbal communication skills, with the ability to produce clear and concise reports.
• Strong analytical and problem-solving skills, including the ability to work with incomplete, ambiguous, or conflicting information.

Desirable Skills

• Sector-specific knowledge (nuclear, critical infrastructure).
• SANS FOR578 – Cyber Threat Intelligence (GCTI).
• CREST Threat Intelligence Analyst (CTIA).

Additional for Senior:
• Extensive experience leading threat intelligence functions in complex or regulated environments.
• Demonstrated ability to influence at a senior level and deliver projects/programmes independently.
• Experience mentoring, coaching, or managing a team of analysts.

Additional Information

• Open VN
• Number of Vacancies: 2
• Contact/s: Andrew Shutak

The interviews for this vacancy are to be confirmed.

ASW’s may have the right to apply for internal Sellafield Ltd vacancies. Please note if you are an Agency Supplied Worker you are required to attach evidence of all qualifications obtained to support your application. We require a minimum of A*-C (9-4) GCSE in English Language, Maths & Science/IT or equivalent / higher qualification.

If you choose to apply for this role and your application is shortlisted by the hiring manager, you will be invited to a competency based interview.

Competencies will be provided if you are invited to interview.

Please see link to the competency framework for further information:
https://slportal.ssa-intra.net/pub/SC001/00027/Competency%20Framework/Forms/AllItems.aspx

If your technical competency is not in the above framework, please refer to the profession’s share point page for further information.

Sellafield Ltd are recognised as a Disability Confident Employer (Level 3). Disability Confident employers offer an interview to disabled applicants that meet the minimum criteria for a vacancy. Sellafield Ltd define the minimum criteria as the ‘essential skills’ which are listed on the vacancy notice. Whilst completing your application form, you will be able to indicate if you wish to be considered under the disability confident scheme. If you would prefer to discuss this directly with us, please contact the GBS Recruitment team on recruitment@sellafieldcloud.co.uk

Please ensure that you save a copy of this advert for future reference if you make an application for this role.

The closing date for this vacancy is 20th July 2026.