Lead Threat Modeller

Frimley, Surrey
CBS butler

Lead Threat Modeller

• Preston or Frimley (Hybrid)
• £55,000 – £62,500 + 10% bonus

What you’ll be doing – Lead Threat Modeller

• Leading the delivery of the threat modelling function by providing subject matter expertise, analysis and guidance to protect against cyber threats
• Acting as the Threat Modelling Lead, providing direction to Threat Modellers and liaising with defined groups, organisation functions and programmes, escalating issues and recommendations in support of intelligence led security controls
• Presenting to, and engaging with internal/external customers, acting as a lead single point of contact for defined groups
• Capturing and disseminating security information and providing threat modelling expertise as and when required

Essential Skills & Experience – Lead Threat Modeller

• Proven experience of working within a Cyber Threat Intelligence discipline
• Expert understanding of Cyber Threat Intelligence techniques and best practice
• Knowledge of Purple/Red Team disciplines, Penetration Testing and Vulnerability Management life cycles
• Excellent knowledge of cyber threat landscape, current affairs and geopolitics, including activity groups and how to apply this knowledge within an operational environment
• Solid understanding of Threat Intelligence Platforms and coordination of ATP and TTPs to support Cyber Operations
• Expertise in the application of the MITRE ATT&CK Framework in an operational environment
• Knowledge of network protocols such as HTTP(S), SMTP, TCP, SSL/TLS

Desirable – Lead Threat Modeller

Crest & GIAC qualifications or equivalent proven industry experience

The Cyber Operations team:

Cyber Operations is responsible for protecting our team from Cyber Attack by various threat actors. Not only do we protect our team and its employees, indirectly we protect those who protect us – the women and men who serve in our armed forces and rely on the products and services this company creates. Across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world-class capability.