Threat Analyst (Cyber)

National Grid

We are one of the world’s largest investor-owned energy companies, committed to delivering electricity and gas safely, reliably and efficiently to the customers and communities we serve.

National Energy System Operator (NESO) is on a journey towards a sustainable and secure energy future. Together we build on this momentum, advancing the Electricity System Operator’s (ESO) plan for zero carbon operability of the electricity system by 2025.

NESO are now looking for a Cyber Threat Analyst to join our Sector Security Team. As part of the new Sector Security and Risk team you will provide threat intelligence and assessment for the energy sector. You will form part of a new team which will establish NESO's threat intelligence function determining governance, requirements, inputs, and outputs. You will advise on the threat landscape and provide insights which inform sector risk assessments and advice to Government. In delivering threat intelligence products for the energy sector, you will be adding value by providing impact assessment and recommendations. The customer driven approach will be further supported by a mindset of continuous improvement.

You will have a deep understanding of the threat landscape and the intelligence cycle. You will work closely with the Security Incident Management team threat analysts and ensure that thematic and strategic threat intelligence is embedded into our new obligations to provide assessments to Government.

This role can be based from Wokingham or Warwick, and we continue to offer hybrid working from office and home.

Key Accountabilities

Delivery:

• Provide expertise in cyber threat intelligence and communicate risk to Government and the energy sector.
• Identify requirements and develop appropriate cyber threat intelligence outputs, including strategic, technical, and tactical intelligence.
• Collate, record, evaluate, analyse, and disseminate all source intelligence reporting with a focus on outputs relevant to the future system operator and the whole energy sector.
• Provide primary and secondary source intelligence reports, updates, and threat assessments to support operational understanding and threat awareness for the future system operator and the whole energy sector.
• Deliver information in formal reports or as presentations and briefings to internal and external customers.

Subject Matter Expertise:

• Implement intelligence cycles to advance understanding of current and emerging threats.
• Support knowledge sharing and collaboration between the threat intelligence function and other teams.
• Observe strict non-disclosure rules about your work, the extent of which may vary.
• Conduct analysis and research to determine the identity, motivations, relationships, targets/victims, capabilities, tooling, and infrastructure of threat actors relevant to the future system operator and the whole energy sector.
• Determine appropriate sources and stakeholders and establish relationships to provide intelligence fusion opportunities.
• Develop partnership with Security Operations and Incident Management, to embed threat intelligence into detection and response capabilities.
• Develop relationships with government and energy sector stakeholders to improve understanding of threat intelligence for the future system operator and the whole energy sector.
• Take active involvement in industry forums and research groups.
• Work with intelligence agencies to improve broader understanding of energy sector threat landscape.

About You

• Experience of using common frameworks such as MITRE ATT&CK, Diamond Model and the Cyber Kill Chain
• Team player and adept at working in multi-disciplinary and diverse teams.
• Proven analytical skills and capable of solving new and complex problems.
• Excellent written and verbal communication skills with the ability to communicate the impact and importance of detailed technical information to non-technical and senior audiences.
• Managing and building relationships with customers and stakeholders.
• Previous experience in critical national infrastructure or similar sector, involving the analysis and delivery of threat intelligence.

What You'll Get

A competitive salary between £60,000 – 70,000 – dependent on experience and capability.

As well as your base salary, you will receive a bonus based on company performance, 26 days annual leave as standard and a competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%.

You will also have access to a comprehensive benefits package tailored to support your well-being and professional success. From a competitive salary to flexible work arrangements, we promote your work-life balance. Enjoy fit for purpose wellbeing and lifestyle offerings, ongoing skill development aligned to our Purpose and Values, and be part of a supportive community that values your individuality and where you can belong.

About us

Traditionally, Britain’s energy system has been split into two areas – gas and electricity – but to ensure that Britain’s energy system is secure and affordable there needs to be co-ordination across the whole energy system, with one single entity responsible for translating policy into immediate strategy. National Energy System Operator (NESO) will bring unparalleled change.

Forge a path to a sustainable future for everyone.
Your energy, our future, together.

About the National Energy System Operator (NESO)
In Autumn of 2024, the ESO transitioned to National Energy System Operator, or NESO for short. Previously denoted as the Future System Operator (or FSO), the new National Energy System Operator is the independent body responsible for planning Great Britain’s electricity and gas networks and operating the electricity system.

The ESO, including all of its existing roles, are now at the heart of the new National Energy System Operator. As NESO, we will build on our existing roles, capabilities, and ways of working significantly to create an organisation the energy system and its users’ need. Our new capabilities will enable us to look across vectors, including electricity, natural gas and hydrogen, and crucially consider the trade-offs between them.

The organisation is set up as a public corporation with its own Board of independent directors, with complete operational independence from government, the regulator and any and all commercial interest. As was the ESO, NESO will be licenced and regulated by Ofgem through price control agreements and obligated to identify optimal solutions to system operations and planning in the most sustainable, affordable and secure way for all.

The time to deliver is now. As part of our team, you won’t just be touching the lives of almost everyone in Great Britain – you’ll be shaping the way we use and consume energy for generations to come.

More Information

We work towards the highest standards in everything we do, including how we support, value and develop our people. Our aim is to encourage and support employees to thrive and be the best they can be. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds, and offer flexible and tailored support, at home and in the office.

We're committed to building a workforce that represents the communities we serve, and a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.