Developer – Threat Intelligence Platform

About the role

The Threat Intelligence engineering team at NCC is seeking a Developer to enhance and maintain the tooling that powers our cyber threat intelligence platform. You will work closely with analysts, engineers and developers to deliver secure, automated solutions that connect diverse data sources.

Key responsibilities

• Build, deploy, secure, monitor and maintain Python application extensions and CLI tooling.
• Integrate backend systems to break down data silos.
• Provide automation and tooling to bridge gaps between developers, engineers and analysts.
• Support teams by creating robust, automatable processes.
• Identify and implement new automation opportunities across the department.

Required profile

• Proficiency in Python and Bash for backend integration and CLI development.
• Strong understanding of cloud networking and computing concepts, especially AWS.
• Experience working in a DevOps environment with containerisation technologies such as Docker and Kubernetes.
• Knowledge of security principles applied to cloud services.
• Ability to explain complex technical topics clearly to team members.
• Creative problem‑solving skills to design solutions from the ground up.

Required skills

• Python
• Bash
• AWS
• Docker
• Kubernetes
• CLI tooling
• DevOps practices
• Cloud networking
• Security principles
• STIX2/TAXII2 standards
• OpenCTI
• MISP

What we offer

• Flexible working options.
• 25 days holiday plus bank holidays, with the ability to purchase up to 5 extra days.
• Medicash & Critical Illness Scheme.
• Pension, Life Assurance and Share Save Scheme.
• Community volunteering programmes.
• Green Car and Cycle‑to‑Work schemes.
• Special time off for life events and family planning support.