cyber threat intelligence analyst OSINT

What are you going to do?

As a threat intelligence analyst, you'll analyze developments in the internal and/or external cyber threat landscape for the police. Based on OSINT, incoming feeds, information from partners, and sources you develop yourself, you'll generate actionable intelligence. If a threat arises in our digital environment, you'll be the first to know. You'll ensure that the right people are informed and can take action to address the threat. Your responsibilities at a glance:

• create cyber threat analyses and reports;
• collect and analyze cyber threats from multiple sources;
• developing new intelligence sources;
• developing and supporting the creation of detection mechanisms;
• updating the threat landscape.

Where are you going to work?

The Information Security (IB) sector is the center of expertise for secure information handling. By providing coordinated services and support for IB within the units, it ensures that the organization becomes and remains agile and resilient to cyberattacks. One of its responsibilities is to raise awareness and provide advice on information security risks.

You'll be part of the threat intelligence team, a small team that monitors the current threat landscape. The team tracks actors like ransomware groups and nation-state threats, identifies early warnings of new attack methods and trends, and assesses the impact on the police. The team's reports, feeds, and messages directly contribute to increasing the organization's digital resilience.

Who are you?

You are highly independent in performing your role. You also possess strong analytical and research skills. You have up-to-date knowledge of cyberthreats, APTs, OSINT, doxxing, data leaks, and ransomware groups. You can automate your creative ideas with tools or scripts to create and scale new intelligence sources. You are able to present technical information in an accessible way. You are a skilled networker and know how to bring together relevant sources and parties. By focusing on collaboration, you elevate the quality of our service. Constantly working towards better performance is your goal. That's why you closely follow developments in cybersecurity and are curious about innovations.

Furthermore you have:

• HBO (bachelor) work and thinking level*;
• preferably a CTI training such as SANS FOR578;
• at least 3 years of work experience with OSINT / intelligence;
• experience with cybersecurity tools;
• excellent command of the English language, both spoken and written;

What we offer

The official location is Driebergen. However, we are looking for a new colleague who wants to work with us from abroad (time zone UTC -5/-8). There is room for 1 FTE. This is a 36-hour per week position.

Because good people are important within the police force, we invest in your future. We offer extensive development opportunities and a permanent position with a one-year probationary period.

You can also expect the following from us:

• a gross monthly salary of at least €4,293 and a maximum of €6,300 (scale 11 Bbp) based on a 36-hour working week;
• an Individual Choice Budget (IKB) consisting of two parts:
  • A gross portion of 17.86% of your salary. This budget allows you to customize some of your employment benefits. Consider, for example, paying out your budget, purchasing vacation hours, or participating in development activities like training.
  • A net portion of €377 per year. You can use this budget for sustainability goals, union dues, and vitality initiatives, for example.
• good pension scheme and paid parental leave ( more information about leave, arrangements and options ).

The formal function within the police job structure is  business operations specialist C , field of information and communication technology.

Interested?

Are you interested in this unique opportunity and would you like to learn more? Email bas.van.schaik.2@politie.nl . Do you have questions about the application process? Call or email Marlou de Bruijn, ICT recruiter (06 - 28 46 94 50,  marlou.de.bruijn@politie.nl ).

Apply no later than September 15, 2025 via the application button.

Acquisition in response to this vacancy is not appreciated.

What else is important

• A security screening is part of the selection procedure.
• An assessment can be used as part of the selection procedure.
• Good police work requires diverse perspectives. What unique perspective will you bring to our team?

* You have a university-level diploma or equivalent through EVC. Or you can demonstrate your university-level work and thinking level in one of the following ways:

• You have been appointed to a position at the required working and thinking level.
• You have formally held a position at the required work and thinking level for at least two years.
• You have been temporarily employed for at least 2 years in a position at the required work and thinking level.
• You have a  formal assessment  showing that you have performed a position at the required work and thinking level for at least 2 years.

You must demonstrate this in writing with an appointment, substitution or employment decision or an assessment.

‍