Ian Usher Email and Phone Number

I perform two key roles within NCC Group’s Global Threat Intelligence team. Firstly, I manage the operational threat intelligence team, overseeing the production of regular TI reports, online exposure monitoring, TIP management, SIEM integration, MDR support, threat actor tracking, and client-focused ad hoc research.Secondly, I drive innovation and capability improvement. My latest accomplishment is launching the Online Exposure Monitoring service, leveraging the DarkIQ platform by SearchLight Cyber. This service helps clients protect against potential attacks by identifying exposed credentials, monitoring the dark web for credential sales, and detecting vulnerable infrastructure. It has generated millions in additional annual recurring revenue and is projected to grow by 20% year on year.

To meet growing market demand, I strategically led the transition of our threat intelligence team from the SOC to the professional services domain. This involved effective management of the team and resources to offer regulatory threat intelligence reports, customized investigations, and client assessments. I also spearheaded the transformation of our monthly threat intelligence reports into a subscription service, providing quarterly reports and threat alerts, which significantly enhanced our sales and marketing efforts.In addition, I developed a free version of the monthly report for media distribution, which boosted our visibility and resulted in our team generating over half of all media mentions for our company. This initiative not only showcased our threat management capabilities but also demonstrated our commitment to business development and strategic planning to drive growth and meet client needs.

By showcasing the benefits of threat intelligence, I was entrusted with the opportunity to establish and manage a remote threat intelligence (CTI) team within the Security Operations Center (SOC). This initiative allowed us to deliver regular, sector-specific threat intelligence reports to our managed service customers. Additionally, I took on a leadership role in overseeing SOC operations, working closely with the SOC Manager to ensure strategic planning and effective management of security operations.

As a Cyber Threat Intelligence (CTI) analyst in the NCC Group SOC, I played a pivotal role in enhancing the SOC’s threat awareness and response capabilities. I conducted in-depth research on the latest threat actors and their tactics, techniques, and procedures (TTPs), supporting SOC analysts in investigating and resolving incidents. I also spearheaded the introduction of a threat intelligence platform, which significantly improved our capability development by enabling the collection, analysis, and dissemination of IOCs and their relevant context. This process integration allowed the SOC to proactively defend against emerging threats, demonstrating my strategic influence in shaping our threat intelligence operations.

At one of our nation’s largest nuclear installations, I led efforts to ensure the safety and security of nuclear material, showcasing exceptional threat management and team leadership skills. My responsibilities included responding to all forms of criminal activity on site, from minor theft to major terrorist attacks, and protecting the 15,000 site workers and local residents within our jurisdiction. This role required a unique blend of law enforcement expertise and firearms handling proficiency, along with a deep technical and regulatory understanding due to the complex and critical nature of the site. Additionally, I leveraged my criminal intelligence skills to coordinate security arrangements, which were agreed upon by the operating company, our team, and the regulatory body for the nuclear industry.As part of the national firearms officer reserve, I was regularly deployed to support regional policing operations and provide surge capacity in response to critical incidents. This included the national response to the Manchester bombing, where teams were deployed across the country to enhance security at major events and provide reassurance to the public.

As an Applications Assessor at the Student Loans Company from August 2012 to December 2013, I was part of a small specialist team dedicated to handling discretionary support requests from students. Each case required a meticulous and individual assessment, where I compiled and reviewed various types of evidence, including financial, legal, and medical documentation.My role involved close collaboration with legal and policy departments to ensure that all assessments were compliant with relevant regulations and policies. I also directly interacted with students and their educational institutions to clarify and verify information, ensuring that decisions were based on accurate and comprehensive data.This position demanded strong analytical skills, attention to detail, and the ability to manage sensitive information with discretion. It also required excellent communication skills to effectively liaise with multiple stakeholders and provide clear, supportive guidance to students navigating the application process. My work was crucial in ensuring that students received the support they needed, contributing to their educational success and financial stability.

As a Service Delivery Support Officer at Victim Support from July 2011 to August 2012, I played a key role in assisting the office covering Gateshead and South Tyneside. My primary focus was on criminal injuries compensation, where I worked closely with various stakeholders to gather the necessary evidence to support applications. This required effective communication and collaboration with legal professionals, medical experts, and law enforcement agencies to ensure comprehensive and accurate documentation.In addition to my focus on compensation claims, I provided essential support to the team, helping to streamline processes and improve service delivery. My responsibilities included managing case files, coordinating with clients to clarify information, and ensuring that all applications were processed efficiently and accurately. My role was crucial in helping victims of crime receive the support and compensation they deserved, contributing to the overall mission of Victim Support to provide assistance and advocacy for those affected by crime.Through this experience, I developed strong skills in stakeholder management, evidence gathering, and client support, all of which were instrumental in delivering high-quality services to our clients. My work not only supported the immediate needs of victims but also helped to build a more responsive and effective support system within the organisation.

As a Witness Service Volunteer at Newcastle Crown Court from August 2009 to July 2011, I played a vital role in supporting witnesses through the often daunting process of giving evidence. My responsibilities included providing detailed information about court procedures to help witnesses understand what to expect. I also offered emotional support, helping to alleviate anxiety and stress associated with court appearances. This involved one-to-one interactions, where I listened to their concerns, answered questions, and provided reassurance. My role was crucial in ensuring that witnesses felt prepared and supported, contributing to the overall effectiveness of the judicial process.