> Markdown version of [/jobs/ext/1475238-threat-transformation-specialist](https://www.wearedevelopers.com/jobs/ext/1475238-threat-transformation-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Transformation Specialist

- **Company:** Anson McCade
- **Location:** London, UK
- **Experience:** Experienced
- **Salary:** £67,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, Systems Integration, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Cyber Warfare
- **Published:** July 29, 2026
- **Apply:** https://www.totaljobs.com/job/specialist/anson-mccade-job107760505

## About the Role

* 3+ years' commercial experience within cyber security/threat intelligence
 * Previous experience in Threat Intelligence, SOC, Incident Response or Penetration Testing environments
 * Experience with Threat Intelligence Platforms (TIPs) such as MISP, ThreatConnect, ThreatQ, OpenCTI or similar
 * Knowledge of threat intelligence frameworks including MITRE ATT&CK, STIX/TAXII and Cyber Kill Chain
 * Experience developing or improving intelligence processes, workflows or playbooks
 * Strong analytical and research skills with a genuine interest in the cyber threat landscape
 * Excellent communication skills with the ability to engage technical and business audiences

If you're passionate about cyber threat intelligence and want to help organisations strengthen their intelligence-led security capabilities, we'd love to hear from you. Apply today or get in touch with Sarah McMahon for a confidential discussion.

## Description

We're looking for a Threat Intelligence Transformation Specialist to join a cyber intelligence function supporting major organisations across a range of sectors. This is an opportunity to work at the intersection of threat intelligence, cyber operations, and security transformation, helping clients build and enhance their intelligence capabilities while tackling real-world cyber threats.

This role would suit someone with a strong technical cyber security background who has developed expertise in threat intelligence and enjoys combining hands-on technical work with client engagement.

What You'll Be Doing

 * Deploying, configuring and optimising Threat Intelligence Platforms (TIPs)
 * Integrating intelligence tooling with wider security technologies and workflows
 * Developing intelligence collection, analysis, enrichment and dissemination processes
 * Delivering actionable threat intelligence to support client security operations
 * Conducting threat research and tracking threat actors, campaigns and emerging trends
 * Supporting incident response and wider intelligence-led security activities
 * Building automation, workflows and playbooks to improve intelligence capabilities
 * Working closely with both technical and non-technical stakeholders


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Building Security Champions](https://www.wearedevelopers.com/videos/193-building-security-champions)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)