> Markdown version of [/jobs/ext/1924762-cyber-threat-intelligence-lead](https://www.wearedevelopers.com/jobs/ext/1924762-cyber-threat-intelligence-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Threat Intelligence Lead - **Company:** Hiscox Inc. - **Location:** York, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Intrusion Detection and Prevention, Open Source Intelligence, Software Vulnerability Management, Cyber Threat Analysis, Cybercrime - **Published:** August 5, 2026 - **Apply:** https://www.careerjet.co.uk/job/gbddd21af80ea9d15d964dae5371376c0f/eaa ## About the Role * Experienced in cyber threat intelligence, cyber security operations, government intelligence, military intelligence or law enforcement environments. * Strong understanding of the intelligence lifecycle and threat intelligence frameworks. * Experience producing strategic intelligence assessments and executive-level briefings. * Experience influencing senior stakeholders and driving security improvements through intelligence-led recommendations. * Excellent analytical, research and critical thinking skills. * Strong knowledge of threat actor tactics, techniques and procedures (TTPs). * Experience mentoring or developing junior analysts. * Excellent communication, presentation and stakeholder management skills. * Experience within financial services or other regulated industries is desirable. * Industry recognised certifications such as GCTI, CCTIM, GCFA, GREM, GPEN or equivalent are desirable. Desirable experience * Threat-intelligence-led detection and IOC operationalisation. ## Description The Cyber Threat Intelligence Lead is responsible for leading and maturing the organisation's threat intelligence capability and ensuring intelligence drives security strategy, investment decisions and operational priorities across the business. Acting as the senior subject matter expert for cyber threats, the role holder will deliver strategic, operational and tactical intelligence products, provide leadership across the Cyber Fusion Centre and influence senior stakeholders across Technology and the wider business. The role holder will contribute directly to the development and maintenance of the cyber security strategy, ensuring it remains aligned to the evolving threat landscape. They will work closely with the Head of Cyber Fusion and Chief Resilience and Security Officer to identify emerging threats, assess organisational exposure and recommend strategic improvements. You will play a pivotal role in defending our business from cyber threats. By continuously monitoring, analysing and actioning intelligence, you will be on the front line of protecting our business assets and interests from harm. The role is based in either York (UK) or Lisbon (Portugal) and is a permanent position. Travel to other team locations will be required as necessary, Cyber Threat Intelligence * Lead the end-to-end threat intelligence lifecycle and maintain intelligence requirements aligned to business objectives. * Develop and maintain strategic, operational and tactical threat intelligence products. * Provide regular threat briefings and intelligence updates to senior leadership and executive stakeholders. * Contribute directly to the development and evolution of the Cyber Security Strategy. * Act as the principal cyber threat intelligence advisor to the Head of Cyber Fusion and Chief Resilience and Security Officer. * Develop threat-led action plans and influence remediation priorities across Technology and business functions. * Embed a threat-led approach across vulnerability management, detection engineering, threat hunting, security architecture and incident response activities. * Assess emerging threats, adversary activity, geopolitical developments and industry trends relevant to Hiscox. * Develop and maintain intelligence sources, including OSINT, commercial intelligence feeds, industry partnerships and government engagement. * Support major incident response activities through threat analysis, attribution assessments and remediation guidance. * Build relationships with external intelligence sharing communities, government agencies and industry bodies. * Present complex intelligence findings clearly to both technical and non-technical audiences. * Drive understanding of the threat landscape across Technology Leadership and key business stakeholders. * Coach and develop junior threat intelligence analysts and support future team growth. * Establish threat intelligence methodologies, standards and quality controls ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)