> Markdown version of [/jobs/ext/2307738-threat-vulnerability-lead](https://www.wearedevelopers.com/jobs/ext/2307738-threat-vulnerability-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Vulnerability Lead

- **Company:** Glocomms
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cyber Security, System Configuration, Python (Programming Language), Open Web Application Security, Windows PowerShell, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Mitre Att&ck, QRadar, Cyber Threat Analysis, Microsoft Sentinel, Cortex XSOAR Platform, Splunk, Qualys, Security Orchestration, Automation & Response, Servicenow
- **Published:** August 30, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815123798-threat-vulnerability-lead

## About the Role

* At least 10 years of experience in cybersecurity engineering or operations roles, with at least 5 years of hands-on experience in Threat Intelligence and Vulnerability Management.
 * Strong experience across the threat intelligence lifecycle, including collection, analysis, enrichment, correlation, and dissemination of actionable intelligence.
 * Hands-on administration and operational experience with ThreatConnect (or similar Threat Intelligence Platforms), including platform configuration, workflow development, feed management, integrations, and reporting.
 * Experience integrating ThreatConnect with SIEM, SOAR, incident response, ticketing, and vulnerability management tools.
 * Strong understanding of cyber threat intelligence methodologies, threat actor tracking, IOC management, threat feed ingestion, and intelligence-sharing frameworks.
 * Experience working with technologies such as ThreatConnect, Splunk, Microsoft Sentinel, QRadar, ServiceNow, Swimlane, Palo Alto XSOAR, Qualys, Tenable, and Defender TVM.
 * Experience automating security workflows using Python, PowerShell, APIs, or similar technologies.
 * Strong knowledge of MITRE ATT&CK, NIST CSF, OWASP Top 10, CVEs, and vulnerability risk management best practices.

## Description

* Serve as the primary owner and administrator of the organisation's ThreatConnect Threat Intelligence Platform (TIP), ensuring effective integration, maintenance, and optimisation.
 * Develop and maintain ThreatConnect workflows, playbooks, dashboards, and intelligence-sharing processes to improve threat visibility and response capabilities.
 * Integrate ThreatConnect with SIEM, SOAR, incident response, and vulnerability management platforms to automate intelligence sharing, enrichment, prioritisation, and reporting.
 * Leverage ThreatConnect to manage threat feeds, indicators of compromise (IOCs), threat actor profiles, campaigns, and TTPs aligned to the MITRE ATT&CK framework.
 * Continuously improve threat intelligence ingestion, enrichment, correlation, reporting, and operationalisation through ThreatConnect automation and orchestration capabilities.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)