Cyber Threat Intelligence Manager

• Develop actionable intelligence aligned with Priority Intelligence Requirements (PIRs) and Requests for Information (RFIs)
• Support intelligence-led threat hunting to proactively identify sophisticated threats across enterprise environments and improve detection, monitoring, and prevention capabilities
• Ensure tools used throughout the intelligence lifecycle are efficient and effective
• Manage relationships with industry, government, and security partners
• Support responses to high-priority security incidents with security stakeholders across the business
• Contribute to scenario planning and readiness activities
• Contribute to and maintain the knowledge graph
• Improve processes supporting threat intelligence production and decision-making

Technologies:

• Cloud
• Support
• Security
• DevOps

• At least 5 years of experience in information security or threat research, focusing on financially motivated groups and campaigns or sophisticated state-sponsored actors
• Proven track record identifying and tracking criminal infrastructure or sophisticated threat activity
• Deep expertise in at least one method of tracking malicious actors activity
• Extensive, up-to-date understanding of threat actors tactics, techniques, and procedures (TTPs) and related tools
• Strong understanding of threat intelligence processes and experience with relevant tools
• Desirable: SANS FOR578 (Cyber Threat Intelligence), FOR589 (Cybercrime Investigations), or relevant threat intelligence or hunting qualifications
• Desirable experience in intelligence, incident response, malware analysis, forensics, cloud security, or artificial intelligence
• Desirable: BSc or higher in a relevant subject, such as Computer Forensics, Digital Investigation, or Computer Science
• Desirable: Experience collaborating closely with law enforcement agencies
• Desirable: Experience on Incident Response teams (CSIRT/CERT)
• Desirable: Experience in a regulated industry, such as CNI, financial services, automotive, or manufacturing

We are seeking a Threat Intelligence Manager to join our growing Cyber Defence Operations (CDO) team, part of our Enterprise Security function in the UK. The role focuses on threat intelligence production and process improvement to support decision-making among global stakeholders and help anticipate emerging threats. Our CDO team delivers scalable, defensible security services to protect our organization, customers, and partners, while contributing to wider industry security. The role is based in Cambridge, with hybrid working and four days per month in the office. Salary is £80,000-£110,000, with excellent bonuses.