Cyber Threat Intelligence Expert SOC | Threat Hunting | Incident Response

Job Description

We are seeking a highly experienced Cyber Threat
Intelligence (CTI) Expert to join a fast -growing, security -driven
organization at the forefront of threat detection and mitigation. This is a
critical role for candidates who excel at gathering, analysing, and
operationalizing threat data to proactively defend enterprise environments
against evolving cyber threats.

You will lead intelligence -driven detection strategies,
collaborate with SOC and incident response teams, and provide expert -level
analysis of APTs, malware, and attack patterns.

Job Responsibilities

• Collect,
  analyse, and interpret threat intelligence from open source (OSINT),
  closed source, and internal data feeds.
  
• Produce
  actionable intelligence reports, threat briefs, and risk assessments.
  
• Support
  SOC operations with threat context and priority setting.
  
• Identify
  and monitor Indicators of Compromise (IOCs) and Tactics, Techniques &
  Procedures (TTPs) using MITRE ATT&CK framework.
  
• Collaborate
  on play -book development and threat detection use cases.
  
• Perform
  attribution and malware behavioural analysis to inform decision -making.
  
• Lead
  threat actor profiling and campaign analysis across APT, cybercrime, and
  hacktivist groups.
  
• Interface
  with external intel -sharing communities and CERTs.
  

Requirements

Required Skills

• Proven
  experience in cyber threat intelligence, threat hunting, or incident
  response
  
• Proficiency
  in threat intel platforms (e.g., MISP, Anomali, ThreatConnect)
  
• Strong
  knowledge of malware families, TTPs, and IOC tracking
  
• Experience
  using SIEM, SOAR, and endpoint detection tools
  
• Working
  knowledge of MITRE ATT&CK, Cyber Kill Chain, and Diamond Model
  
• Ability
  to produce high -quality, executive -ready threat reports
  

Desired Skills

• Certifications
  such as GCTI, GREM, GCIA, CEH, or CISSP
  
• Scripting
  or automation experience (Python, Bash, PowerShell)
  
• Knowledge
  of geopolitical cyber risk and threat actor motivations
  
• Familiarity
  with intel sharing standards (STIX/TAXII)
  

Benefits

Job Benefits

• Competitive
  salary and bonus package
  
• Remote
  or hybrid working options
  
• Private
  healthcare & mental wellness support
  
• Funded
  training and certifications (SANS, GIAC, CREST, etc.)
  
• 25+
  days holiday + bank holidays
  
• Pension
  scheme and life assurance