Cyber Threat Intelligence Expert – SOC | Threat Hunting | Incident Response

Job Description

We are seeking a highly experienced Cyber Threat Intelligence (CTI) Expert to join a fast-growing, security-driven organization at the forefront of threat detection and mitigation. This is a critical role for candidates who excel at gathering, analysing, and operationalizing threat data to proactively defend enterprise environments against evolving cyber threats.

You will lead intelligence-driven detection strategies, collaborate with SOC and incident response teams, and provide expert-level analysis of APTs, malware, and attack patterns.

Job Responsibilities

• Collect, analyse, and interpret threat intelligence from open source (OSINT), closed source, and internal data feeds.
  
• Produce actionable intelligence reports, threat briefs, and risk assessments.
  
• Support SOC operations with threat context and priority setting.
  
• Identify and monitor Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) using MITRE ATT&CK framework.
  
• Collaborate on play-book development and threat detection use cases.
  
• Perform attribution and malware behavioural analysis to inform decision-making.
  
• Lead threat actor profiling and campaign analysis across APT, cybercrime, and hacktivist groups.
  
• Interface with external intel-sharing communities and CERTs.
  

Requirements

Required Skills

• Proven experience in cyber threat intelligence, threat hunting, or incident response
  
• Proficiency in threat intel platforms (e.g., MISP, Anomali, ThreatConnect)
  
• Strong knowledge of malware families, TTPs, and IOC tracking
  
• Experience using SIEM, SOAR, and endpoint detection tools
  
• Working knowledge of MITRE ATT&CK, Cyber Kill Chain, and Diamond Model
  
• Ability to produce high-quality, executive-ready threat reports
  

Desired Skills

• Certifications such as GCTI, GREM, GCIA, CEH, or CISSP
  
• Scripting or automation experience (Python, Bash, PowerShell)
  
• Knowledge of geopolitical cyber risk and threat actor motivations
  
• Familiarity with intel sharing standards (STIX/TAXII)
  

Benefits

Job Benefits

• Competitive salary and bonus package
  
• Remote or hybrid working options
  
• Private healthcare & mental wellness support
  
• Funded training and certifications (SANS, GIAC, CREST, etc.)
  
• 25+ days holiday + bank holidays
  
• Pension scheme and life assurance