Threat Intelligence Expert
$60,000–$90,000 year
HybridLondon, England, United Kingdom
Job Summary
Collect, analyse, and interpret threat data from internal and external sources to produce actionable intelligence reports on indicators of compromise, TTPs, and threat actor behaviour. Monitor dark web and underground forums for relevant activity, collaborate with SOC and incident response teams for context during investigations, and maintain threat intelligence platforms using tools like MISP or Recorded Future. Map adversary behaviour to the MITRE ATT&CK framework for detection improvements while tracking emerging threats, vulnerabilities, and geopolitical risks. This hands-on technical role requires deep expertise in cyber threat intelligence methodologies, OSINT tools, and frameworks such as STIX/TAXII.
Required Qualifications
- Deep knowledge of cyber threat intelligence methodologies
- Familiarity with frameworks such as MITRE ATT&CK, STIX/TAXII, Diamond Model
- Proficiency in using threat intelligence platforms (TIPs)
- Strong analytical skills and ability to interpret large datasets
- Excellent written and verbal communication skills for report writing and stakeholder updates
- Experience with OSINT tools (e.g., Maltego, Shodan, SpiderFoot)
Desired Qualifications
- Certifications: GCTI, GCIA, GCFA, CISSP, or Security+
- Programming/scripting knowledge (Python, PowerShell)
- Exposure to threat modelling techniques and risk assessments
- Understanding of APT groups, malware families, and nation-state threats
- Experience working in regulated environments (e.g., finance, healthcare)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.