Cyber Threat Intelligence Manager

About the role

The organisation is expanding its cyber security function and needs a senior professional to lead the threat intelligence capability and support incident response across the business. You will act as the technical voice during security events and translate intelligence into actionable guidance.

Key responsibilities

• Serve as the senior technical lead during incident response, guiding investigations from escalation to resolution.
• Build and maintain relationships with internal security teams and external intelligence‑sharing partners to ensure two‑way intelligence flow.
• Own the development and maintenance of threat intelligence frameworks, playbooks, and products used by the wider team.
• Maintain a live picture of relevant threat actors and attack techniques for the financial services sector and turn this insight into practical guidance.
• Coach and develop junior analysts as part of day‑to‑day activities.

Required profile

• Deep hands‑on experience with EDR, SIEM and TIP tools and the ability to apply frameworks such as MITRE ATT&CK, the Cyber Kill Chain or the Diamond Model.
• Proven capability to own incidents end‑to‑end, from initial triage through containment and recovery advice.
• At least eight years of experience in cybersecurity, preferably within a regulated environment such as financial services, banking or insurance.
• Demonstrated success in building capability from scratch, including establishing frameworks and playbooks.
• A degree in information security, computer science or a related discipline; certifications such as CISSP, GCTI or GREM are a plus but not required.

Required skills

• EDR tools
• SIEM platforms
• Threat Intelligence Platforms (TIP)
• MITRE ATT&CK framework
• Cyber Kill Chain methodology
• Diamond Model of intrusion analysis
• Incident response