A leading financial services organisation is growing out its cyber security function and is looking for a Cyber Threat Intelligence Manager to lead its threat intelligence capability and support incident response across the business.
What you'll do
- Sit at the centre of incident response for the business, stepping in as the senior technical voice when a security event escalates and guiding the response through to resolution
- Build relationships with peers across the security function and with external intelligence-sharing partners, so intelligence flows both ways
- Take ownership of how threat intelligence work gets done: the frameworks, the playbooks, the products the rest of the team relies on
- Keep a live picture of the threat actors and attack techniques most relevant to financial services, and turn that picture into guidance people can actually act on
- Coach and grow more junior analysts as part of the day-to-day, not as a separate responsibility bolted on
What you'll bring
- Deep hands-on expertise across EDR, SIEM and TIP tooling, with the technical grounding to apply frameworks like MITRE ATT&CK, the Cyber Kill Chain or the Diamond Model in day-to-day analysis
- Comfortable owning incidents end-to-end: from initial triage through to advising the business on containment and recovery
- A minimum of eight years in cybersecurity, ideally including exposure to a regulated environment such as financial services, banking or insurance
- Confident building capability from scratch: standing up frameworks, playbooks or a function where maturity is still developing
- A degree in information security, computer science or a related discipline; CISSP, GCTI or GREM would be well regarded but aren't essential
This is an opportunity to shape a growing function and have direct influence on how a major financial institution defends against evolving threats.
