Cyber Threat Intelligence Manager

Lloyds Banking Group; Greater London; Hybrid; GBP 73,000 - 81,000; Full time

Benefits offered by this job

Pension up to 15%

Annual bonus

Share schemes

Discounted shopping

30 days holiday

Wellbeing initiatives

Parental leave

Job summary

Lloyds Banking Group is seeking an experienced Cyber Threat Intelligence Manager to lead a small CTI team and help mature the Group’s TIP through automation and AI enrichment.

Based in Bristol or Edinburgh with a hybrid work pattern, you will report to the CTI Lead and work with stakeholders to embed insights into security operations and technology platforms.

This role requires 5+ years in CTI, strong collaboration skills, and a track record of shaping threat intelligence capabilities.

Qualifications

• Extensive CTI background including threat actor and campaign analysis.
• Experience with intelligence tradecraft and structured analytic techniques.
• Experience developing TIPs or intelligence management systems.
• Experience applying automation, scripting, APIs to improve processes.
• Experience using AI-enabled workflows in cyber security or intelligence environments.
• Strong knowledge of ATT&CK, STIX/TAXII and intelligence data models.
• Experience mentoring and developing colleagues.
• Strong collaboration and communication to translate intelligence into actionable outcomes.

Responsibilities

• Manage a small CTI team while remaining hands-on threat intelligence practitioner.
• Conduct threat actor analysis, intelligence collection, requirements management, production.
• Develop and mature the Group's TIP and embed intelligence into operations and tech platforms.

Skills

Threat actor analysis

Campaign analysis

Intelligence lifecycle oversight

Intelligence tradecraft

Structured analytic techniques

Intelligence-led decision making

TIPs / intelligence management systems

Automation / scripting / APIs

AI-enabled workflows

ATT&CK / STIX / TAXII

Job description

End Date

Wednesday 16 September 2026

Salary Range

£72,702 - £80,780

We support flexible working – click here for more information on flexible working options

We support flexible working – click here for more information on flexible working options

Flexible Working Options

Hybrid Working, Job Share

Job Description Summary

,

Job Description

JOB TITLE:

Cyber Threat Intelligence Manager

LOCATION(S):

Bristol or Edinburgh

SALARY:

£72,702 - £80,780

HOURS:

Full-time

WORKING PATTERN

Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

About This Opportunity

The Cyber Threat Intelligence (CTI) team seeks an experienced professional to manage a small specialist team to help deliver the next phase of CTI capability growth at Lloyds Banking Group. Reporting to the Cyber Threat Intelligence Lead and working with other CTI Managers, the role merges strong CTI skills with responsibility for developing the Group's Threat Intelligence Platform (TIP) through automation and AI enrichment ensuring intelligence is embedded into security operations, technology, and stakeholder workflows.

What You'll Be Doing

You'll manage a small team of CTI analysts while remaining a hands‑on threat intelligence practitioner. Alongside conducting CTI activities such as threat actor analysis, intelligence collection, intelligence requirements management, intelligence production, and collaborating with stakeholders, you'll help develop and mature the Group's TIP as a strategic CTI capability.

You'll seek opportunities to improve CTI workflows using automation and AI, boosting intelligence speed, consistency, scalability, and accessibility. Collaborating with security teams and stakeholders, you'll make sure intelligence is part of operations, decision making, and technology platforms. You'll also assist in integrating the TIP into workflows, backing automation driven use cases, and providing intelligence that AI-enabled capabilities and agents can easily consume. Furthermore, you aid the continuous improvement of CTI tradecraft, intelligence methods, and team capacity as part of the overall CTI transformation plan.

Essential

What we're looking for

• Extensive Cyber Threat Intelligence background, including threat actor analysis, campaign analysis, and intelligence lifecycle oversight (typically 5+ years).
• Strong understanding of intelligence tradecraft, structured analytic techniques, and intelligence led decision making.
• Experience using and developing TIPs or intelligence management systems.
• Experience applying automation, scripting, APIs, or workflow optimisation to improve intelligence processes.
• Experience using AI, large language models, or AI-assisted workflows within cyber security or intelligence environments.
• Good understanding of ATT&CK, STIX/TAXII, intelligence data models, and intelligence sharing standards.
• Experience managing, mentoring, and developing colleagues.
• Strong collaborator and communication skills, with the ability to translate intelligence into actionable outcomes.

Desirable

• Formal intelligence qualification or recognised intelligence training.
• Experience developing intelligence knowledge repositories, knowledge graphs, or structured intelligence datasets.
• Experience delivering CTI transformation, TIP development, or operating model improvements within a large organisation.
• Familiarity with AI-enabled products, intelligent automation, or agentic AI capabilities.

We know that great talent comes from many backgrounds. This job advert mentions specific years of experience. However, we recognise that skills develop in many ways. If you have relevant, transferable experience, we encourage you to apply.

This is a place for you:

Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities. We’re committed to crafting an environment where everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles. We developed a menopause health package and a dedicated Working with Cancer Initiative.

We offer reasonable workplace adjustments for colleagues with disabilities. This includes flexibility in office attendance, location, and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair number of applicants with disabilities, long-term health, or neurodivergent conditions who meet the minimum role criteria through the Disability Confident Scheme.

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers. Just let us know what you need.

We also offer a wide-ranging benefits package, which includes:

• A generous pension contribution of up to 15%
• An annual performance-related bonus
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 30 days’ holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.

We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.