Cyber Threat Intelligence Manager
Lloyds Bank plc
Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
Lloyds Banking Group is seeking a Cyber Threat Intelligence Manager to lead a small CTI team and advance the Threat Intelligence Platform through automation and AI enrichment.
You will report to the CTI Lead and work with security teams to embed intelligence into operations, technology and stakeholder workflows, while maintaining hands-on CTI duties.
This role offers hybrid working, with two office days per week, and flexible adjustments to support diverse needs.
Qualifications
- Extensive Cyber Threat Intelligence background with 5+ years.
- Strong understanding of intelligence tradecraft and analytics.
- Experience developing or using TIPs or intelligence platforms.
- Experience applying automation, scripting, APIs, or workflow optimization.
- Experience using AI, large language models, or AI-assisted workflows.
- Familiarity with ATT&CK, STIX/TAXII, data models and sharing standards.
- Experience mentoring colleagues and cross-team collaboration.
- Excellent communication and stakeholder engagement skills.
- Desirable: Formal intelligence qualification.
- Experience building knowledge repositories and knowledge graphs.
- Experience delivering CTI transformation or TIP development in large organisations.
- Familiarity with AI-enabled products and agentic AI capabilities.
Responsibilities
- Manage a small CTI team while remaining a hands‑on threat intelligence practitioner.
- Conduct threat actor analysis, intelligence collection, requirements management and stakeholder collaboration.
- Help develop and mature the Group's TIP as a strategic capability.
- Seek opportunities to improve CTI workflows using automation and AI for speed and scalability.
- Collaborate with security teams to embed intelligence into operations, technology and workflows.
- Assist in integrating the TIP into workflows and automation-driven use cases.
- Aid continuous improvement of CTI tradecraft and team capacity as part of the transformation plan.
Skills
Education
Tools
Job description
End Date: Wednesday 16 September 2026.
Salary Range: £72,702 - £80,780. We support flexible working – click here for more information on flexible working options. Flexible Working Options: Hybrid Working, Job Share.
Cyber Threat Intelligence Manager
Bristol or Edinburgh
£72,702 - £80,780
Full-time
Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.
The Cyber Threat Intelligence (CTI) team seeks an experienced professional to manage a small specialist team to help deliver the next phase of CTI capability growth at Lloyds Banking Group. Reporting to the Cyber Threat Intelligence Lead and working with other CTI Managers, the role merges strong CTI skills with responsibility for developing the Group's Threat Intelligence Platform (TIP) through automation and AI enrichment ensuring intelligence is embedded into security operations, technology, and stakeholder workflows.
- Manage a small team of CTI analysts while remaining a hands‑on threat intelligence practitioner.
- Conduct CTI activities such as threat actor analysis, intelligence collection, intelligence requirements management, intelligence production, and collaborate with stakeholders.
- Help develop and mature the Group's TIP as a strategic CTI capability.
- Seek opportunities to improve CTI workflows using automation and AI, boosting intelligence speed, consistency, scalability, and accessibility.
- Collaborate with security teams and stakeholders, ensuring intelligence is part of operations, decision making, and technology platforms.
- Assist in integrating the TIP into workflows, backing automation‑driven use cases, and providing intelligence that AI‑enabled capabilities and agents can easily consume.
- Aid the continuous improvement of CTI tradecraft, intelligence methods, and team capacity as part of the overall CTI transformation plan.
- Extensive Cyber Threat Intelligence background, including threat actor analysis, campaign analysis, and intelligence lifecycle oversight (typically 5+ years).
- Strong understanding of intelligence tradecraft, structured analytic techniques, and intelligence led decision making.
- Experience using and developing TIPs or intelligence management systems.
- Experience applying automation, scripting, APIs, or workflow optimisation to improve intelligence processes.
- Experience using AI, large language models, or AI‑assisted workflows within cyber security or intelligence environments.
- Good understanding of ATT&CK, STIX/TAXII, intelligence data models, and intelligence sharing standards.
- Experience managing, mentoring, and developing colleagues.
- Strong collaborator and communication skills, with the ability to translate intelligence into actionable outcomes.
- Formal intelligence qualification or recognised intelligence training. (Desirable)
- Experience developing intelligence knowledge repositories, knowledge graphs, or structured intelligence datasets.
- Experience delivering CTI transformation, TIP development, or operating model improvements within a large organisation.
- Familiarity with AI‑enabled products, intelligent automation, or agentic AI capabilities.
We know that great talent comes from many backgrounds. This job advert mentions specific years of experience. However, we recognise that skills develop in many ways. If you have relevant, transferable experience, we encourage you to apply.
Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities. We’re committed to crafting an environment where everyone can thrive, learn and develop. We were one of the first major organisations to set goals on diversity in senior roles. We developed a menopause health package and a dedicated Working with Cancer Initiative.
We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location, and working patterns.
As a Disability Confident Leader, we guarantee interviews for a fair number of applicants with disabilities, long‑term health, or neurodivergent conditions who meet the minimum role criteria through the Disability Confident Scheme.
We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers. Just let us know what you need.
- A generous pension contribution of up to 15%
- An annual performance‑related bonus
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 30 days’ holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
At Lloyds Banking Group, we’re driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you’ll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you’ll have many opportunities to learn, grow and develop.
We keep your data safe. So, we’ll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We’ll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.
We’re focused on creating a values‑led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.
With 320 years under our belt, we’re used to change, and today is no different. Join us and help drive this change, shaping the future of finance whilst working at pace to deliver for our customers.
Here, you’ll do the best work of your career. Your impact will be amplified by our scale as you learn and develop, gaining skills for the future.
Should you wish to contact us for any reason, please email us at: careers@lloydsbanking.com
For more Flexible Working Options please use the free text search, e.g. job sharing, variable hours, to identify relevant matches.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
