Cyber Threat Intelligence Specialist

Vodafone; Newbury; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Annual bonus 10%

28 days leave + bank holidays + buy/s/

Private pension with Vodafone up to 10

Private medical & dental

Share save scheme

Discounts on Vodafone products

Job summary

Vodafone seeks a Cyber Threat Intelligence Specialist to reduce cyber risk by delivering timely, actionable threat intelligence across our global footprint. You will analyse threat activity and adversary behaviour to enable effective detection, response and mitigation across networks and services.

You will support live incidents and groups by monitoring activity, providing updates, and maintaining situational awareness.

Qualifications

• Strong understanding of active nation-state and financially motivated threat actors targeting telecoms, enterprise networks, and critical national infrastructure.
• Hands-on experience producing and applying operational threat intelligence, including indicator development, attack pattern analysis, and supporting detection, response, and remediation activities.
• Ability to triage, correlate, and integrate multiple intelligence sources into clear, actionable outputs.
• Effective stakeholder engagement skills across SOC, Incident Management and cyber defence teams.
• Experience working with external intelligence communities and information-sharing groups to enrich situational awareness.

Responsibilities

• Deliver operational and tactical threat intelligence on active threat actors, campaigns, and techniques impacting Vodafone’s networks, IT environment, and services.
• Support live incidents, investigations, and Threat Action Groups by monitoring adversary activity and providing timely intelligence updates.
• Analyse threat reporting, tooling, and external intelligence to identify indicators, attack patterns, and detection opportunities.
• Track intelligence outcomes by assessing impact on detection, response, remediation, or threat disruption and feed lessons learned back into processes.

Skills

Threat intelligence

Incident response support

Open source analysis

Stakeholder engagement

SOC collaboration

Tools

Threat intel tooling

OSINT

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers - we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What You’ll Do

To reduce Vodafone’s cyber risk exposure by delivering timely, actionable threat intelligence that directly supports day-to-day defence, incident response, and control decisions addressing current risks across the business. The Cyber Threat Intelligence Specialist operates at Group level, focusing on analysing threat activity and adversary behaviour to produce practical intelligence that enables effective detection, response, and mitigation across Vodafone’s global footprint.

• Deliver operational and tactical threat intelligence on active threat actors, campaigns, and techniques impacting Vodafone’s networks, IT environment, and services, with a focus on supporting detection and mitigation of threats
• Support live incidents, investigations, and Threat Action Groups by monitoring adversary activity, providing timely intelligence updates, and maintaining situational awareness throughout operational events
• Analyse threat reporting, tooling, and external intelligence to identify actionable indicators, attack patterns, and detection opportunities, feeding directly into CSOC, Incident Management, and defensive teams
• Track intelligence outcomes by assessing whether intelligence contributed to detection improvements, response actions, vulnerability remediation, or threat disruption, and feed lessons learned back into operational processes

Who You Are

• Strong understanding of active nation-state and financially motivated threat actors targeting telecoms, enterprise networks, and critical national infrastructure, with focus on actor tactics, techniques and procedures (TTP's)
• Hands-on experience producing and applying operational threat intelligence, including indicator development, attack pattern analysis, and supporting detection, response, and remediation activities
• Ability to triage, correlate, and integrate multiple intelligence sources (telemetry, open source, vendor, and partner intelligence) into clear, actionable outputs
• Effective stakeholder engagement skills across SOC, Incident Management and cyber defence teams, with the ability to communicate threat information clearly to technical audiences under operational pressure
• Experience working with external intelligence communities and information-sharing groups to enrich situational awareness and support operational security outcomes

What's In It For You

• Yearly bonus: 10%
• Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
• Charity days: 5 days/year
• Maternity leave: 52 weeks: the first 13 weeks are fully paid, followed by 26 weeks of half pay
• Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%.
• Access to: private medical, private dental, free health assessments, share save scheme
• Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

Who We Are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same. Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included. If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.