Lead Cyber Threat Intelligence Platform & Threat Analytics

S&P Global, Inc.; Greater London; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Health care coverage

Flexible downtime

Continuous learning

Retirement planning

Job summary

S&P Global, Inc. is seeking a Threat Intelligence professional to own and lead the end-to-end Threat Intelligence Platform, shaping its strategic design and ongoing development for maximum value across the global cyber defense organization.

You will build critical API integrations with commercial intelligence feeds, establish intelligence standards, and drive PIRs and IOC lifecycle management to strengthen the firm’s defensive posture.

Qualifications

• 3+ years in a Cyber Threat Intelligence function with platform ownership experience.
• Experience with threat intel platforms, data modeling, and production environment administration.
• Proficiency with commercial feeds and intel sharing standards (STIX/TAXII) and downstream integration.
• Strong analytical and technical writing skills for technical and executive audiences.

Responsibilities

• Own and lead the end-to-end Threat Intelligence Platform design, delivery and development.
• Build and maintain API integrations across intelligence sources for proactive detection and response.
• Establish intelligence standards including source reliability, confidence scoring, and indicator lifecycle management.
• Lead PIRs, IOC lifecycle management, and vulnerability intelligence to shape defensive posture.
• Drive intel workstreams within security engagements and mentor junior analysts.

Skills

Threat intel platforms

API integrations

STIX/TAXII

Data modeling

Analytical writing

Leadership/mentoring

Operational management

Tools

Threat intel platforms

STIX/TAXII

Open-source intelligence tools

Job description

S&P Global, Inc. is seeking a Threat Intelligence professional to own and lead the end-to-end Threat Intelligence Platform, shaping its strategic design and ongoing development for maximum value across the global cyber defense organization.

You will build critical API integrations with commercial intelligence feeds, establish intelligence standards, and drive PIRs and IOC lifecycle management to strengthen the firm’s defensive posture.