Strategic Threat Intelligence Lead - Hunts & Incidents

Anaplan; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Anaplan is seeking a Threat Intelligence Lead to spearhead the development of its threat intelligence program in London. The role targets a senior professional to shape strategy, lifecycle, and operational processes across the security organization.

You will lead platform management, integrate with SOC and Product Security, and mature a threat hunting program while collaborating with security teams and executives.

Qualifications

• Deep understanding of Threat Intelligence functions and their integration within security organizations (must-have).
• Hands-on experience with threat intelligence platforms and tools (essential).
• Strong threat hunting experience using MITRE ATT&CK framework (essential).
• Experience supporting incident response with threat intelligence (essential).
• Engineering and scripting proficiency for building integrations and automating workflows (valuable).
• Experience in authoring detection content and familiarity with SIEM query languages (valued).
• Solid knowledge of SIEM, SOAR, and EDR/XDR platforms (valued).
• Ability to communicate complex intelligence clearly to senior audiences (essential).
• Strong understanding of adversary tradecraft and evolving threat landscape (essential)

Responsibilities

• Own and lead Anaplan’s Threat Intelligence function, defining the strategy and lifecycle across the security organization.
• Manage and administer threat intelligence platforms, ensuring integration with SOC and Product Security solutions.
• Develop and mature the threat hunting program, creating methodologies and executing hunts end-to-end.
• Serve as the primary threat intelligence partner during incidents, providing actionable intelligence to support incident response efforts.
• Conduct structured research into threat actors and emerging risks, producing tailored intelligence products.
• Build and maintain integrations between threat intelligence platforms and existing security tools, automating workflows.
• Author and validate detection content informed by current threat intelligence.
• Communicate findings and updates to senior stakeholders, including CISO-level executives.

Skills

Threat intelligence strategy

Threat intelligence platforms

Threat hunting

Incident response support

Engineering & scripting

Detection content authoring

SIEM/SOAR/EDR/XDR

Communication to executives

Adversary tradecraft

Job description

Anaplan is seeking a Threat Intelligence Lead to spearhead the development of its threat intelligence program in London. The role targets a senior professional to shape strategy, lifecycle, and operational processes across the security organization.

You will lead platform management, integrate with SOC and Product Security, and mature a threat hunting program while collaborating with security teams and executives.