Threat Intelligence Analyst

Quorum; City of Edinburgh; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in Edinburgh is looking for a Threat Intelligence Analyst to join its expert team. The role involves proactively identifying and analyzing threats through intelligence-led investigations. Candidates should have 2-3 years of experience in threat intelligence, strong communication skills, and proficiency in tools like Microsoft Sentinel. This position offers a competitive salary and exceptional benefits, including a contributory pension and paid Microsoft certifications. Join a collaborative environment focused on work-life balance.

Benefits

Highly competitive salary

Contributory pension

Private healthcare

Buy & sell holidays

Paid home broadband

Annual personal technical training budget

Paid Microsoft certifications plus annual bonus

Family Friendly Working policies

Qualifications

• 2-3 years' experience in threat intelligence and/or threat hunting.
• Strong understanding of MITRE ATT&CK and adversary behaviour.
• Hands-on experience with Microsoft Sentinel and threat intelligence platforms.

Responsibilities

• Conduct proactive threat hunts and investigate Indicators of Compromise.
• Collect and analyze threat data from multiple sources.
• Deliver clear threat intelligence briefings to clients.
• Work closely with SOC analysts and contribute to governance meetings.

Skills

Threat intelligence

Threat hunting

MITRE ATT&CK

Malware analysis

KQL

Python

Communication skills

Analytical thinking

Tools

Microsoft Sentinel

Defender XDR

Threat intelligence platforms

Job description

Overview

Threat Intelligence Analyst | Edinburgh (Hybrid) | Competitive Salary + Excellent Benefits

Hunt threats. Shape intelligence. Make a real impact.

Quorum is one of Scotland’s largest Microsoft Partners and a Microsoft Direct Cloud Solutions Provider (CSP). As we continue to grow our security services, we’re looking for a Threat Intelligence Analyst to join our expert team on a permanent basis.

In this role, you’ll be at the frontline of cyber defence — proactively identifying, analysing, and mitigating threats through intelligence-led investigations and advanced threat hunting. You’ll combine deep technical skills with the ability to clearly communicate risk and impact to both technical teams and clients. You’ll be supported at every stage of your career. At Quorum, training and development aren’t buzzwords — they’re a promise. We invest heavily in our people and even reward you financially for the Microsoft accreditations you achieve.

Key Responsibilities

• Threat Hunting & Analysis: Conduct proactive threat hunts based on hypotheses and real-world attack scenarios; investigate Indicators of Compromise (IOCs) and adversary TTPs; leverage threat intelligence feeds, OSINT, and commercial platforms to enrich detection; develop and maintain detection rules across SIEM and EDR platforms.
• Threat Intelligence Management: Collect, validate, and analyse threat data from multiple sources; monitor emerging threats, vulnerabilities, and attack trends; produce high-quality, actionable intelligence for internal teams and clients.
• Client Engagement & Reporting: Deliver clear, concise threat intelligence briefings; create tailored reports for strategic, operational, and technical audiences; translate complex technical findings into meaningful business impact.
• Collaboration & Continuous Improvement: Work closely with SOC analysts, incident responders, and engineering teams; contribute to playbooks, automation, and threat-hunting maturity; participate in service reviews and governance meetings.

What we’re looking for

• 2-3 years’ experience in threat intelligence and/or threat hunting
• Strong understanding of MITRE ATT&CK, malware analysis, and adversary behaviour
• Hands-on experience with Microsoft Sentinel, Defender XDR, and threat intelligence platforms
• Proficiency in KQL, Python, or similar scripting/query languages
• Excellent communication skills — comfortable presenting to clients
• Analytical, detail-driven mindset with the ability to manage multiple investigations
• Passion for cybersecurity and a desire to keep learning

Why join Quorum?

Quorum is an Employee-Owned Scottish company delivering custom technology solutions, infrastructure consultancy, and managed services to organisations ranging from major financial institutions to small businesses. We’re proud of our low staff turnover, collaborative culture, and genuine focus on work-life balance.

Benefits

• Highly competitive salary
• Contributory pension
• Private healthcare
• Buy & sell holidays
• Paid home broadband
• Annual personal technical training budget
• Paid Microsoft certifications plus annual bonus for accreditations
• Award-winning Family Friendly Working policies
• And yes — we really are a nice bunch of people to work with.

Ready to apply?

If you eat, sleep, and breathe technology — and want to build your threat intelligence career in a supportive, forward-thinking environment — we’d love to hear from you. Apply today and help us stay one step ahead of the threat.