Threat Intelligence Analyst: Hunt, Detect, and Respond

Jobtailor; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Jobtailor is seeking a Cyber Threat Analyst to monitor global threat landscapes, analyse intel from OSINT, dark web sources, and feeds, and support incident response for manufacturing and logistics sectors.

You will develop KQL queries for threat hunting, produce actionable reports, and collaborate with SOC teams to strengthen detection and response using Microsoft Sentinel and Defender.

Qualifications

• Experience in cyber security with focus on threat intel, incident response, or security operations.
• Hands-on experience managing security incidents lifecycle.
• Strong knowledge of threat frameworks like MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.
• Advanced knowledge of Microsoft Sentinel, Defender, and KQL for threat hunting and investigation.
• Experience with threat intel platforms and dark web monitoring solutions.
• Strong analytical skills with ability to identify patterns from data.
• Knowledge of malware analysis, phishing investigations, and infrastructure security.
• Experience with scripting/automation (PowerShell, Python).
• Excellent communication and collaboration to translate findings into business decisions.
• Industry certifications: GCTI, GTIA, SC-200.

Responsibilities

• Monitor global threat landscape for DS Smith and manufacturing sector.
• Analyse intel from OSINT, feeds, platforms, and dark web tools.
• Correlate intel with internal security events using Sentinel and Defender.
• Develop and maintain advanced KQL queries for threat hunting and investigation.
• Produce actionable threat intel reports, IoCs, and executive briefings.
• Support incident response from triage to recovery and post-incident review.
• Conduct forensic investigations and provide threat context during live incidents.
• Collaborate with SOC teams, security architects, and stakeholders to strengthen detection.
• Contribute to threat models, risk assessments, and playbooks.
• Maintain awareness of evolving threats in manufacturing/logistics.

Skills

Threat intelligence

Incident response

Security operations

MITRE ATT&CK

KQL

Microsoft Defender

Microsoft Sentinel

Dark web monitoring

Scripting

Analytical skills

Communication

Education

GCTI

GTIA

SC-200

Tools

Microsoft Sentinel

Microsoft Defender

DarkIQ

Threat Intelligence Platforms

OSINT Tools

Dark Web Monitoring Tools

Job description

Jobtailor is seeking a Cyber Threat Analyst to monitor global threat landscapes, analyse intel from OSINT, dark web sources, and feeds, and support incident response for manufacturing and logistics sectors.

You will develop KQL queries for threat hunting, produce actionable reports, and collaborate with SOC teams to strengthen detection and response using Microsoft Sentinel and Defender.