Threat Intelligence Engineer: Build & Operationalize CTI

The Watches of Switzerland Group; Leicester; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Holiday Purchase Scheme

24/7 Employee Assistance Programme

24/7 Virtual GP service

Share Save Scheme

Enjoy your Birthday Off

Free Wellbeing Tools

Generous Discount Scheme

Enhanced Maternity Pay

Job summary

The Watches of Switzerland Group in Leicester is seeking a Cyber Security Threat Intelligence Engineer to join onsite at our Head Office four days a week. The role blends engineering work with threat intelligence to strengthen detection, controls and defensive architecture.

You will transform raw intelligence into actionable engineering requirements, detection logic, and hardening improvements, supporting SOC and engineering teams against evolving threats.

Qualifications

• Experience building internal threat intelligence from the ground up.
• Experience in threat intelligence or similar cyber security roles.
• Strong understanding of security controls, detection logic, identity systems and endpoint security.
• Experience embedding intelligence into engineering teams (EDR, SIEM, Identity, Cloud, Networks).
• Ability to convert intelligence into detection logic, engineering requirements and hardening improvements.
• Experience analysing adversary TTPs, malware behaviour, exploit chains and threat actor campaigns.
• Hands-on intelligence during investigations, containment and post-incident tuning.
• Familiar with threat intel platforms, OSINT tools, CTI feeds and automated intelligence pipelines.
• Ability to produce concise, actionable intelligence summaries for engineers and leadership.
• Experience with Microsoft Sentinel SIEM/Defender automations and logic apps.

Skills

Internal threat intel

Threat intelligence

Security controls

EDR SIEM integration

Intelligence to detection

TTP analysis

Investigations support

Threat intel platforms

OSINT tooling

Intelligence summaries

Microsoft Sentinel

Job description

The Watches of Switzerland Group in Leicester is seeking a Cyber Security Threat Intelligence Engineer to join onsite at our Head Office four days a week. The role blends engineering work with threat intelligence to strengthen detection, controls and defensive architecture.

You will transform raw intelligence into actionable engineering requirements, detection logic, and hardening improvements, supporting SOC and engineering teams against evolving threats.