Threat Intelligence Lead: Build & Lead Security Insights

Anaplan; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Anaplan is seeking a senior Threat Intelligence Lead to build and shape our TI function from the ground up. You will set the TI strategy, develop a threat hunting program, and serve as the primary intel partner to SOC, product security, and incident response teams.

This role blends hands-on research with programme ownership and direct collaboration with CISO-level stakeholders. You will conduct deep research, run hunts end-to-end, build integrations, and present actionable intelligence to guide

Qualifications

• Understanding of TI lifecycle, cadence and value delivery
• Hands-on with TI platforms and tooling
• Threat hunting experience using frameworks like MITRE ATT&CK
• Experience supporting IR with TI under time pressure
• Engineering/scripting to automate TI workflows
• Authoring detection content and queries
• Knowledge of SIEM/SOAR/EDR/XDR integrations
• Ability to communicate complex intel to executives

Responsibilities

• Define TI strategy and lifecycle for the security org.
• Lead and mature threat hunting program with playbooks and hypotheses.
• Integrate TI platforms with SOC and product security.
• Support incident response with actionable intelligence.
• Conduct research on threat actors, campaigns and emerging risks.
• BuildTI integrations with existing security tooling.
• Author and validate SIEM queries and detection rules.
• Present findings to senior and CISO-level stakeholders.

Skills

Threat intelligence lifecycle

Threat hunting

MITRE ATT&CK

Threat intelligence platforms

Incident response support

Scripting/engineering

Detections content authoring

Communication with executives

Tools

SIEM

SOAR

EDR/XDR

MITRE ATT&CK framework

Job description

Anaplan is seeking a senior Threat Intelligence Lead to build and shape our TI function from the ground up. You will set the TI strategy, develop a threat hunting program, and serve as the primary intel partner to SOC, product security, and incident response teams.

This role blends hands-on research with programme ownership and direct collaboration with CISO-level stakeholders. You will conduct deep research, run hunts end-to-end, build integrations, and present actionable intelligence to guide