Threat Intelligence Principal - 12 Month FTC

MARKS&SPENCER; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Marks & Spencer is seeking an experienced Threat Intelligence Principal Contractor to lead and mature our cyber threat intelligence capability. This role provides strategic leadership and hands-on delivery to strengthen our understanding of threats and improve defence against sophisticated cyber attacks.

You will assess the current function, develop and execute a threat intelligence strategy, and translate intelligence into clear reporting and actionable recommendations for senior

Qualifications

• Assess and mature the organisation's threat intelligence capability, identifying improvement opportunities and optimising processes.
• Support delivery of the threat intelligence strategy and roadmap, aligning with priorities and risk objectives.
• Lead collection, analysis and dissemination of strategic, operational and tactical intelligence on threats.
• Translate complex threat intelligence into clear reporting, risk impacts and actionable recommendations for senior stakeholders.
• Enable long-term operational effectiveness through improved intelligence requirements, guidance and knowledge transfer.

Responsibilities

• Assess and mature the organisation's threat intelligence capability, identifying improvement opportunities and optimising processes.
• Support delivery of the threat intelligence strategy and roadmap, aligning with priorities and risk objectives.
• Lead collection, analysis and dissemination of strategic, operational and tactical intelligence on threats.
• Translate complex threat intelligence into clear reporting, risk impacts and actionable recommendations for senior stakeholders.
• Enable long-term operational effectiveness through improved intelligence requirements, guidance and knowledge transfer.

Skills

Threat intel leadership

Threat intel programs

Executive reporting

Python scripting

Automation

Stakeholder mgmt

MITRE ATTACK

Tools

Threat intel platforms

Security tooling

Job description

12 Month FTC

Summary

We are seeking an experienced Threat Intelligence Principal Contractor to support and accelerate the maturity of our cyber threat intelligence capability. This role will provide strategic leadership, specialist expertise, and hands‑on delivery to enhance our understanding of the threat landscape and strengthen defence against sophisticated cyber threats.

The successful contractor will be responsible for assessing the current threat intelligence function, developing and executing a threat intelligence strategy, improving intelligence processes and tooling, and delivering actionable intelligence that supports business risk management and security decision‑making.

What you'll do

• Assess and mature the organisation's threat intelligence capability, identifying improvement opportunities and optimising processes, tooling and workflows.
• Support delivery of the threat intelligence strategy and roadmap, ensuring alignment with organisational priorities, cyber risk objectives and business operations.
• Lead the collection, analysis, production and dissemination of strategic, operational and tactical intelligence on relevant threats, actors, campaigns and emerging risks.
• Translate complex threat intelligence into clear reporting, briefings, risk impacts and actionable recommendations for senior stakeholders and security teams.
• Enable long‑term operational effectiveness through improved intelligence requirements, automation opportunities, stakeholder guidance, documentation, mentoring and knowledge transfer.

Who you are

• Extensive experience leading or delivering enterprise threat intelligence programmes in large, complex environments.
• Strong capability in producing strategic, operational and tactical cyber threat intelligence, including intelligence‑led risk assessments and executive reporting.
• Deep understanding of the cyber threat landscape, adversary behaviours, TTPs, emerging attack methods and intelligence frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Experience integrating threat intelligence platforms, security tools and external data sources, supported by strong scripting and automation skills such as Python.
• Ability to work independently, engage senior stakeholders and drive intelligence‑led improvements across security operations, incident response, vulnerability management or cyber defence.

What's in it for you?

Working at M&S means being part of something bigger - helping to deliver quality, value and service to millions of customers every day. We're inclusive, fast‑moving and always evolving, with a strong sense of purpose and a focus on doing the right thing.

Here are just a few of the benefits that make working here even more rewarding:

• 20% colleague discount on all M&S products and many third‑party brands for you and someone in your household, available once you've completed your probation
• Competitive holiday allowance with the option to buy more
• Discretionary bonus schemes linked to your performance and ours
• Strong pension and life assurance to help plan for the future
• Tailored induction and training to support your development from day one
• Exclusive perks and savings through our M&S Choices portal
• Market‑leading family policies, including parental, adoption and neonatal leave
• 24/7 wellbeing support, including virtual GP access and mental health services
• One paid volunteer day a year to support a cause that matters to you

Everyone's welcome

We are ambitious about the future of retail. We're disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We're transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don't hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.

#LI-hybrid #LI-CC1 #hybridrole