Glocomms
Threat Vulnerability Lead
City of London
Posted about 18 hours ago
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Job Responsibilities
- Lead the enterprise threat intelligence program, overseeing the end-to-end collection, analysis, enrichment, and dissemination of actionable intelligence to executive leadership, Technology, Security Operations, and Cybersecurity stakeholders.
- Serve as the primary owner and administrator of the organisation's ThreatConnect Threat Intelligence Platform (TIP), ensuring effective integration, maintenance, and optimisation.
- Develop and maintain ThreatConnect workflows, playbooks, dashboards, and intelligence-sharing processes to improve threat visibility and response capabilities.
- Integrate ThreatConnect with SIEM, SOAR, incident response, and vulnerability management platforms to automate intelligence sharing, enrichment, prioritisation, and reporting.
- Leverage ThreatConnect to manage threat feeds, indicators of compromise (IOCs), threat actor profiles, campaigns, and TTPs aligned to the MITRE ATT&CK framework.
- Continuously improve threat intelligence ingestion, enrichment, correlation, reporting, and operationalisation through ThreatConnect automation and orchestration capabilities.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Desired Skills and Experience
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- At least 10 years of experience in cybersecurity engineering or operations roles, with at least 5 years of hands-on experience in Threat Intelligence and Vulnerability Management.
- Strong experience across the threat intelligence lifecycle, including collection, analysis, enrichment, correlation, and dissemination of actionable intelligence.
- Hands-on administration and operational experience with ThreatConnect (or similar Threat Intelligence Platforms), including platform configuration, workflow development, feed management, integrations, and reporting.
- Experience integrating ThreatConnect with SIEM, SOAR, incident response, ticketing, and vulnerability management tools.
- Strong understanding of cyber threat intelligence methodologies, threat actor tracking, IOC management, threat feed ingestion, and intelligence-sharing frameworks.
- Experience working with technologies such as ThreatConnect, Splunk, Microsoft Sentinel, QRadar, ServiceNow, Swimlane, Palo Alto XSOAR, Qualys, Tenable, and Defender TVM.
- Experience automating security workflows using Python, PowerShell, APIs, or similar technologies.
- Strong knowledge of MITRE ATT&CK, NIST CSF, OWASP Top 10, CVEs, and vulnerability risk management best practices.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Threat Intelligence
Vulnerability Management
ThreatConnect
SIEM
SOAR
MITRE ATT&CK
Python
PowerShell
API Integration
Incident Response
Threat Actor Tracking
IOC Management
NIST CSF
OWASP Top 10
CVEs
Risk Management