Cyber Threat Intelligence Lead

At CGI, we empower organisations to stay ahead of evolving cyber threats by transforming intelligence into proactive, effective security solutions. As our Cyber Threat Intelligence Lead, you will shape and drive a critical capability within our Security Operations Centre (SOC), helping clients anticipate sophisticated threats and strengthen their cyber resilience. You'll take ownership of our threat intelligence services, lead a talented team of analysts and develop innovative approaches that turn real-world intelligence into measurable security outcomes. Working alongside a collaborative community of cyber security experts, you'll have the freedom to influence strategy, develop new capabilities and make a lasting impact, with the support and opportunities to grow your career.



CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.



Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position.



Due to the specific security requirements of this role, applicants must be British nationals and eligible to obtain full UK Security Check (SC) clearance without restrictions or caveats.

Profil recherché

In this role, you will lead and develop a team of Cyber Threat Intelligence (CTI) analysts, taking ownership of delivering high-quality, actionable intelligence that enables our clients to anticipate and respond to emerging cyber threats. You will shape the strategic direction of our CTI services, establish best practices and introduce innovative intelligence capabilities that strengthen security operations and improve threat detection. As a trusted technical leader, you'll mentor colleagues, encourage knowledge sharing and empower your team to deliver exceptional outcomes.



Working closely with our SOC, Threat Detection, Vulnerability Management and Service Delivery teams, you will ensure real-world threat intelligence informs proactive defence strategies across a diverse client portfolio. You'll collaborate directly with clients, understand their intelligence priorities and translate complex threats into practical security recommendations. Supported by CGI's wider cyber security community, you'll have the opportunity to influence service development, strengthen client relationships and drive continuous improvement.



Key responsibilities include:

- Lead & Deliver: Manage and develop a team of CTI analysts, ensuring the consistent delivery of accurate, timely and actionable intelligence to clients and operational teams.

- Shape & Innovate: Own the development of CTI capabilities, introducing new intelligence services, methodologies and processes that enhance cyber defence.

- Strengthen & Protect: Collaborate with SOC, Threat Detection and Vulnerability Management teams to integrate threat intelligence into monitoring, detection and response activities.

- Engage & Advise: Build trusted relationships with clients and stakeholders, translating complex threat intelligence into clear, practical recommendations that support security decision-making.

- Mentor & Empower: Provide technical leadership, coaching and escalation support, developing team capabilities and supporting colleagues in their professional growth.

- Optimise & Integrate: Work with threat intelligence vendors and technology partners to improve intelligence collection, analysis and integration across security platforms.

- Collaborate & Improve: Establish and refine CTI policies, procedures and intelligence-sharing practices to strengthen service quality and operational effectiveness.

Required qualifications to be successful in this role

o succeed in this role, you will bring strong experience in Cyber Threat Intelligence, combining technical expertise with an understanding of security operations, threat detection and intelligence-led defence. You'll be confident leading and mentoring analysts, engaging with clients and translating complex cyber threats into actionable insights. Your knowledge of industry frameworks, intelligence platforms and emerging attacker techniques will help you shape innovative solutions, while your collaborative approach and leadership skills will support the continued development of CGI's CTI capabilities.



Essential skills and experience:



- Cyber Threat Intelligence: Proven experience delivering actionable CTI, with a strong understanding of the intelligence lifecycle, evolving threat landscape, relevant legislation and ethical considerations.

- Threat Intelligence Platforms: Experience using threat intelligence platforms, integrating multiple intelligence sources and working with vendors to maximise intelligence quality and effectiveness.

- Security Operations: Strong understanding of SOC environments, security monitoring, incident detection and response, and intelligence-led security operations.

- Threat Intelligence Frameworks: Knowledge of MITRE ATT&CK, TaHiTI and their application to threat intelligence analysis, threat hunting and defensive security.

- Leadership & Mentoring: Proven ability to lead, coach and develop analysts, promote knowledge sharing and drive continuous improvement.

- Stakeholder Engagement: Excellent communication and presentation skills, with the ability to translate complex intelligence into clear recommendations for technical and non-technical audiences.

- Technical Consultancy: Broad understanding of IT environments, security technologies and how external threats affect organisational security.

- Analytical Thinking: Strong investigative, problem-solving and decision-making skills, with the ability to prioritise intelligence requirements and deliver practical outcomes.

- Service Development: Ability to improve intelligence processes, develop new capabilities and align CTI services with client and business priorities.



Desirable experience:



- Two to three years of practical experience in Cyber Threat Intelligence.

- Experience working within Blue Team or Red Team security environments.

- Previous experience leading or mentoring cyber security analysts.

Desirable qualifications:

- CREST Practitioner Threat Intelligence Analyst (CPTIA)

- CREST Registered Threat Intelligence Analyst (CRTIA)

- CREST Certified Threat Intelligence Manager (CCTIM)

- Certified Information Systems Security Professional (CISSP)

- SANS FOR578: Cyber Threat Intelligence



#LI-JS2