{"id":4184667,"url":"https://alion.io/job/cgi-cyber-threat-intelligence-lead","title":"Cyber Threat Intelligence Lead","company":{"id":1063,"name":"CGI","domain":"cgi.com","url":"https://alion.io/company/cgi","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"A","score":100,"open_postings":23,"ghost_share":0,"stale_share":0,"repost_share":0.043,"time_to_fill_p50_days":20,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Covenant","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-11-12T17:03:43Z","employer_posted_date":null,"last_verified_at":"2026-11-12T17:03:43Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"At CGI, we empower organisations to stay ahead of evolving cyber threats by transforming intelligence into proactive, effective security solutions. As our Cyber Threat Intelligence Lead, you will shape and drive a critical capability within our Security Operations Centre (SOC), helping clients anticipate sophisticated threats and strengthen their cyber resilience. You'll take ownership of our threat intelligence services, lead a talented team of analysts and develop innovative approaches that turn real-world intelligence into measurable security outcomes. Working alongside a collaborative community of cyber security experts, you'll have the freedom to influence strategy, develop new capabilities and make a lasting impact, with the support and opportunities to grow your career.\n\nCGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.\n\nDue to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position.\n\nDue to the specific security requirements of this role, applicants must be British nationals and eligible to obtain full UK Security Check (SC) clearance without restrictions or caveats.Profil recherché\nIn this role, you will lead and develop a team of Cyber Threat Intelligence (CTI) analysts, taking ownership of delivering high-quality, actionable intelligence that enables our clients to anticipate and respond to emerging cyber threats. You will shape the strategic direction of our CTI services, establish best practices and introduce innovative intelligence capabilities that strengthen security operations and improve threat detection. As a trusted technical leader, you'll mentor colleagues, encourage knowledge sharing and empower your team to deliver exceptional outcomes.\n\nWorking closely with our SOC, Threat Detection, Vulnerability Management and Service Delivery teams, you will ensure real-world threat intelligence informs proactive defence strategies across a diverse client portfolio. You'll collaborate directly with clients, understand their intelligence priorities and translate complex threats into practical security recommendations. Supported by CGI's wider cyber security community, you'll have the opportunity to influence service development, strengthen client relationships and drive continuous improvement.\n\nKey responsibilities include:\n\n- Lead & Deliver: Manage and develop a team of CTI analysts, ensuring the consistent delivery of accurate, timely and actionable intelligence to clients and operational teams.\n\n- Shape & Innovate: Own the development of CTI capabilities, introducing new intelligence services, methodologies and processes that enhance cyber defence.\n\n- Strengthen & Protect: Collaborate with SOC, Threat Detection and Vulnerability Management teams to integrate threat intelligence into monitoring, detection and response activities.\n\n- Engage & Advise: Build trusted relationships with clients and stakeholders, translating complex threat intelligence into clear, practical recommendations that support security decision-making.\n\n- Mentor & Empower: Provide technical leadership, coaching and escalation support, developing team capabilities and supporting colleagues in their professional growth.\n\n- Optimise & Integrate: Work with threat intelligence vendors and technology partners to improve intelligence collection, analysis and integration across security platforms.\n\n- Collaborate & Improve: Establish and refine CTI policies, procedures and intelligence-sharing practices to strengthen service quality and operational effectiveness.\n\nRequired qualifications to be successful in this role\n\no succeed in this role, you will bring strong experience in Cyber Threat Intelligence, combining technical expertise with an understanding of security operations, threat detection and intelligence-led defence. You'll be confident leading and mentoring analysts, engaging with clients and translating complex cyber threats into actionable insights. Your knowledge of industry frameworks, intelligence platforms and emerging attacker techniques will help you shape innovative solutions, while your collaborative approach and leadership skills will support the continued development of CGI's CTI capabilities.\n\nEssential skills and experience:\n\n- Cyber Threat Intelligence: Proven experience delivering actionable CTI, with a strong understanding of the intelligence lifecycle, evolving threat landscape, relevant legislation and ethical considerations.\n\n- Threat Intelligence Platforms: Experience using threat intelligence platforms, integrating multiple intelligence sources and working with vendors to maximise intelligence quality and effectiveness.\n\n- Security Operations: Strong understanding of SOC environments, security monitoring, incident detection and response, and intelligence-led security operations.\n\n- Threat Intelligence Frameworks: Knowledge of MITRE ATT&CK, TaHiTI and their application to threat intelligence analysis, threat hunting and defensive security.\n\n- Leadership & Mentoring: Proven ability to lead, coach and develop analysts, promote knowledge sharing and drive continuous improvement.\n\n- Stakeholder Engagement: Excellent communication and presentation skills, with the ability to translate complex intelligence into clear recommendations for technical and non-technical audiences.\n\n- Technical Consultancy: Broad understanding of IT environments, security technologies and how external threats affect organisational security.\n\n- Analytical Thinking: Strong investigative, problem-solving and decision-making skills, with the ability to prioritise intelligence requirements and deliver practical outcomes.\n\n- Service Development: Ability to improve intelligence processes, develop new capabilities and align CTI services with client and business priorities.\n\nDesirable experience:\n\n- Two to three years of practical experience in Cyber Threat Intelligence.\n\n- Experience working within Blue Team or Red Team security environments.\n\n- Previous experience leading or mentoring cyber security analysts.\n\nDesirable qualifications:\n\n- CREST Practitioner Threat Intelligence Analyst (CPTIA)\n\n- CREST Registered Threat Intelligence Analyst (CRTIA)\n\n- CREST Certified Threat Intelligence Manager (CCTIM)\n\n- Certified Information Systems Security Professional (CISSP)\n\n- SANS FOR578: Cyber Threat Intelligence\n\n#LI-JS2","description_format":"text","description_chars":7063,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","IT Outsourcing & Dedicated Teams","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-12T17:57:36Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":20,"reasons":["seen:0","win:early","comp:brand"],"computed_at":"2026-11-12T20:30:52Z"},"pay":null,"html_url":"https://alion.io/job/cgi-cyber-threat-intelligence-lead","json_url":"https://alion.io/job/cgi-cyber-threat-intelligence-lead.json","meta":{"generated_at":"2026-11-12T20:30:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43329,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1063},"rest":"https://alion.io/mcp/rest/get_company?id=1063"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcgi-cyber-threat-intelligence-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcgi-cyber-threat-intelligence-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcgi-cyber-threat-intelligence-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cgi-cyber-threat-intelligence-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcgi-cyber-threat-intelligence-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4184667}},{"tool":"search_jobs","arguments":{"company":"cgi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4184667},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}