{"id":4235992,"url":"https://alion.io/job/edward-jones-cyber-threat-intelligence-engineer-iv","title":"Cyber Threat Intelligence Engineer IV","company":{"id":1759742,"name":"Edward Jones","domain":"edwardjones.com","url":"https://alion.io/company/edwardjones-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BrassRing","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Red Teaming","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T19:43:16Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Team Overview:We’re looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering, Red Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing.\nYou’ll translate raw threat data into decisions: which adversary behaviors get new detections, which techniques the red team should emulate next, and which exposures matter most given who’s actually targeting organizations like ours.\nWhat You'll Do:\nTrack threat actors, campaigns, and TTPs relevant to our industry, geography, and technology stack, and translate findings into actionable intelligence products (briefs, actor profiles, trend reports).\nPartner with the SOC to enrich alerts and investigations with threat context, helping analysts triage faster and more accurately during active incidents.\nWork with Detection Engineering to identify coverage gaps against known adversary behavior (e.g., mapped to MITRE ATT&CK) and help prioritize new detections based on real world threat relevance.\nCollaborate with the Red Team to shape threat informed emulation plans, ensuring exercises reflect the tactics of adversaries most likely to target the organization.\nFeed intelligence into Exposure Management to help prioritize vulnerabilities, misconfigurations, and attack surface findings based on active exploitation trends and threat actor intent.\nMonitor open-source intelligence (OSINT), dark web sources, ISACs, and commercial threat feeds; assess relevance and reliability of incoming intelligence.\nProduce and maintain adversary tracking documentation, including TTP matrices, campaign timelines, and indicator repositories.\nDeliver both tactical (IOC/TTP-level) and strategic (executive-level trend and risk) intelligence outputs tailored to different stakeholders.\nParticipate in incident response as a threat intelligence liaison, providing attribution context and likely adversary next-steps.\nContribute to purple team exercises by bridging red team findings with detection and intelligence perspectives.","description_format":"text","description_chars":2236,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Financial Services","Wealth Management & Financial Advisors"],"lifecycle":[{"event":"open","at":"2026-11-13T11:45:15Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.778,"p_room":0.45,"age_days":23,"expected_fill_days":15,"reasons":["conf:0","win:tail","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/edward-jones-cyber-threat-intelligence-engineer-iv","json_url":"https://alion.io/job/edward-jones-cyber-threat-intelligence-engineer-iv.json","meta":{"generated_at":"2026-11-15T00:04:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":109,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1759742},"rest":"https://alion.io/mcp/rest/get_company?id=1759742"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fedward-jones-cyber-threat-intelligence-engineer-iv"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fedward-jones-cyber-threat-intelligence-engineer-iv"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fedward-jones-cyber-threat-intelligence-engineer-iv"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/edward-jones-cyber-threat-intelligence-engineer-iv\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fedward-jones-cyber-threat-intelligence-engineer-iv"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4235992}},{"tool":"search_jobs","arguments":{"company":"edwardjones.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4235992},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}