Our Client is a large, highly regulated financial services organisation with a strong focus on cyber resilience and threat-informed defence. They continue to invest heavily in advanced threat intelligence capabilities to protect customers, systems, and data at scale. This role sits within a mature cyber security function and plays a key part in uplifting enterprise-wide threat intelligence outcomes. What you’ll do: Lead the delivery and operationalisation of the organisation’s Threat Intelligence Platform (TIP), including migration from incumbent platforms Build and manage integrations between the TIP and security tooling such as SIEM and SOAR platforms Define and embed Priority Intelligence Requirements (PIRs) and associated intelligence workflows Curate, assess, and manage internal and external threat intelligence sources Map adversary TTPs to enterprise controls and mitigations using MITRE ATT&CK and D3FEND Produce actionable intelligence products, dashboards, metrics, and executive-level reporting Support threat-informed detection, response, and control uplift across security operations Develop SOPs, runbooks, and training to embed sustainable CTI practices Identify and manage risks associated with intelligence handling, automation, and third-party data sources Requirements 5–8 years experience in Cyber Threat Intelligence, SOC, or Incident Response roles Hands-on experience delivering and operating Threat Intelligence Platforms (e.g. OpenCTI, MISP, EclecticIQ, ThreatConnect, Palo Alto TIM) Proven experience integrating TIPs with SIEM and SOAR platforms (e.g. Microsoft Sentinel, Splunk, ServiceNow SecOps, XSOAR) Strong understanding of the intelligence lifecycle and intelligence tradecraft Familiarity with MITRE ATT&CK and D3FEND frameworks Baseline security clearance (preferred) Benefits Towcha People is an Indigenous-owned recruitment business and we are committed to fair access to opportunity. We recognise that diverse perspectives fuel innovation, and that women and people of colour are less likely to apply unless they meet every qualification. We encourage you to apply even if you don’t meet every requirement. If you have the capability and the intent, we want to hear from you. You might be the right person for this role or another opportunity we are supporting. To see our other openings please visit: https://apply.workable.com/towcha-people/
