Threat Intelligence Specialist

• Research, author, and publish intelligence products on environmental crime and illicit finance
• Maintain a reusable environmental-crimes threat picture inside TRM's intelligence infrastructure
• Use on-chain, OSINT, and partner-provided off-chain data to identify wallets, entities, and off-ramps behind environmental crime networks
• Produce structured, source-cited targeting packages supporting law-enforcement and partner investigations
• Own and manage the United for Wildlife and Project Pangolin partner program across 200+ organizations
• Provide case assistance, analysis, guidance, training, and onboarding to partners
• Organize cross-sector and cross-border sprints and working groups aimed at real-time disruption
• Collaborate with USFWS, HSI, DOJ, Interpol, UNODC, national agencies, and NGOs
• Brief internal stakeholders, partners, and leadership and represent TRM with media and at external events
• Shape TRM's mission tooling by translating field needs into product feedback and prototypes
• Build reusable AI workflows for signal processing, target selection, and drafting with human validation
• Deliver an active case and finished intelligence product within 30 days
• Deliver intelligence or training to a United for Wildlife partner and ship a reusable AI workflow within 60 days
• Establish a repeatable partner-delivery program and publish or brief an intelligence product within 90 days

Senior / Staff Intelligence Analyst, Environmental Crimes

• Conduct strategic analysis of internal and external threats across the financial crime landscape to support FCA senior decision-making
• Contextualise and summarise intelligence from a wide range of sources
• Identify emerging threats, risks and vulnerabilities to guide strategic and tactical prioritisation
• Develop and deliver strategic assessments and intelligence reports for internal stakeholders
• Adapt assessments for external partner awareness
• Generate and gather all-source intelligence on money laundering, fraud, AI, digital assets, technological advancements and sanctions evasion affecting the UK financial services sector
• Create high-quality analytical products for diverse audiences using appropriate formats and presentation styles
• Collaborate with internal stakeholders and external partners to enhance threat understanding, share methodologies and review analytical outputs
• Build and maintain proactive relationships with the analytical community
• Identify opportunities for multi-agency threat assessments with wider impacts across sectors, the UK and worldwide

Strategic Assessment Intelligence Analyst

• Own DPRK and China attribution end to end, including threat actors, entities, accounts, addresses, and infrastructure
• Lead attribution responses to DPRK- and China-related sanctions events
• Trace stolen and illicit funds through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps
• Produce finished intelligence, advisory notes, customer and partner briefings, and contributions to flagship publications
• Represent Chainalysis as an external expert at conferences, panels, press engagements, and public- and private-sector briefings
• Set the DPRK and China collection agenda and feed requirements into collection processes and priority intelligence requirements
• Translate DPRK and Chinese typologies into operational detection guidance for products and customers
• Design and tune AI automation while handling cases automation cannot resolve
• Raise team expertise in DPRK, China, and money-laundering tradecraft
• Collaborate with analysts, threat-domain SMEs, data scientists, and engineers across a globally distributed team

Senior Intelligence Analyst, DPRK – China Focus

• Identify real-world risks across diverse technical landscapes.
• Uncover security vulnerabilities and actively exploit findings.
• Assess additional impacts through post-exploitation.
• Provide proactive remediation advice to technical teams.
• Deliver penetration testing, including zero-knowledge network assessments, insider threat evaluations, credentialed application exploitation, and testing of human and physical security controls across the UKRI estate.
• Manage the external penetration testing call-off contract.
• Complete targeted penetration tests and red-team exercises.
• Develop and maintain offensive tooling to simulate adversary tactics and techniques.
• Monitor and analyse threat intelligence feeds for emerging threats and relevant TTPs.
• Produce technical threat reports and briefings.
• Conduct proactive threat hunting based on intelligence-led hypotheses and anomaly detection.
• Support risk assessments using offensive operations and threat landscape analysis.
• Collaborate with engineers, researchers, technologists, and federated Digital, Data and Technology teams.

Offensive Security and Threat Intelligence Specialist

• Proactively hunt and analyse advanced threats across customer environments using NCC Group’s proprietary hunting framework
• Conduct intelligence-led, hypothesis-driven analysis of TTPs and behaviours
• Use the HITS Framework, threat intelligence, MITRE ATT&CK, and risk models to form and validate hunting hypotheses
• Leverage GitLab, Sigma, Jupyter Notebooks, and other tools to automate hunts, visualise results, and create reusable investigation and detection artifacts
• Collaborate with detection engineering to convert threat hunt findings into high-fidelity detection content
• Operationalise detections for emerging threats using internal and open-source threat intelligence
• Support mapping threat models to monitoring use cases with teams across the business
• Document and maintain repositories of hunting methodologies, tooling, and findings
• Provide regular reports and presentations to stakeholders explaining threats, methods, and risk impact
• Work cross-functionally with Security Operations Centre Analysts, Global Detection Engineers, Privacy Team, and Engineering Team

Threat Hunter

• Investigate complex security incidents across cloud, endpoint, identity, email and network environments
• Assess potential business impact and recommend proportionate containment, remediation and recovery actions
• Maintain accurate investigative records, evidence and decision rationales throughout the incident lifecycle
• Conduct intelligence-led threat hunts based on adversary campaigns, behaviours, tactics, techniques and procedures
• Identify attack paths, security weaknesses, detection gaps and opportunities to strengthen M&G’s security posture
• Translate investigation, threat hunting and threat intelligence findings into improved detections, controls and response processes
• Develop, tune and validate analytical rules against evolving threats while reducing unnecessary alert activity
• Improve telemetry, data quality, detection coverage, tooling integrations and automated workflows with Security Operations Engineering
• Use AI-assisted analysis and advanced analytics for triage, investigation, threat hunting, detection engineering and reporting
• Validate AI-generated outputs and retain accountability for analytical conclusions, response decisions and security recommendations
• Act as a technical escalation point for complex alerts and incidents
• Communicate complex threats, risks, decisions and recommendations to technical and non-technical stakeholders
• Collaborate with internal teams and external security service providers on investigation and response
• Deliver practical improvements to Security Operations processes, procedures and defensive capabilities
• Maintain controls, documentation and audit evidence, supporting internal and external audit activity

Threat Intelligence Specialist jobs in United Kingdom

Senior / Staff Intelligence Analyst, Environmental Crimes

Strategic Assessment Intelligence Analyst

Senior Intelligence Analyst, DPRK – China Focus

Offensive Security and Threat Intelligence Specialist

Threat Hunter

Advanced Cyber Threat Analyst