- Employment
- Full-Time
- Seniority
- Mid-Level
- Department
- IT & Technology Systems
- Industry
- Fine Watches & Horology
- Posted
- Oct 14, 2026
The Threat Intelligence Engineer will be based onsite at Watches of Switzerland Group’s Leicester head office four days a week. The role initially has a 60/40 split between engineering and threat intelligence, supporting cyber engineering and SOC teams while building the organisation’s threat intelligence function.
Role & Responsibilities
- Deliver actionable, industry-relevant threat intelligence that informs and strengthens cybersecurity controls, detection capabilities and defensive architecture.
- Initially balance engineering work and threat intelligence responsibilities in a 60/40 split, meeting immediate engineering priorities while building the dedicated threat intelligence function.
- Identify, analyse and operationalise cyber threat intelligence for cyber engineering and SOC teams.
- Translate raw intelligence into technical engineering requirements, detection logic and hardening improvements to support proactive defence and risk reduction.
- Provide intelligence during investigations and containment, and contribute to post-incident tuning.
- Produce concise, actionable intelligence summaries for engineering teams and leadership.
Qualifications
- Experience building an internal threat intelligence function from the ground up.
- Previous experience in threat intelligence or a similar cybersecurity role.
- Strong understanding of security controls, detection logic, identity systems and endpoint security.
- Experience working directly with engineering teams across EDR, SIEM, identity, cloud and networks to embed intelligence into controls.
- Proven ability to convert intelligence into detection logic, engineering requirements and hardening improvements.
- Demonstrable experience analysing adversary TTPs, malware behaviour, exploit chains and threat actor campaigns.
- Familiarity with threat intelligence platforms, OSINT tools, CTI feeds, enrichment tools and automated intelligence pipelines.
- Experience with Microsoft Sentinel SIEM, Defender automations and Logic Apps to support the engineering team.
Skills
Experience
Previous experience in threat intelligence or similar cybersecurity roles; experience building an internal threat intelligence function from the ground up and with engineering teams.
Workplace
This position is based in Leicester, England, UK.
Explore jobs in England or in the UK.
Benefits
Holiday Purchase Scheme; 24/7 Employee Assistance Programme; 24/7 Virtual GP service; Share Save Scheme; birthday off; free wellbeing tools; discount scheme; enhanced maternity pay.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Watches of Switzerland Group, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Cyber Threat Intelligence Engineer», «Cybersecurity Intelligence Engineer», «Threat Detection Engineer», «Cyber Defence Engineer», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.