Outside IR35 Threat Intelligence Contract Jobs
Updating results…
111 Contract jobs sorted by:
Date Posted
Date Posted
Rate
Updating results…
111 Contract jobs
Senior Combined ADHD Assessor & Prescriber for Children - Redruth, Cornwall
Posted 1 day ago by Paloma Health
The role of Senior Combined ADHD Assessor & Prescriber for Children at Paloma involves delivering high-quality ADHD neur...
- Rate £67,000 per year
- Category Outside
- Work type Remote
- Location Redruth, Cornwall
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
AI Engineer - Remote - Outside IR35 - Python - LLMs - Azure - RAG
Posted 3 days ago by We Are Orbis Group Ltd
The AI Engineer role focuses on developing production AI applications for a well-funded technology company, leveraging P...
- Rate Negotiable
- Category Outside
- Work type Remote
- Location United Kingdom
AI Engineer - Agentic AI
Posted 4 days ago by LA International Computer Consultants Lt...
The AI Engineer role involves developing production agentic AI systems in Brighton, focusing on designing, building, and...
- Rate £360 per day
- Category Outside
- Work type Onsite
- Location Brighton, East Sussex, UK
Data Business Analyst (Warehouse & Modelling) - 6 month contract - London/hybrid...
Posted 4 days ago by Station
The Lead Data Business Analyst will serve as a liaison between business stakeholders and technical teams, focusing on de...
- Rate £525 per day
- Category Outside
- Work type Hybrid
- Location City of London, UK
KPI Report Developer (Power BI)
Posted 4 days ago by Sanderson Government and Defence
The KPI Report Developer (Power BI) role involves designing, developing, testing, and deploying Power BI dashboards and...
- Rate £500 per day
- Category Outside
- Work type Remote
- Location London; City of London; East London; Central London; South East London; West London; Canary Wharf; South West London; North London; Greenwich; Stratford
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
£
—
£
About Our Outside IR35 Threat Intelligence Contract Roles
What does a threat intelligence contractor do?
As a contract Threat Intelligence, you are hired to research, analyse, and operationalise intelligence about the threat actors, campaigns, and techniques that pose risks to an organisation's security, enabling the security team to be proactive in its defences rather than purely reactive to incidents. The work involves collecting and processing threat data from open source, commercial, and closed intelligence feeds, producing finished intelligence reports that contextualise threats for technical and executive audiences, supporting incident response teams with relevant threat context, mapping adversary behaviours to the MITRE ATT&CK framework, and integrating threat intelligence into security tooling including SIEM detection rules, threat hunting workflows, and vulnerability prioritisation processes.
Threat Intelligence contractors are expected to have deep knowledge of the threat landscape relevant to the client's industry and the analytical skills to derive actionable intelligence from large and diverse data sources. Experience using threat intelligence platforms such as Recorded Future, Mandiant Advantage, ThreatConnect, or MISP for managing intelligence collections and producing intelligence products is widely expected. Proficiency in applying MITRE ATT&CK to describe and detect adversary behaviour, and knowledge of the intelligence collection requirements and production processes that underpin a mature threat intelligence programme, is expected at senior level. The ability to research and profile specific threat actor groups, including tracking their tooling, infrastructure, and targeting patterns over time, is a key analytical skill. For roles focused on operational threat intelligence, experience integrating intelligence feeds into SIEM rules, vulnerability management prioritisation, and incident response playbooks is expected alongside the research and analytical capabilities.
What is the market like for threat intelligence contractors?
Threat Intelligence contracting is a specialist and high-value segment within the cybersecurity contractor market, driven by the growing recognition that proactive, intelligence-led security is more effective and commercially efficient than purely reactive incident response. Financial services, critical national infrastructure, defence, and large enterprise organisations are the most consistent buyers of Threat Intelligence contractor expertise, reflecting both the sophistication of the threats they face and their capacity to invest in intelligence-driven security capabilities. The supply of experienced Threat Intelligence analysts with the combination of research capability, analytical depth, and technical integration skills is limited relative to demand, supporting strong rates. Former government intelligence and signals intelligence professionals are a distinctive talent source within the Threat Intelligence contractor market.
What does Outside IR35 mean?
IR35 is UK tax legislation that determines whether a contractor is genuinely self-employed or working in a manner that resembles employment. When a contract is classified as outside IR35, the engagement is treated as a business-to-business arrangement. The contractor operates through their own limited company, invoices for services, and manages their own tax affairs including corporation tax, self-assessment, and VAT where applicable.
Outside IR35 engagements are assessed against three key factors: the degree of control the client exercises over how the work is delivered, whether the contractor has a genuine right to provide a substitute, and whether there is a mutuality of obligation between the parties. Contracts that demonstrate contractor autonomy, project-based delivery, and the absence of ongoing employment obligations are more likely to sit outside IR35. Since April 2021, responsibility for making this determination sits with the end client for medium and large private sector organisations.
On QualityContracts.co.uk, approximately 28% of roles with a stated IR35 status are classified as outside IR35. The proportion varies by sector and role type, with some disciplines seeing a significantly higher or lower share of outside IR35 opportunities. Each listing on this page displays its IR35 status where provided by the hiring organisation.
What threat intelligence roles are usually Outside IR35?
Threat intelligence contracts can sit outside IR35 when structured around specific assessment or research projects: producing a threat landscape report, conducting a targeted threat assessment, or developing threat intelligence requirements for a new SIEM deployment. The analytical, research-driven nature of these engagements is consistent with outside IR35 status. Security consultancies and organisations responding to specific threat scenarios commission this type of work.
How much do threat intelligence contractors usually earn when working Outside IR35?
Contract rates for threat intelligence roles typically range from £500 to £900 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement. Rates shown are for outside IR35 engagements and reflect the gross day rate paid to the contractor's limited company before any personal tax obligations.
How many Outside IR35 threat intelligence vacancies are there on Quality Contracts?
Over the past twelve months, we have tracked over 100 threat intelligence contract roles across the site. Of the roles currently listed on our site, around one in four are Outside IR35. Data reviewed up to June 2026.