Threat Intelligence Contract Jobs in London
Updating results…
561 Contract jobs sorted by:
Date Posted
Date Posted
Rate
Updating results…
561 Contract jobs
Senior Partner Manager
Posted 1 day ago by Xelix
The Senior Partner Manager at Xelix will oversee key partnerships that contribute significantly to the company's revenue...
- Rate £115,000 per year
- Category Undetermined
- Work type Hybrid
- Location London; City of London; East London; Central London; South East London; West London; Canary Wharf; South West London; North London; Greenwich; Stratford
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
Finance Transformation Manager - Treasury (12 months FTC)
Posted 1 day ago by Efficio
The Finance Transformation Manager at Efficio will provide maternity cover within the Finance function, focusing on Tax...
- Rate Negotiable
- Category Undetermined
- Work type Undetermined
- Location London, England, United Kingdom
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
£
—
£
About Our Threat Intelligence Contract Roles in London
What does a threat intelligence contractor do?
As a contract Threat Intelligence, you are hired to research, analyse, and operationalise intelligence about the threat actors, campaigns, and techniques that pose risks to an organisation's security, enabling the security team to be proactive in its defences rather than purely reactive to incidents. The work involves collecting and processing threat data from open source, commercial, and closed intelligence feeds, producing finished intelligence reports that contextualise threats for technical and executive audiences, supporting incident response teams with relevant threat context, mapping adversary behaviours to the MITRE ATT&CK framework, and integrating threat intelligence into security tooling including SIEM detection rules, threat hunting workflows, and vulnerability prioritisation processes.
Threat Intelligence contractors are expected to have deep knowledge of the threat landscape relevant to the client's industry and the analytical skills to derive actionable intelligence from large and diverse data sources. Experience using threat intelligence platforms such as Recorded Future, Mandiant Advantage, ThreatConnect, or MISP for managing intelligence collections and producing intelligence products is widely expected. Proficiency in applying MITRE ATT&CK to describe and detect adversary behaviour, and knowledge of the intelligence collection requirements and production processes that underpin a mature threat intelligence programme, is expected at senior level. The ability to research and profile specific threat actor groups, including tracking their tooling, infrastructure, and targeting patterns over time, is a key analytical skill. For roles focused on operational threat intelligence, experience integrating intelligence feeds into SIEM rules, vulnerability management prioritisation, and incident response playbooks is expected alongside the research and analytical capabilities.
What is the market like for threat intelligence contractors?
Threat Intelligence contracting is a specialist and high-value segment within the cybersecurity contractor market, driven by the growing recognition that proactive, intelligence-led security is more effective and commercially efficient than purely reactive incident response. Financial services, critical national infrastructure, defence, and large enterprise organisations are the most consistent buyers of Threat Intelligence contractor expertise, reflecting both the sophistication of the threats they face and their capacity to invest in intelligence-driven security capabilities. The supply of experienced Threat Intelligence analysts with the combination of research capability, analytical depth, and technical integration skills is limited relative to demand, supporting strong rates. Former government intelligence and signals intelligence professionals are a distinctive talent source within the Threat Intelligence contractor market.
What is the contracting market like in London?
London dominates the UK contractor market by volume, depth, and rate levels. The capital concentrates the headquarters and major offices of most FTSE 100 companies, the largest global banks, the Big Four professional services firms, and the central government departments that collectively generate the majority of UK contract demand. Every contracting discipline covered on this site has active demand in London, from niche specialisms like threat intelligence and LLM engineering through to high-volume disciplines like project management and business analysis. The sheer density of employers means contractors in London typically have more choice of engagement at any given time than anywhere else in the UK. Day rates carry a premium of 15 to 25 per cent over the national average across most disciplines, reflecting both the concentration of complex, high-value programmes and the cost of operating in the capital.
How much do threat intelligence contractors usually earn in London?
Contract rates for threat intelligence roles in London typically range from £550 to £990 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement.
How many threat intelligence vacancies in London are there on Quality Contracts?
Over the past twelve months, we have tracked over 100 threat intelligence contract roles across the site, with London accounting for roughly one in three of those. Data reviewed up to June 2026.