101 to 125 of 216 Cyber Threat Intelligence Jobs in England

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing … remediation teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen ...

Cyber Security Operations Specialist Rate - £500 - £550 Inside IR35 Duration - 6 months Location - Bristol - twice a week on site A major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection … security alerts, investigations, tickets and operational queues while helping improve the effectiveness of the security tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build-vs-buy decisions … Leadership: Own the full incident response lifecycle — detection, triage, containment, eradication, recovery, post-incident review. Author and maintain IR playbooks, runbooks and escalation procedures. Threat Intelligence: Investigate security events, perform root cause analysis, and apply threat intelligence to improve defensive posture. Understand attacker TTPs and operationalise ...

internal teams and vendors to ensure reliable, high-quality telemetry Detection Engineering Design and implement detection use cases aligned to MITRE ATT&CK and threat intelligence Build and tune correlation rules, anomaly detections, dashboards, and alerting workflows Continuously refine detections to reduce false positives and improve effectiveness … LogRhythm, or Exabeam Strong understanding of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, Kafka, Event Hubs, agents) Experience in detection engineering, threat modelling, and attacker behaviour analysis Proven ability to build and tune correlation rules, dashboards, and alerts Familiarity with SOAR tools and automation workflows Security ...

triaging alerts, you'll engineer the systems that make Security Operations smarter, faster and more scalable.You'll work across Detection Engineering, Security Automation, Threat Hunting and Incident Response, building detection logic, automating repetitive workflows and partnering closely with Product Engineering to improve security telemetry across the CloudBees platform.Whether … cloud, endpoint, SaaS and application environments. Own the full detection lifecycle from hypothesis through deployment and continuous tuning. Create high-fidelity detections using operational threat intelligence, incident learnings and purple team findings. Measure and improve detection coverage using the MITRE ATT&CK framework. Continuously reduce false positives while ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

informed, risk‐based decisions during security incidents, prioritising alerts, coordinating containment actions, and recommending remediation strategies. They would be expected to deliver infrastructure hardening, threat detection, vulnerability management and supports Microsoft 365 security improvements. The successful candidate will be part of the wider infrastructure team and work closely with … development teams, clients, risk and compliance to drive security automation, threat detection, incident response, and risk reduction across the enterprise platform stack.Key ResponsibilitiesSecurity Leadership & Team Management: Lead a team of engineers, setting direction, managing workloads, and developing capability. Act as the primary security escalation point across the Infrastructure function. ...

acquired by bp in 2024. What you'll do (the role) Summary We are seeking a dynamic, hands-on Senior Cybersecurity Analyst to monitor cyber risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally. You will be responsible for threat detection, investigation … will proactively hunt for security issues, assess emerging threats, and partner with infrastructure and support teams to strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs ...

workflows, and knowledge-base content to improve consistency and operational readiness. Provide technical leadership in intrusion analysis, incident response, digital forensics, malware investigations, and threat hunting activities. Lead response efforts during significant security incidents, ensuring effective coordination, decision-making, and ownership through resolution. Stay current on threat actor … tactics, techniques, and procedures (TTPs), leveraging threat intelligence to enhance investigations, detections, and response capabilities. Partner with Engineering, Labs, and Content teams to improve detection quality, reduce false positives, and address recurring investigation gaps. What you will bring Up to 12 years of total work experience. 5+ years ...

directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts. You’ll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous … growth. Our SOC culture is built by engineers who’ve progressed through roles in security operations, threat intelligence, and engineering. You’ll benefit from cyber ranges, training labs, and the freedom to shape your development path. As part of a leading MSSP, you'll gain exposure ...

Professor in Cyber Security - Golden Valley Summary Location: Location: PARK CAMPUS Job Type: Closing Date: Closing Date: 08/23/2026 Date Posted: Date Posted: 07/23/2026 Reference: Reference: A1565 Description Professor of Cyber Security (Golden Valley) University of Gloucestershire 0.2 FTE | Cheltenham/… Golden Valley Development | Professor Grade Help shape the future of cyber security in one of the UK's most exciting innovation ecosystems. The University of Gloucestershire is seeking inspirational individuals for a Professor of Cyber Security to play a leading role in the development of Golden Valley ...

latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle. You Are Passionate about security, you love what you do and have … assessments (BVAs) that articulate clear value outcomes and benefits. The Work We are expanding our team in search of experienced professionals to grow our Cyber Defense and Resilience practice, helping our clients modernize to an AI-powered defense posture. Accenture provides the opportunity to support world-class cybersecurity programs ...

Group in Manchester is seeking a Head of Threat & Vulnerability Management to lead the cyber security function and protect our members, colleagues, and customers from evolving threats. You will shape threat intelligence and vulnerability management, guiding decisions at senior levels and driving improvements across the organisation. ...

located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. Role summaryThe Global Cyber Solution Architect is responsible for designing, shaping, and developing cyber solutions that support KPMG’s global clients across multiple industries and levels … complexity. The role serves as the primary architect for global cyber solution design across managed services, advisory offerings, and large scale transformation deals. This includes solutioning for MDR, penetration testing, vulnerability management, attack surface management, and cyber risk management.How will you make your mark The architect will translate ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. What you’ll be doing Data Ingestion and Enrichment Collaborate with Security analysts and application teams … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize ...

proactively with cross-functional teams to influence project outcomes and enhance solution quality. Experience & Skills Advanced proficiency in Cybersecurity is required. Advanced proficiency in Cyber Threat Intelligence is suggested. Advanced proficiency in Threat Modeling is suggested. ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including ...

solutions are designed and deployed with security by design from the outset. Stay current with AI security risks and emerging attack vectors, translating threat intelligence into practical controls. Security Engineering & Standards Embed security into CI/CD pipelines and DevOps workflows, championing shift‐left practices across engineering teams. … guidelines for use across platform and product delivery. Participate in architecture and design reviews, providing security input as part of the delivery lifecycle. Threat Intelligence & External Partnerships Act as the internal interface for Arctic Wolf, the organisation's outsourced MDR provider, triaging escalations and feeding intelligence back ...

Cyber Security Engineer/Specialist Permanent | Up to £80,000 (+ Benefits) Hybrid Working (2–3 days per week Onsite) | Surrey Protect Critical Services. Strengthen Cyber Resilience. Make a Tangible Impact. Exalto Consulting is pleased to be supporting a well-established international organisation in the search … opportunity to work at the heart of that effort, helping to protect critical systems, safeguard sensitive information and strengthen defences against an evolving threat landscape. This position would suit a cybersecurity professional who combines strong technical expertise with a practical, collaborative approach and a genuine interest in continuous improvement. ...

About the CompanyTata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of CommunicationsJob InformationJob TitleCyber Security SME: Security Solution ArchitectLocation: United Kingdom … Hybrid)Experience: 8-12 YearsEmployment Type: Full-TimeReports To: Head of Solution Architect Role OverviewWe are looking for an experienced Cyber Security SME with a strong background in Security Solution Architecture, Cybersecurity Consulting, and Enterprise Security Transformation. The ideal candidate will have experience designing and proposing integrated cybersecurity solutions ...

design, scalable, and aligned to business and regulatory requirements.Working closely with architecture, engineering, and delivery teams, you will produce high-level designs, conduct threat modelling and risk assessments, and provide architectural leadership throughout project lifecycles.Key ResponsibilitiesDevelop high-level security architecture and solution designs for enterprise technology initiatives.Evaluate emerging technologies … security tooling, providing recommendations and business justification.Conduct threat modelling, security risk assessments, and secure-by-design reviews.Define security controls, network architectures, and data flow models for internal and external integrations.Provide technical guidance to engineering, testing, and delivery teams during implementation.Contribute to security roadmaps, standards, policies, and architectural best practices.Engage ...

functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics Required qualifications, capabilities, and skills 5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing ...

cross-functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvementUtilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analyticsRequired qualifications, capabilities, and skills5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing infrastructures, cloudFoundational ...

functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics Required qualifications, capabilities, and skills 5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing ...