26 to 50 of 66 Cyber Threat Intelligence Jobs in the South East

Operational Security Lead & Cyber Vulnerability Manager, Hyrid working with monthly visit to office in either London or Buckinghamshire. Salary likely to be in the range £ 95000 - 100000 + bonus + benefits. Market leading company in the financial service sector is looking for an Operational Security Lead & Cyber Vulnerability … Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks you will drive ...

opportunity to play your part - At Centrica, our Global Security Operations Centre (GSOC) is at the forefront of protecting our business from evolving cyber threats. As a Senior Global Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber … supporting the response to significant security incidents. Working across cloud, endpoint, identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement. If you're passionate ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

compliance, vulnerability reporting readiness, and regulatory response activities. Key Responsibilities Vulnerability Assessment & Triage: Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact. PSIRT Case Management: Manage the end-to-end lifecycle of vulnerability … customers. Cross-Functional Communication: Manage internal and customer-facing messaging to ensure accurate, consistent, and timely communication regarding critical vulnerabilities and product security issues. Cyber Resilience Act (CRA) Compliance: Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness ...

excellent opportunity for someone early in their SOC career, or for an individual with a strong infrastructure and networking background looking to transition into cyber security operations. You will be working across a diverse set of customer environments as part of our Security Operations Centre, focusing on investigation, understanding …/XSIAM to understand what has happened, how activity progressed and what actions need to be taken. You will be supported through structured training, cyber ranges, hands‐on exposure to modern SOC technologies and real investigation experience to help you grow quickly. You will join a modern, continuously evolving ...

criteria, completion of planned work, and rollback plans. Review and approve design, deployment, configuration, and administration documentation. Act as a generalist technical SME across cyber monitoring technologies and security tools. Key skills & experience 5-8 years of relevant experience in technical engineering, SOC deployment, or security infrastructure. Proven experience … designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest rates. Proven experience leading or conducting SIEM ...

full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure on-premise and cloud architectures … complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise security architecture . ...

Architect Location: Guildford Hybrid Salary: £80,000 £100,000 We are seeking an experienced Lead SOC Architect to join a leading organisation delivering complex cyber and security solutions across highly secure environments. Youll lead the architecture and delivery of Security Operations Centre (SOC) solutions , working directly with senior clients … process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate new technologies ...

client, a leader in the cyber security sector, is currently seeking a Senior Security Engineering Consultant to join their team. This permanent role is a hands-on technical position within the Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. … identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations Deliver detection as code pipelines, including structured use case development and versioning approaches Produce clear ...

onsite role, shift work (4 on, 4 off) SC clearance required, with eligibility for DV About the Client Our client is a well-established cyber security organisation delivering specialist security services across highly secure environments. Their Security Operations Centre plays a vital role in protecting critical infrastructure from evolving … cyber threats. Due to continued growth, they are looking to expand their SOC team with an experienced Senior SOC Analyst. The Benefits Shift allowance included within the package Opportunity to work on high profile national security programmes Ongoing training and professional development Support towards further cyber security certifications ...

Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces … you. Role Description BAE Systems have been contracted to undertake the design and build of a dedicated Security Operations Centre (SOC) to support the cyber defence of a major international defence programme. The information, systems and networks to be protected will be a mix of Microsoft Cloud services ...

Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces … you. Role Description BAE Systems have been contracted to undertake the design and build of a dedicated Security Operations Centre (SOC) to support the cyber defence of a major international defence programme. The information, systems and networks to be protected will be a mix of Microsoft Cloud services ...

Defend Critical Infrastructure. Hunt Threats. Make a Real Impact. Cyber threats never stand stilland neither do we. We're looking for a Senior Security Operations Centre (SOC) Analyst to join our growing Cyber Security team and play a key role in protecting some of the UK's most … critical organisations. This is your opportunity to work at the frontline of cyber defence, investigating real-world threats, shaping detection capabilities, and helping drive the evolution of a mature and high-performing SOC. You'll be joining a collaborative team of cyber specialists who are passionate about defending ...

John Lewis Partnership is seeking a Senior Information Security Analyst to join the Threat Defence team in Bracknell. You will identify, understand and report on cyber threats, coordinate with vulnerability management, and deliver intelligence insights to partners and stakeholders. You will design and run Threat Hunts ...

Senior Vulnerability Management specialist/Cyber Security Analyst or Cyber Security Engineer £600-£650 per day Inside IR35 6 Months initally Remote (1-2 times onsite a month in central Southampton) My client is looking for an experienced Senior Vulnerability Analyst to join their Cyber Security team … false positives and low-impact findings. Assess vulnerabilities using CVSS, exploitability, asset criticality, exposure and business impact. Monitor emerging vulnerabilities, zero-days and relevant threat intelligence. Work closely with infrastructure, cloud, application, DevOps and IT operations teams to coordinate remediation. Track vulnerabilities through to resolution, ensuring remediation is completed ...

Defend Critical Infrastructure. Hunt Threats. Make a Real Impact. Cyber threats never stand still-and neither do we. We're looking for a Senior Security Operations Centre (SOC) Analyst to join our growing Cyber Security team and play a key role in protecting some … most critical organisations. This is your opportunity to work at the frontline of cyber defence, investigating real-world threats, shaping detection capabilities, and helping drive the evolution of a mature and high-performing SOC. You’ll be joining a collaborative team of cyber specialists who are passionate about ...

decisions during live cybersecurity events. Review and quality-assureSOC investigations, confirming findings are accurate, evidence-based and clearly documented. Lead complex and high-priority cyber securityinvestigations before escalation to the IncidentResponse team, as delegated by the Principal SOC Analyst. Deliver clear and effectiveshift handovers, maintaining situational awareness and continuity … across ongoing investigations and incidents. Coordinate with Incident Responders during cyber security incidents,clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence. Collaborate with SOC Engineers to improve monitoringcoverage, alert quality and operational effectiveness. Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

Cyber Security Engineer, M365 Security, ISO27001 A Cyber Security Engineer opportunity for someone with solid experience across the Microsoft 365 security stack (Intune, Defender, Entra, Purview, Copilot) has opened up with an established UK-based organisation looking to strengthen its technical security function. Could this be the role … your hands-on security expertise to work across a broad and varied remit, with genuine scope to make an impact? The Role The Cyber Security Engineer will sit at the heart of the Group IT Services function, taking ownership of day-to-day security operations alongside longer-term compliance ...

cybersecurity events and incidents, supporting the delivery of an effective round-the-clock cyberdefence capability. Key responsibilities Monitor the organisation's technology estate for cyber events, suspicious activity and indicators of compromise. Independently investigate security alerts and complex cyber events. Assess the significance, potential impact and appropriate response … identified threats. Correlate information from multiple technical sources to establish attack timelines and identify affected systems. Analyse indicators of compromise, attacker techniques and threat intelligence. Escalate confirmed or suspected incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical ...

innovatorsto tackle humanity’s greatest challenges in four transformative areas: Health, Medical Science & Generative Biology Food Security & Sustainable Agriculture Climate Change & Managing CO2 Artificial Intelligence & Robotics This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join … demonstrable experience to help protect our people, platforms, and world‐class research. This is a hands‐on, impactful role at the centre of our cyber‐security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture. You will work closely with IT, research computing, governance ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: • Serve … email security technologies. • Design, deploy, configure, and maintain Proofpoint solutions, including: o Proofpoint Email Protection (PEP) o Proofpoint Targeted Attack Protection (TAP) o Proofpoint Threat Response Auto-Pull (TRAP) o Proofpoint Email Fraud Defense (EFD) o Proofpoint Information Protection/DLP • Manage email security policies, spam filtering, malware protection ...

Senior SOC Analysts. Review and quality-assure investigations, ensuring findings are accurate, evidence-based and fully documented. Make technical and operational decisions during live cyber events. Coordinate with Incident Responders, providing timelines, indicators of compromise and supporting evidence. Maintain effective handovers and continuity between shifts. Work with SOC Engineers … supervising analysts within a live operational service. Strong knowledge of SIEM platforms, log analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

effectiveness of managed service capabilities. The Operational Security Manager supports cybersecurity incident response, investigation, escalation, and regulatory reporting, with a focus on the EU Cyber Resilience Act. Working across Cybersecurity, Product Security, Legal, Compliance, Privacy, and Engineering, this role ensures incidents are properly assessed, documented, and reported within required … incidents and actively exploited vulnerabilities affecting products marketed or sold in the EU to determine applicable handling and notification requirements, particularly under the EU Cyber Resilience Act. Coordinate timely and accurate regulatory notifications, ensuring required incident, product, impact, mitigation, and remediation information is gathered, validated, documented, and communicated. Maintain ...