101 to 125 of 249 Cyber Threat Intelligence Jobs in the UK

Role: Senior Security Specialist - Threat Hunting Location: Cardiff (hybrid) Salary: Band 7 Pension : 20% The Opportunity: Digital Health and Care Wales vision is to provide world leading digital services, empowering people to live healthier lives, and transforming health and care for everyone in Wales. It is a multi-award … Place to Work in IT. Job Summary Support Digital Health and Care Wales in protecting critical systems, applications and sensitive data by leading proactive threat hunting, improving detection capabilities, and providing expert cyber security guidance. The role is a senior technical position within the Cyber Security Operations ...

About the opportunity Complete the free training, gain a qualification and career guidance - no brainer! Are you ready to launch a career in cyber security? Netcom Training s fully-funded Cyber Security course (NCFE Certificate in Principles of Cyber Security, Level 2) equips you with the practical … skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast-growing cyber security and IT roles. Our learners have gone on to roles such as IT support ...

About the opportunity Complete the free training, gain a qualification and career guidance - no brainer! Are you ready to launch a career in cyber security? Netcom Training’s fully-funded Cyber Security course (NCFE Certificate in Principles of Cyber Security, Level 2) equips you with the practical … skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast-growing cyber security and IT roles. Our learners have gone on to roles such as IT support ...

leading global technology and cyber organisation is building a new Security Operations Centre to support the cyber defence of a major international defence programme. The SOC will protect a complex combination of Microsoft Cloud services and on-premises data centres operating across multiple regions and classification levels. … high-level and low-level technical design across the SOC, leading small technical teams and helping shape, deploy and integrate a broad range of cyber security technologies. This is an ideal opportunity for a strong SOC engineer or cyber technical lead who combines hands-on technical depth with ...

exciting opportunity for an experienced Cyber Security Awareness & Security Operations Analyst to lead and enhance a large-scale security awareness programme supporting over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat … targeted security awareness campaigns for different user groups Monitor training completion, engagement metrics, and programme effectiveness Produce compliance reports and management information Develop engaging cyber awareness content across multiple communication channels Deliver security awareness training to technical and non-technical audiences Support security incident investigations and response activities Collaborate ...

Security Consultant to help organisations secure the next generation of technology environments, including AI-enabled applications, LLM integrations and agentic systems. This is a cyber security consulting role with an AI focus. You will advise clients on core cyber security risks across cloud, identity, applications, data, operations … introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption ...

shaping the future of fintech – and we’re just getting started.The roleYou will own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security.This … with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership of the most complex and high-value detection and threat engineering work.What you’ll be responsible forEngineering high-fidelity threat detections across endpoint, identity, cloud, and SaaSDefining detection standards, principles, and quality thresholds ...

Role: Cyber Security AnalystLocation: London/Manchester/BristolSalary: Competitive salary and package dependent on experienceCareer Level: SpecialistPlease Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which typically requires 5 years continuous UK address history usually including no periods of 30 consecutive days … being a British passport holder with no dual nationalism at the point of application.Note: The above information relates to a specific client requirementOur Cyber Practice is a fast-growing community of industry leading experts. The practice covers Assurance, Compliance, Security Operations (SecOps), Offensive Security and Security Research. ...

Role: Cyber Security AnalystLocation: London/Manchester/BristolSalary: Competitive salary and package dependent on experienceCareer Level: SpecialistPlease Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which typically requires 5 years continuous UK address history usually including no periods of 30 consecutive days … being a British passport holder with no dual nationalism at the point of application.Note: The above information relates to a specific client requirementOur Cyber Practice is a fast-growing community of industry leading experts. The practice covers Assurance, Compliance, Security Operations (SecOps), Offensive Security and Security Research. ...

## Vice President, Global Cyber Exposure Management & Cyber Engineering and ArchitectureApplyremote type: Hybrid (8 days/month)locations: GBR - Kingston: FRA - Paris, Rue des Archives: NLD - Alphen Aan Den Rijn: ESP - Madrid, Castellana: ESP - Barcelonatime type: Full timeposted on: Posted Todayjob requisition id: R0056768**Summary**We are seeking … strategic and highly technical Vice President to lead our global Cyber Exposure Management/Cyber Engineering & Architecture organization within a complex, multinational enterprise. This executive will drive modernization of the Company’s cyber defense capabilities, shape long-term security architecture strategy, and lead large-scale transformation initiatives ...

looking for a Senior Threat Hunter with strong expertise in Python and Jupyter Notebooks to join our Managed Security Services team in London.This role combines advanced threat hunting with engineering capabilities, focusing on building scalable, automated, and repeatable threat hunting frameworks across large datasets in enterprise environments.Key … ResponsibilitiesPerform proactive, hypothesis-driven threat hunting aligned to MITRE ATT&CKAnalyze and investigate security data across endpoint, network, and cloud environmentsIdentify indicators of compromise, suspicious activity, and emerging threatsDevelop and maintain Jupyter Notebook-based hunting frameworksBuild reusable Python modules, APIs, and automation toolsDesign and maintain data pipelines for telemetry ...

Specialist – Incident Management, Security Monitoring, Public Sector SC Cleared, Remote, 850Are you an experienced Cyber Security Operations Centre (CSOC) professional with a strategic mindset and a passion for safeguarding critical systems? We are seeking a highly skilled SOC Manager with SC clearance to lead and shape our cyber … prestigious public sector client. If you thrive in a dynamic environment, excel at managing teams, and possess a deep understanding of incident management and threat intelligence, this is your opportunity to make a tangible impact.As SOC Manager, you will define and lead the delivery of our Cyber ...

Security Consultant to help organisations secure the next generation of technology environments, including AI-enabled applications, LLM integrations and agentic systems.This is a cyber security consulting role with an AI focus. You will advise clients on core cyber security risks across cloud, identity, applications, data, operations and governance … risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption ...

Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure … management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. Owned or materially ...

Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure … management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. Owned or materially ...

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing … remediation teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen ...

Cyber Security Operations Specialist Rate - £500 - £550 Inside IR35 Duration - 6 months Location - Bristol - twice a week on site A major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection … security alerts, investigations, tickets and operational queues while helping improve the effectiveness of the security tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

enable the timely and effective response to, and management of, incidents, alarms, notifications, calls, and other activities related to the RSO and new cyber threats. Lead the vulnerability management process to ensure that vulnerabilities are detected, escalated, and remediated for both the customer and corporate environments. Lead the Threat Intelligence process, document and report out to key stakeholders. Work with Engineering, DevSecOps, Software and IT teams in relation to identifying and patching vulnerabilities. Develop processes, procedures and playbooks to improve the operational effectiveness and efficiency of the vulnerability management process. Analyse lessons learned and produce thorough documentation ...

expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build-vs-buy decisions … Leadership: Own the full incident response lifecycle — detection, triage, containment, eradication, recovery, post-incident review. Author and maintain IR playbooks, runbooks and escalation procedures. Threat Intelligence: Investigate security events, perform root cause analysis, and apply threat intelligence to improve defensive posture. Understand attacker TTPs and operationalise ...

internal teams and vendors to ensure reliable, high-quality telemetry Detection Engineering Design and implement detection use cases aligned to MITRE ATT&CK and threat intelligence Build and tune correlation rules, anomaly detections, dashboards, and alerting workflows Continuously refine detections to reduce false positives and improve effectiveness … LogRhythm, or Exabeam Strong understanding of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, Kafka, Event Hubs, agents) Experience in detection engineering, threat modelling, and attacker behaviour analysis Proven ability to build and tune correlation rules, dashboards, and alerts Familiarity with SOAR tools and automation workflows Security ...

triaging alerts, you'll engineer the systems that make Security Operations smarter, faster and more scalable.You'll work across Detection Engineering, Security Automation, Threat Hunting and Incident Response, building detection logic, automating repetitive workflows and partnering closely with Product Engineering to improve security telemetry across the CloudBees platform.Whether … cloud, endpoint, SaaS and application environments. Own the full detection lifecycle from hypothesis through deployment and continuous tuning. Create high-fidelity detections using operational threat intelligence, incident learnings and purple team findings. Measure and improve detection coverage using the MITRE ATT&CK framework. Continuously reduce false positives while ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

informed, risk‐based decisions during security incidents, prioritising alerts, coordinating containment actions, and recommending remediation strategies. They would be expected to deliver infrastructure hardening, threat detection, vulnerability management and supports Microsoft 365 security improvements. The successful candidate will be part of the wider infrastructure team and work closely with … development teams, clients, risk and compliance to drive security automation, threat detection, incident response, and risk reduction across the enterprise platform stack.Key ResponsibilitiesSecurity Leadership & Team Management: Lead a team of engineers, setting direction, managing workloads, and developing capability. Act as the primary security escalation point across the Infrastructure function. ...

acquired by bp in 2024. What you'll do (the role) Summary We are seeking a dynamic, hands-on Senior Cybersecurity Analyst to monitor cyber risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally. You will be responsible for threat detection, investigation … will proactively hunt for security issues, assess emerging threats, and partner with infrastructure and support teams to strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs ...