126 to 150 of 295 Cyber Threat Intelligence Jobs in the UK

lead an incident bridge. You will run a global function, and own Security Operations end to end: the SOC, incident response, detection engineering and threat intelligence, along with the people and platforms behind them. You will need to have personally led the response to serious cyber incidents. … detection programmes covering rule development, coverage mapping, tuning and automation, and you can review a detection and tell whether it is good. Threat intelligence experience. Experience with threat hunting and purple teaming. ...

Overview CLS helps clients navigate the changing FX marketplace – reducing risk and creating efficiencies. Our extensive network and deep market intelligence enable CLS specialists to lead the development of standardized solutions to real market problems. Our innovative, forward-looking products make the trading process faster, easier, safer and more … equipped with appropriate industry best of breed tools and solutions Operational Operate and maintain CLS Security controls related to SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, Endpoint Protection, Network Protection, etc. Review and help refine CLS Security procedures to ensure compliance with cyber resilience requirements ...

seeking someone to join the global Threat Hunt and Cyber Detection (THCD) team as a Detection Engineer. The THCD mission is to seek out attacks against the Morgan Stanley network, to engineer detection strategies, and to reduce risk to Morgan Stanley assets. As a new Threat Hunt … will be tasked with developing and maintaining detections, triage cases and alerts and enhance our bespoke tools used to defend Morgan Stanley Network. The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk ...

influential matrixed leadership role, you will bridge the gap between engineering velocity and rigorous financial-grade security. Success requires seamless cross-functional orchestration across Cyber, CTO (Chief Technology Officer), CIO (Chief Information Officers in Global Businesses), and the CRO (Chief Risk Officer) organizations to embed security into … learn, and think enterprise grade and demonstrates ambition in problem solving. Matrixed Collaboration & Stakeholder Management Cross-Functional Orchestration: Act as the central nexus between Cyber (threat intelligence and architecture), CTO/CIO (engineering, platform, and infrastructure delivery), and CRO (regulatory compliance and operational risk). Influence Without ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data ...

compliance, vulnerability reporting readiness, and regulatory response activities. Key Responsibilities Vulnerability Assessment & Triage: Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact. PSIRT Case Management: Manage the end-to-end lifecycle of vulnerability … customers. Cross-Functional Communication: Manage internal and customer-facing messaging to ensure accurate, consistent, and timely communication regarding critical vulnerabilities and product security issues. Cyber Resilience Act (CRA) Compliance: Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness ...

excellent opportunity for someone early in their SOC career, or for an individual with a strong infrastructure and networking background looking to transition into cyber security operations. You will be working across a diverse set of customer environments as part of our Security Operations Centre, focusing on investigation, understanding …/XSIAM to understand what has happened, how activity progressed and what actions need to be taken. You will be supported through structured training, cyber ranges, hands‐on exposure to modern SOC technologies and real investigation experience to help you grow quickly. You will join a modern, continuously evolving ...

governments, and non-profit organisations to help them understand and navigate digital threats. Our highly skilled team work at the cutting edge of digital threat and online harm, helping clients detect and respond. We use innovative technology and have a deep understanding of everything related to social media … those they target. PGI's Digital Investigations team is looking for a CTI Analyst to contribute to our work researching and attributing advanced persistent threat (APT) activity. What you'll be doing: Identifying, tracking, and attributing APT campaigns. Investigating state and non-state threat actors, from surfacing initial ...

Cyber Security Consultant | £55,000 - £70,000 + bonus | Hybrid | MSP This is a customer-facing consultancy role where you'll work with a wide range of organisations to design, develop and optimise detection and response capabilities across leading SIEM, XDR and SOAR technologies. You'll combine deep technical … Creating and optimising detection logic using KQL and other query languages. Developing detection use cases aligned with the MITRE ATT&CK framework and current threat techniques. Assessing customer telemetry and identifying opportunities to improve visibility and detection coverage. Building SOAR automations, integrations and response workflows to reduce manual effort. ...

overview: We have a new opportunity for an Incident Response Analyst to join our Security and Resilience function in AXA UK. Youll respond to Cyber Security incidents performing forensic investigations and providing cyber threat intelligence services. Key responsibilities: Acting as an escalation point … Performing in-depth analysis of security events utilising a range of security tools Supporting the wider team in process improvement, detection content tuning, and threat analysis Working with a range of Security and Risk colleagues to ensure all identified risks are identified and managed appropriately Work arrangements ...

criteria, completion of planned work, and rollback plans. Review and approve design, deployment, configuration, and administration documentation. Act as a generalist technical SME across cyber monitoring technologies and security tools. Key skills & experience 5-8 years of relevant experience in technical engineering, SOC deployment, or security infrastructure. Proven experience … designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest rates. Proven experience leading or conducting SIEM ...

Group is seeking an Incident Response Analyst to join our Security and Resilience function in the UK. You will respond to cyber security incidents, perform forensic investigations, and provide cyber threat intelligence services to improve detection and response capabilities. You will be the escalation point ...

full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure on-premise and cloud architectures … complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise security architecture . ...

Lead Cyber Security Risk Manager Location: Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green) or Uxbridge. Salary : £44,241 per annum Vacancy Type: Permanent, Flexible working, Full-time, Job share, Part-time Closing Date: Sunday 11th October 2026 The Lead Cyber Security Risk Manager will lead … collaborating with various departments to protect sensitive data and systems. The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders. The position is critical to safeguarding the agency’s mission ...

Lead Cyber Security Risk Manager Location: Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green) or Uxbridge. Salary : £44,241 per annum Vacancy Type: Permanent, Flexible working, Full-time, Job share, Part-time Closing Date: Sunday 11th October 2026 The Lead Cyber Security Risk Manager will lead … collaborating with various departments to protect sensitive data and systems. The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders. The position is critical to safeguarding the agency’s mission ...

Lead Cyber Security Risk Manager Location: Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green) or Uxbridge. Salary : £44,241 per annum Vacancy Type: Permanent, Flexible working, Full-time, Job share, Part-time Closing Date: Sunday 11th October 2026 The Lead Cyber Security Risk Manager will lead … collaborating with various departments to protect sensitive data and systems. The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders. The position is critical to safeguarding the agency’s mission ...

incident response and major incident management. The organisation is looking for individuals who have already operated through large-scale, high-impact and business-critical cyber incidents and who are capable of taking complete ownership when the pressure is on. This is not a role for someone who simply participates … incident response processes, playbooks and operational procedures. Identify opportunities to improve detection, containment, investigation and recovery capabilities. Work closely with Security Operations, Detection Engineering, Threat Intelligence, Cloud Security and wider cybersecurity teams. Help develop incident response tooling, automation and engineering capabilities. Contribute to the maturity of the organisation ...

Architect Location: Guildford Hybrid Salary: £80,000 £100,000 We are seeking an experienced Lead SOC Architect to join a leading organisation delivering complex cyber and security solutions across highly secure environments. Youll lead the architecture and delivery of Security Operations Centre (SOC) solutions , working directly with senior clients … process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate new technologies ...

client, a leader in the cyber security sector, is currently seeking a Senior Security Engineering Consultant to join their team. This permanent role is a hands-on technical position within the Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. … identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations Deliver detection as code pipelines, including structured use case development and versioning approaches Produce clear ...

value, field technical questions, and demonstrate capabilities through customer-focused use-cases and POCs. You will partner with sales, lead technical demos, and deliver threat briefings to ISACs while collaborating with threat intelligence research and cross-functional teams. Travel to engage with customers as needed. #J ...

J.P. Morgan is seeking a Blockchain Intelligence Vice President within Cybersecurity & Tech Controls to safeguard digital assets and blockchain infrastructure. You will identify, track, detect, assess, and respond to threats, vulnerabilities, and security incidents across on-chain and off-chain data, collaborating with cross-functional teams to ensure data … integrity and secure systems. The role requires a strong background in threat intelligence, incident response, and security architecture, #J-18808-Ljbffr ...

CyberCube is hiring to advance its cyber risk analytics platform for the (re)insurance industry. You will work with a cross-functional team of analysts, data scientists, actuaries, and risk modelers to develop insights, scores, and features that quantify technology risk. You will own the technology risk viewpoint, validate ...

Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across … remote-access requirements Lead OT/IoT vulnerability identification, assessment, prioritisation and remediation Support incident preparation, investigation, containment, recovery and lessons-learned activities Translate threat intelligence into actionable detection, prevention and mitigation requirements Partner with IT, engineering, site leads, asset owners, suppliers and business stakeholders Assess new projects ...

Protection Group International in the United Kingdom is seeking a CTI Analyst to identify, track and attribute advanced persistent threat campaigns, focusing on adversaries and their TTPs. You’ll join a Digital Investigations team working with government, social platforms, and non-profits to understand digital threats. ...