26 to 50 of 147 Cyber Threat Jobs in the UK excluding London

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with deep knowledge of cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Core Duties Knowledge and experience of design … cloud and/or OnPrem. Deep knowledge and experience of Enterprise ICT. Strong understanding of security architecture, in particular networking. Detailed understanding of threat intelligence and threat actors, TTPs and operationalising threat intelligence. Understand TCP/IP component layers to identify normal and abnormal traffic Self-motivated ...

Technology, we deliver secure technology solutions that support some of the UK's most important Defence organisations. We have an opportunity for a Cyber Security Incident Co-Ordinator to join our Security Advice and Incident Office (SAIO) based in Corsham , you'll play a vital role in protecting … incident data to identify potential threats and determine appropriate actions. Working closely with internal resolver groups and specialist cyber security teams, including Threat Hunting, Security Engineering, Digital Forensics and the Cyber Threat Advisory Centre (CTAC). Providing operational security advice and guidance to customers ...

Director, Digital Forensics & Incident Response (Global) Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Matt Hull (Open to Associate Director with progression path to Director) Description The purpose of this role is to lead NCC Group’s global Digital Forensics … scale cyber security consulting environments. Experience supporting commercial growth, sales enablement, and service expansion opportunities. Strong knowledge of current cyber threat trends, regulatory requirements, and industry best practices. Active participation in industry forums, conferences, or recognised cybersecurity communities. Job Benefits We have a high‐performance ...

opportunity has arisen within our Team for a Digital Forensics & Incident Response (DFIR) Manager. DFIR (Digital Forensics and Incident Response) is a specialist cyber security capability which is responsible for delivering rapid, high‐impact incident response and investigation during significant cyber events, such as Malware … Work With You’ll lead a close-knit team of DFIR analysts within a 24x7 on‐call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity and committed. Hybrid working ...

threats. Lead the vulnerability management process to ensure that vulnerabilities are detected, escalated, and remediated for both the customer and corporate environments. Lead the Threat Intelligence process, document and report out to key stakeholders. Work with Engineering, DevSecOps, Software and IT teams in relation to identifying and patching vulnerabilities. … shifting priorities. Proven ability to work independently on resolving complex issues, assisted by the Information Security Manager, IT and DevSecOps. Excellent experience with the Threat Landscape, Threat Hunting, Adversary Methodologies, Cyber Defence and MITRE attack framework. Significant previous experience working in a lead role ...

Overview Act as the Cyber SME for controls, providing expert oversight and challenge across Cyber & Information Security and CISO on control effectiveness. Lead and support core cyber risk and control processes (e.g. RCSA, Interim RCSA, Issue Management, Key Indicators, Standards adherence), ensuring outputs … risk-based, consistent and aligned to regulatory expectations. Analyse and challenge cyber risk issues and control weaknesses, working with control owners to define and track sustainable remediation actions. Maintain end-to-end visibility of the cyber control environment, identifying emerging themes, systemic risks and areas requiring ...

Cyber Security Engineer, (Cloud Security Specialist) We are seeking a skilled and experienced, client facing, Cyber Security Engineer with a strong focus on cloud securit y to join our security team. The successful candidate will play a critical role in securing multi-cloud environments, embedding … security is one of the areas which KPMG has identified for tremendous investment and growth. Our clients face a challenging cyber threat and look to us to help them understand and respond to that threat. This is an opportunity to join a high performing team that ...

whatever comes next. At Sapphire, we've been helping organisations navigate cyber risk for nearly 30 years. As the cyber threat landscape evolves, so do we. That's why we're looking for a talented Governance, Risk & Compliance (GRC) Consultant to join our growing Security … Consulting team. Whether you're already working in cyber consultancy or looking to take the next step in your GRC career, this is an opportunity to work with a diverse range of clients, tackle meaningful challenges, and help shape the future of cyber resilience. What ...

workflows, and knowledge-base content to improve consistency and operational readiness. Provide technical leadership in intrusion analysis, incident response, digital forensics, malware investigations, and threat hunting activities. Lead response efforts during significant security incidents, ensuring effective coordination, decision-making, and ownership through resolution. Stay current on threat actor … tactics, techniques, and procedures (TTPs), leveraging threat intelligence to enhance investigations, detections, and response capabilities. Partner with Engineering, Labs, and Content teams to improve detection quality, reduce false positives, and address recurring investigation gaps. What you will bring Up to 12 years of total work experience. 5+ years ...

Adequate Implementation of security controls - XDR Escalation pint for security tickets raised in ITSM and Incident Management Portals Implementation/Operation of InfoSec processes, Threat Hunting, detection, monitoring and incident response Delivery of cyber security projects, implementation of new cyber security tooling and threat … threats, hunting and exposure Involved in InfoSec incident management process - preparation, containment, analysis and response Implementation of new cyber security tooling and threat-informed systems Cyber Security Specialist: Experience Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. Act as an in-house SME, providing credible, up-to-date guidance on cyber … training content aligns with MOD and industry standards. Training Design & Development Develop tailored cyber training content based on specialist tools, environments and threat profiles. Produce accessible and engaging learning materials including presentations, workbooks, labs, and simulations. Create realistic scenario-based exercises that mirror real operational incidents. Support ...

Cyber Security Threat Hunter, you will protect Utmosts networks and systems from cyber threats and unauthorised access. You will monitor and investigate security events, assess their impact, and either resolve issues or escalate them based on severity. This role blends proactive threat hunting with ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. What you’ll be doing Data Ingestion and Enrichment Collaborate with Security analysts and application teams … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM ...

leading insurer with a focus on risk transformations, including cyber, marine, kidnap & ransom, high-net-worth and real‐world cyber threat intelligence. Responsibilities Build security capabilities that protect the business day‐to‐day and support a £200m transformation programme. Work with technology teams, underwriters, operations … report status to key stakeholders and provide clear recommendations for action. Design, build and implement security solutions that protect the business against sophisticated cyber threats. Translate business needs into pragmatic, effective security requirements and solutions. Qualifications Security architecture across cloud environments – Azure, GCP (primarily), and AWS. Regulatory frameworks ...

Cyber Security Threat Hunter, you will protect Utmosts networks and systems from cyber threats and unauthorised access. You will monitor and investigate security events, assess their impact, and either resolve issues or escalate them based on severity. This role blends proactive threat hunting with ...

Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre Strong experience with Microsoft … client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation's defensive posture … support proactive threat hunting. Assess the effectiveness of existing vulnerability management tooling and processes, recommending and implementing improvements that enhance automation, reporting, coverage and overall programme maturity. Operate as the technical lead for the function, confidently engaging with stakeholders across the business, influencing remediation activities, and driving continuous improvement ...

External Attack Surface Cyber Engineer - Remote (UK) | £45,000-£60,000 + Excellent Development Opportunities I'm recruiting for a genuinely different opportunity for an attack-minded cyber security professional who enjoys thinking like an attacker just as much as being one. This is a remote … with Web application and external infrastructure penetration testing Asset discovery and large-scale enumeration DNS, networking, and internet infrastructure OSINT and cyber threat intelligence (CTI) Python (or similar scripting) for automation and data handling We'd love to speak if... Give you a company name, domain ...

large‐scale security capabilities that protect the UK's largest digital bank. You'll provide strategic direction for cyber defence, detection engineering, threat hunting and incident response, while driving continuous improvement across security operations platforms, tooling and processes. Leading a high‐performing team, you'll strengthen operational … resilience, coordinate effective response to cyber threats and incidents, champion a threat‐led approach to defence, and help shape a world‐class security operation that enables the Group to go faster, safely. Why Join us? If you think all banks are the same, you're wrong. ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working within ...

managed through governance controls to protect internal equity. Your Impact Leonardo UK is seeking a Senior Offensive Security Consultant to join the Cyber & Security Solutions Division team. This role is focused on leading, directing and continuously improving the Leonardo UK Red Team, ensuring the effective management, and delivery … Supporting a global aerospace and defence organisation, you will help protect critical systems, sensitive information and operational services against an evolving cyber threat landscape. This role operates within a blended hybrid working model, combining home working with on-site collaboration at Leonardo UK and customer locations ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends, and insights … experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

operating resilient, large‐scale security capabilities that protect the UK’s largest digital bank. Provide strategic direction for cyber defence, detection engineering, threat hunting and incident response. Drive continuous improvement across security operations platforms, tooling and processes. Lead a high‐performing team, strengthening operational resilience and coordinating … effective response to cyber threats and incidents. Champion a threat‐led approach to defence and help shape a world‐class security operation that enables the Group to go faster, safely. Qualifications Deep technical understanding of cyber defence, security operations, detection engineering and incident response. Proven ...

challenges every day, based in our Manchester Head Office. This is an entry-level role offering a structured route into a rewarding cyber security career. With a modern, cloud-first security stack already in place, it is an exciting time to join the business and learn your craft … working understanding of cyber-attack techniques, tools, and mitigation controls. Awareness of up-to-date security threats and common exploits. Understanding of threat vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft ...