1 to 25 of 143 Threat Intelligence Jobs

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-level communication skills. Key responsibilities: Producing threat assessments, intelligence reports and executive briefings. Translating complex cyber threats into clear, actionable information for senior and non-technical stakeholders. Monitoring intelligence sources and assessing ...

internal use):11The Team:The SGA Cyber Defense team is at the forefront of protecting S&P Global's critical assets through advanced threat intelligence and proactive security measures. We operate as a collaborative, high-performing unit that values technical excellence, continuous learning, and innovative approaches to emerging … cyber threats. Our team culture emphasizes knowledge sharing, mentorship, and the pursuit of industry-leading security practices.Responsibilities and Impact:Lead proactive threat research initiatives to identify emerging threats, attack patterns, and adversary tactics targeting the financial services sector and related industriesDevelop and execute comprehensive collection strategies aligned to Priority ...

published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We're looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering … Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing. You'll translate raw threat data into decisions: which adversary behaviors get new detections, which ...

published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We're looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering … Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing. You'll translate raw threat data into decisions: which adversary behaviors get new detections, which ...

class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.Our Wizards from all over … environments that allow even the best companies to move faster, all while having some fun!Minimum qualifications:5+ years of experience in security or threat research, with a focus on either advanced state-backed actors or sophisticated financially motivated campaigns, and a proven track record of tracking sophisticated threat ...

design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis … threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud ...

Tech Summary The Threat Hunting Lead will serve as the technical lead for Kaiser Permanente's Threat Hunting function within the Threat Intelligence and Detection Engineering (TIDE) team. This role is responsible for proactively identifying advanced threats by leveraging threat intelligence and analyzing endpoint … network, cloud, identity, email, asset, and other security telemetry. The successful candidate will develop and execute threat hunts, translate intelligence into actionable detection and hunting strategies, identify gaps in defensive coverage, and drive improvements to the organization's security posture. Working closely with Threat Intelligence, Detection ...

take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. … carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping ...

trusted growth partner for the world's leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help … maturity objectives. Develop a globally consistent incident response operating model across WPP.Establish and maintain incident response frameworks, methodologies, and standards. Drive adoption of intelligence-led and threat-informed response capabilities. Ensure incident management processes support regulatory, legal, client, and contractual obligations. Partner with Security Architecture, Security Technology & Visibility ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

Active SC Clearance Required Overview We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams. Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle … with security requirements. Key Responsibilities Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence. Establish and coordinate cross-functional working groups across engineering and security teams. Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security ...

system logs, and other data sources and for the determination of root cause and resolution of security events. The role includes incident response, driving threat intelligence capabilities and ensuring alignment with business and regulatory expectations. As well as evaluation of security systems and processes and working closely with … designing and delivering AI, machine learning or generative AI use cases that improve security operations across platforms such as SIEM, EDR/XDR, SOAR, threat intelligence and vulnerability management, from prioritisation and proof of concept through to production integration.Ability to evaluate and tune AI-enabled security workflows ...

high-pressure operational situations. Security Monitoring & DetectionSupport and improve security monitoring and detection capabilities. Develop and enhance detection rules and operational security controls. Utilise threat intelligence and threat hunting techniques to improve detection and response capabilities. Contribute to ongoing improvements in security operations effectiveness. Vulnerability & Security Operations … securityEmail securityIdentity and Access Management (IAM)Vulnerability managementNetwork securitySASE technologiesExperience improving operational cyber security capabilities. Experience developing detection rules and response playbooks. Experience using threat intelligence and threat hunting techniques. Experience managing outsourced security providers. Strong stakeholder management and communication skills. Ability to communicate technical concepts ...

member of our team. This engineer will assist in the minimization of potential attack surfaces through vulnerability management, cloud configuration assessments, incorporating threat intelligence from public and private sources, and work internally to build, enhance, and automate policies, standards, and processes. They will be working with various technologies … associated countermeasures. Participate in internal meetings to map industry cyber threats to our current attack surface. Review of both internal and open-source threat intelligence sources for recently disclosed vulnerabilities at risk of introduction into the Wellington environment. Work with our Third-Party Risk team to engage third ...

global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

infrastructure hardening. Evaluate and advise on the secure deployment of modern workloads, specifically focusing on cloud-native ecosystems and the secure integration of Artificial Intelligence (AI) platforms and pipelines. Apply advanced security concepts to perform threat modeling on complex systems, identifying design flaws and providing actionable, structural recommendations … concepts, and identity management frameworks. Preferred qualifications: Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent).Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters. Proven experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex ...

fintech is growing its Information Security team and is looking for a Senior Security Operations Analyst. Senior Security Operations Analyst (SOC/SIEM/Threat Hunting) £55,000 - £65,000 + Bonus + excellent benefits Manchester or Leeds (Hybrid) About the role You'll protect key business assets … monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define and fine-tune ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

cloud, and application environments Prioritize vulnerabilities based on risk, exploitability, and business context, partnering with asset owners to track remediation through closure Apply cyber threat intelligence—including active exploitation, threat actor targeting, and emerging tactics, techniques, and procedures—to strengthen prioritization and risk scoring Develop mitigation strategies … Bring Experience operating vulnerability discovery and assessment tools; five or more years of hands-on vulnerability management experience with meaningful exposure to cyber threat intelligence is preferred Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security best … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...