1 to 25 of 69 Threat Intelligence Jobs

Outside IR35 Contract Length: 6 months initially Location: Hybrid/Liverpool UK I'm supporting a large enterprise organisation seeking an experienced Cyber Threat Intelligence Lead to support and enhance its Threat Intelligence capability within a complex enterprise environment. Key Responsibilities Deliver actionable cyber threat intelligence to support security operations and risk reduction. Leverage Threat Intelligence platforms to identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. ...

carbon energy. We work at the cutting edge of the transition to a sustainable, net zero world. We're looking for a Head of Threat Defence. Based at our Paddington Head Office the role is to build on the existing capabilities to develop a best practice threat defence … capability for URENCO. The role offers an opportunity for end-to-end ownership of a threat defence strategy and service. The role will focus on leading a team responsible for security operations, incident detection and response and threat intelligence which will be delivered through partnership with outsourced ...

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance … have a proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency ...

Cyber Threat Intelligence Analyst - Central Government - 12 month contract - DV clearance - London Hybrid We are looking for 2x Cyber Threat Intelligence Analysts to join a busy team for our central government client. Due to the nature and urgency of the role, ideal candidates will hold active … clearance. I am keen to speak with candidates who have: Experience in an intelligence role with practical use of the intelligence lifecycle, ideally for government/public sector clients. Hands-on experience researching, analysing and reporting on cyber threats or closely related security issues. Familiarity with cyber threat ...

tier global MSSPs (excluding GSI/Big 4 relationships). These are security‐specialist firms operating at scale — running 24×7 SOCs, delivering managed threat intelligence, and integrating platform‐grade tooling into their service stack. This is not a transactional sales role. It is a strategic ecosystem play … managed services. Define a structured, tiered MSSP engagement playbook covering acquisition, activation, ramp, and expansion — with clear milestones for each stage. Maintain deep competitive intelligence on MSSP buying behaviour, vendor preferences, and integration strategies across US, Europe, and beyond. Identify white space across the MSSP landscape where Cyble ...

Opportunity We are working with an award-winning, specialist cyber security provider, to identify a highly motivated Senior Security and Threat Intelligence Sales Consultant to join their growing sales team. This is a fantastic opportunity to join a business that takes a genuinely unique approach to security, threat intelligence and risk management — working with world-leading advisors, established industry vendors and cutting-edge emerging technologies to deliver tailored solutions that address specific client requirements. Their clients always come first, and their investment in new and innovative solutions is matched only by their dedication to client management ...

Cyber Threat Intelligence Analyst (x2) Location : London, East Kilbride or Milton Keynes Type: Hybrid (2 days on-site, flexible) Rate : £680 - £780 IR35 : Inside Length : 12 months Clearance: UKSV DV Essential Familiarity with cyber threat frameworks - for example, MITRE ATT&CK, Diamond Model, and the Intelligence Cycle Experience using open-source and commercial research methods, threat intelligence platforms or security tooling. Experience of working in an intelligence role, with practical application of the intelligence lifecycle. Demonstrable analytical capability, including the ability to identify patterns and produce balanced, evidenced judgements. Experience researching ...

operations activities are executed efficiently, consistently and in line with defined SLAs and operational standards, through hands-on technical leadership across SOC, Incident Response, Threat Intelligence, Insider Risk and Vulnerability Management. This role acts as a senior technical escalation point, supporting complex investigations and driving improvements in detection … capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox, Google Threat Intelligence), Vulnerability management solutions (e.g. Tenable, Rapid7), and Insider Risk and DLP tools ...

strengthen security operations, improve cyber resilience and influence security awareness across a large and complex organisation. If you enjoy combining technical security expertise with threat intelligence, incident response and user engagement, this contract offers the opportunity to make a visible impact from day one. What's on Offer … enterprise-scale Microsoft security technologies. Opportunity to work alongside experienced cyber security professionals within a mature security function. Broad, varied role covering Security Operations, Threat Intelligence, Security Awareness and Incident Response. A high-profile enterprise environment that will strengthen your CV. Immediate start with the potential for contract ...

critical cyber incidents, guiding them from initial detection through containment, recovery and post-incident assurance. With deep expertise across incident response, digital forensics and threat intelligence, the team is trusted to operate in high-pressure environments where precision, clarity and sound judgement are essential.Joining the business means becoming … incident documentation, including timelines, technical findings and executive-level reports.- Contribute to the continuous improvement of incident response playbooks, tooling and investigative techniques.- Incorporate threat intelligence to enhance investigations and strengthen future detection and response strategies.- Support proactive consultancy activities such as incident response exercises, client briefings ...

Cyber Threat Intelligence Analyst - Central Government - 12 month contract - DV clearance - London Hybrid We are looking for 2x Cyber Threat Intelligence Analysts to join a busy team for our central government client. Due to the nature and urgency of the role, ideal candidates will hold active ...

Cyber Threat Intelligence Analyst (x2) Location : London, East Kilbride or Milton Keynes Type: Hybrid (2 days on-site, flexible) Rate : £680 - £780 IR35 : Inside Length : 12 months Clearance: UKSV DV Essential Familiarity with cyber threat frameworks - for example, MITRE ATT&CK, Diamond Model, and the Intelligence Cycle Experience using open-source and commercial research methods, threat intelligence platfor click apply for full job details ...

including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a new enterprise-scale SOC from … Experience supporting high-volume data ingestion environments Strong experience with log collection and onboarding data sources into a SIEM Ability to define and develop threat-led detection use cases, playbooks and automation content Experience integrating SIEM platforms with identity management, vulnerability management, asset management, threat intelligence ...

Head of Cyber Resilience and Cloud to join its cyber leadership team. Reporting directly to the CISO, this role will lead cyber operations, threat reduction and resilience capabilities across both cloud and on premises environments. You will act as a trusted advisor to senior leaders, driving strategic initiatives that … cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational ...

shape modern detection and response capabilities through automation and AI-driven approaches. You will work closely with cross-functional teams across engineering, infrastructure, and threat intelligence to continuously strengthen security posture and operational resilience. The position offers a fast-paced and collaborative environment where technical expertise, strategic thinking … mechanisms in collaboration with engineering teams. Develop and enhance automation initiatives and AI-assisted workflows to accelerate investigations and improve response consistency. Partner with threat intelligence teams to contextualize emerging threats and strengthen detection coverage. Conduct root cause analyses and lead post-incident reviews to identify improvements ...

response activities, ensuring effective containment, eradication, recovery, and lessons learned. Develop, maintain, and test cyber incident response plans, procedures, and playbooks. Oversee security monitoring, threat detection, threat intelligence, and vulnerability management activities. Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management … gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents across complex technology environments. Knowledge of threat intelligence, vulnerability management, and cyber risk management practices. Excellent stakeholder management and communication skills, with the ability to translate technical issues into business ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. • Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. • Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. • Interprets and synthesizes ...

monitoring, analysing and responding to security threats, while driving continuous improvement across our security operations capability. Youll play a key role in incident response, threat intelligence, vulnerability management and ensuring effective use of our security tools and processes to reduce risk across the technology estate. Key responsibilities Monitor … activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics, KPIs and operational performance Technical expertise Good understanding ...

industry. Description Support security operations, incident investigations and response activities. Collaborate with the Security Operations Centre (SOC) to analyse threats and security alerts. Conduct threat intelligence research and identify emerging cyber risks, adversary tactics and indicators of compromise. Utilise Microsoft Defender XDR and associated Microsoft Defender products … knowledge of user engagement initiatives, targeted training and compliance reporting. Solid understanding of recognised security frameworks and standards, particularly Cyber Essentials. Knowledge of cyber threat intelligence concepts, including IOCs, TTPs and threat analysis. Experience working with SOC teams, managed security service providers or security operations functions. Hands ...

need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small engineering teams Strong … Strong knowledge of security controls, least privilege, encryption and system hardening Experience with endpoint security, EDR, Active Directory or LDAP Understanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligence Ability to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes ...

solutions are designed and deployed with security by design from the outset. Stay current with AI security risks and emerging attack vectors, translating threat intelligence into practical controls. Security Engineering & Standards Embed security into CI/CD pipelines and DevOps workflows, championing shift-left practices across engineering teams. … guidelines for use across platform and product delivery. Participate in architecture and design reviews, providing security input as part of the delivery lifecycle. Threat Intelligence & External Partnerships Act as the internal interface for Arctic Wolf, the organisation's outsourced MDR provider, triaging escalations and feeding intelligence back ...

full participation in the regional "Defend as One" model. The role combines governance, assurance and hands-on leadership of proactive and preventative tactics, threat intelligence, incident response, vulnerability management, strategy and cultural change to build cyber resilience across the Integrated Care System (ICS). Main duties … managing and improving cyber resilience within large, complex or multi-organisation environments. They will possess deep technical and governance expertise across areas such as threat detection, vulnerability management and incident response, with the ability to translate complex technical risk into clear, articulate, actionable information for senior executives and boards ...

holistic view of the organisation's security posture. Present findings and recommendations to senior leadership and governance forums. Collaborate with internal teams (e.g., threat intelligence, compliance, audit) to ensure assurance activities reflect current threat landscapes. Act as a primary interface for business units, ensuring alignment between assurance … technical and business information to assess risk. Experience in supply chain security assurance. Knowledge of secure by design principles and accreditation processes. Understanding of threat intelligence and its application in assurance. Experience working in regulated or high-assurance environments (e.g., government, finance, defence). Familiarity with risk management ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...