1 to 25 of 89 Threat Intelligence Jobs

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-level communication skills. Key responsibilities: Producing threat assessments, intelligence reports and executive briefings. Translating complex cyber threats into clear, actionable information for senior and non-technical stakeholders. Monitoring intelligence sources and assessing ...

published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We're looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering … Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing. You'll translate raw threat data into decisions: which adversary behaviors get new detections, which ...

oversees the company's security program, ensuring S&P Global is protected from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. While … based in the UK, you will support response and intelligence needs globally. Candidates should have a genuine interest in cyber security and a strong grasp of attacker tactics, techniques, and procedures (TTPs). This role requires a detail-oriented, critical thinker who understands how adversaries exploit systems, networks ...

design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis … threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud ...

take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. … carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence … Experience Incident Response Leadership skills. Relevant experience in managing and oversee/coordinate Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking ...

from identification and triage through remediation, validation, and closure. Analyze scanner results and contextual risk data, including CVE, CVSS, CISA KEV, EPSS, vendor advisories, threat intelligence, exploitability, exposure, and business impact. Investigate findings to determine applicability, affected technology, root cause, severity, ownership, and organizational risk. Identify false positives … based metrics and reporting on vulnerability trends, aging, recurrence, remediation performance, and systemic weaknesses. Partner with Asset Management, Infrastructure, Cloud, Application Security, Security Operations, Threat Intelligence, Governance, and business teams to improve coverage, ownership, and remediation outcomes. Maintain procedures, playbooks, and program documentation; identify opportunities to automate repeatable ...

Active SC Clearance Required Overview We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams. Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle … with security requirements. Key Responsibilities Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence. Establish and coordinate cross-functional working groups across engineering and security teams. Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Gloucester || UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Leeds || UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant – Penetration Tester Location: UK Wide (Occasional office ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-le click apply for full job details ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

between the managed Security Operations Centre (SOC) provider, internal security teams, and wider business stakeholders. The successful contractor will support security monitoring, incident management, threat analysis, and the ongoing improvement of security operations processes. This is an excellent opportunity for a hands-on security professional with strong stakeholder engagement … provider. Investigate, triage, and track security incidents through to resolution. Support the investigation, containment, remediation, and post-incident review of security events. Analyse threat intelligence and provide contextual insight into threats relevant to the organisation. Assess security risks associated with new applications, software deployments, and browser extensions. Maintain ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join … experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling. What ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...

rules to reduce false positives. Develop, test, and implement custom detection rules, correlation searches, baseline drift, and use cases within the toolset to improve threat detection capabilities specifically tailored to OT protocols and environments. Proactively search for IOCs and misconfigurations within the OT environment using threat intelligence …/SCADA systems. Create, maintain, and refine incident response playbooks, standard operating procedures (SOPs), and runbooks based on lessons learned from incidents, threat intelligence, and industry best practices. Ensure all actions, findings, and decisions made during incident handling are thoroughly documented in the SOC's ticketing system, preparing ...

Title : Security Analyst - Incident Response & SOC Operations Position Overview Support statewide security incident response through hands-on security monitoring, threat investigation, incident analysis, and Security Operations Center (SOC) improvement. This role offers the opportunity to investigate complex security events, strengthen detection and response workflows, collaborate with engineering teams … supporting security operations. What You'll Do/Key Responsibilities Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. Perform in-depth analysis of suspicious activity, validate incidents, determine root ...

Range: $58.70hr - $63.70hr Job Overview: The candidate will perform security incident response, threat detection, and continuous monitoring across enterprise security tools. On-site work may be required as needed. DAILY DUTIES/RESPONSIBILITIES: Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required. Create detailed incident reports, timelines, and post-incident summaries; contribute ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...

manage vulnerabilities and help maintain a secure global technology environment. Key Responsibilities Develop and maintain a range of cyber security solutions and controls. Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required. Maintain vulnerability and remediation records to support audit compliance … Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking ...

cyber security risks you will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO … . Strong stakeholder management and people management experience. Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader ...