1 to 25 of 106 Threat Intelligence Jobs

Role The Senior Detection Engineer is responsible for designing, developing and continuously improving threat-led detection capabilities that identify sophisticated attacker behaviors across the enterprise. The role translates cyber threat intelligence, threat modelling outputs, red team findings, threat hunting insights and incident learnings into high … detection logic capable of identifying malicious activity while minimising false positives. The individual owns the end-to-end life cycle of detection content, from threat analysis and hypothesis development through to detection design, validation, tuning, optimisation and retirement. This is a specialist detection engineering role focused on attacker behavior ...

onsite Contract Duration: 6 months Positions Available: 3 The Role We are looking for experienced SOC Detection Engineers to design, develop and continuously improve threat-led detection capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings … continuous improvement. The role is not primarily focused on day-to-day SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple ...

onsite Contract Duration: 6 months Positions Available: 3 The Role We are looking for experienced SOC Detection Engineers to design, develop and continuously improve threat-led detection capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings … continuous improvement. The role is not primarily focused on day-to-day SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple ...

Join Police Digital Service an NMC Cyber Threat Intelligence Specialist. Permanent FT. Hybrid/Wigan. Starting salary £45,000 per annum. About Police Digital Service This is an opportunity to play your part and protect our company, our customers and our communities from cyber attack. Be part … National Management Centre provide visibility and control of information risks for Policing. It supports the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate ...

Join Police Digital Service an NMC Cyber Threat Intelligence Specialist. Permanent FT. Hybrid/Wigan. Starting salary £45,000 per annum. About Police Digital Service This is an opportunity to play your part and protect our company, our customers and our communities from cyber attack. Be part … National Management Centre provide visibility and control of information risks for Policing. It supports the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-level communication skills. Key responsibilities: Producing threat assessments, intelligence reports and executive briefings. Translating complex cyber threats into clear, actionable information for senior and non-technical stakeholders. Monitoring intelligence sources and assessing ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines … business, leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders ...

design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis … threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud ...

Month Initial Contract - Hybrid in Multiple UK Locations - Inside IR35 Role Overview A Senior SOC Detection Engineer responsible for designing, developing, and continuously improving threat-led detection capabilities across a large enterprise. The role translates cyber threat intelligence, red team findings, and incident learnings into high-fidelity … detection logic, owning the full detection content life cycle from threat analysis through to tuning, optimisation, and retirement. This is a specialist detection engineering role and is not focused on day-to-day SIEM administration or platform operations. Key Responsibilities Design, develop, and maintain threat-led detection content ...

take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. … carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping ...

sources to establish attack timelines, identify affected systems and support the assessment of cyber security incidents. Analyse indicators of compromise, attacker techniques and available threat intelligence to determine the nature and severity of security events. Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst … Cyber security operations, Forensics, Incident management, incident investigation and response, Information risk assessment and risk management, Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment Experience working within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security ...

Overview As Security Operations Engineer II, you help secure Mollie's fast-growing platform by leading operational security, incident response, and threat analytics. You'll join a seasoned SecOps team to detect, investigate, and respond to security events, while building playbooks and automation to reduce risk. Your work directly … Collaborate with Security Engineering to improve detection capabilities Proactively hunt for threats beyond current use cases Define monitoring scenarios and prototype rules based on threat intel Participate in incident response rotation and on-call procedures Deliver strategic reports and updates to reduce threat impact Create security reports, dashboards ...

investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact and root cause. Working alongside threat intelligence, detection engineering and force stakeholders, you will provide technical advice to support incident response, recovery and organisational decision-making. Key Responsibilities Incident … privilege escalation and unauthorised access. Support response activities across cloud infrastructure, workloads and SaaS platforms, providing technical expertise during active incidents. Work closely with threat intelligence, detection engineering and force stakeholders to improve investigative outcomes and situational awareness. Translate lessons learned into improvements to cloud security controls, detections ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Gloucester || UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Leeds || UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant – Penetration Tester Location: UK Wide (Occasional office ...

Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment. This is an opportunity to work on threat-led detection engineering, focusing on identifying sophisticated attacker … behaviours and improving the effectiveness of security operations. You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support. Key Skills ...

Overview In this role you will help establish and grow SoftwareOne's Dutch-speaking Security Operations Center in Amsterdam. You will lead advanced threat investigations, threat hunting, and incident response for Dutch customers as part of the Microsoft MDR for Sentinel service. You'll mentor junior analysts … dynamic, collaborative office culture access to leading cybersecurity technologies Verantwoordelijkheden Lead complex security investigations and incident response engagements for enterprise customers Perform advanced threat hunting using Microsoft Sentinel, Defender XDR, and MITRE ATT&CK Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities Support threat intelligence ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-le click apply for full job details ...

cyber threats across a complex enterprise environment. This role is ideal for a hands-on cyber security professional with strong experience in incident response, threat hunting, security operations and digital forensics. You will play a key role in protecting critical systems and data by managing security incidents through their … artefacts from endpoints, servers, cloud platforms, networks and email systems. Identify indicators of compromise (IOCs), attacker tactics and techniques, and document findings. Conduct proactive threat hunting activities using threat intelligence and security telemetry. Develop and improve detection content, monitoring rules and incident response playbooks. Produce clear technical ...

encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate need for an Acquisition Intelligence Program Manager at the journeyman level who will be primarily responsible for supporting the Cyber Resiliency Office for Weapon Systems (CROWS) at Wright Patterson … functional areas within CROWS are as follows: CROWS Leadership Acquisition Support to increase system security engineering principles into acquisition community Manpower, Education and Training Intelligence integration to increase cyber posture Management of data reporting and tracking of cyber vulnerabilities and risks Data capture, repository and analytics to enable risk ...

between the managed Security Operations Centre (SOC) provider, internal security teams, and wider business stakeholders. The successful contractor will support security monitoring, incident management, threat analysis, and the ongoing improvement of security operations processes. This is an excellent opportunity for a hands-on security professional with strong stakeholder engagement … provider. Investigate, triage, and track security incidents through to resolution. Support the investigation, containment, remediation, and post-incident review of security events. Analyse threat intelligence and provide contextual insight into threats relevant to the organisation. Assess security risks associated with new applications, software deployments, and browser extensions. Maintain ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...