1 to 25 of 100 Threat Intelligence Jobs

onsite Contract Duration: 6 months Positions Available: 3 The Role We are looking for experienced SOC Detection Engineers to design, develop and continuously improve threat-led detection capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings … continuous improvement. The role is not primarily focused on day-to-day SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple ...

Join Police Digital Service as NMC Senior Cyber Threat Intelligence Specialist Salary £60,000 - £65,000 This is an opportunity to play your part and protect our company, our customers and our communities from cyber attacks. Be part of a dedicated team and get ready to be challenged … Management Centre will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology ...

Join Police Digital Service as NMC Senior Cyber Threat Intelligence Specialist Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below. Salary £60,000 - £65,000 This is an opportunity to play your part and protect our company … Management Centre will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-level communication skills. Key responsibilities: Producing threat assessments, intelligence reports and executive briefings. Translating complex cyber threats into clear, actionable information for senior and non-technical stakeholders. Monitoring intelligence sources and assessing ...

oversees the company's security program, ensuring S&P Global is protected from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. While … based in the UK, you will support response and intelligence needs globally. Candidates should have a genuine interest in cyber security and a strong grasp of attacker tactics, techniques, and procedures (TTPs). This role requires a detail-oriented, critical thinker who understands how adversaries exploit systems, networks ...

design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis … threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud ...

take incidents escalated from Tier 1 and Tier 2 analysts, assess their business impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. … carry out business impact analysis and recommend response actions and escalation paths Perform advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping ...

sources to establish attack timelines, identify affected systems and support the assessment of cyber security incidents. Analyse indicators of compromise, attacker techniques and available threat intelligence to determine the nature and severity of security events. Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst … Cyber security operations, Forensics, Incident management, incident investigation and response, Information risk assessment and risk management, Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment Experience working within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security ...

Overview As Security Operations Engineer II, you help secure Mollie's fast-growing platform by leading operational security, incident response, and threat analytics. You'll join a seasoned SecOps team to detect, investigate, and respond to security events, while building playbooks and automation to reduce risk. Your work directly … Collaborate with Security Engineering to improve detection capabilities Proactively hunt for threats beyond current use cases Define monitoring scenarios and prototype rules based on threat intel Participate in incident response rotation and on-call procedures Deliver strategic reports and updates to reduce threat impact Create security reports, dashboards ...

Active SC Clearance Required Overview We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams. Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle … with security requirements. Key Responsibilities Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence. Establish and coordinate cross-functional working groups across engineering and security teams. Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security ...

investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact and root cause. Working alongside threat intelligence, detection engineering and force stakeholders, you will provide technical advice to support incident response, recovery and organisational decision-making. Key Responsibilities Incident … privilege escalation and unauthorised access. Support response activities across cloud infrastructure, workloads and SaaS platforms, providing technical expertise during active incidents. Work closely with threat intelligence, detection engineering and force stakeholders to improve investigative outcomes and situational awareness. Translate lessons learned into improvements to cloud security controls, detections ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Gloucester || UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Leeds || UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant – Penetration Tester Location: UK Wide (Occasional office ...

Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment. This is an opportunity to work on threat-led detection engineering, focusing on identifying sophisticated attacker … behaviours and improving the effectiveness of security operations. You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support. Key Skills ...

support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools. Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments. Operate effectively … stakeholders across multiple functions and levels. Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM. Essential Skills Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state ...

Overview In this role you will help establish and grow SoftwareOne's Dutch-speaking Security Operations Center in Amsterdam. You will lead advanced threat investigations, threat hunting, and incident response for Dutch customers as part of the Microsoft MDR for Sentinel service. You'll mentor junior analysts … dynamic, collaborative office culture access to leading cybersecurity technologies Verantwoordelijkheden Lead complex security investigations and incident response engagements for enterprise customers Perform advanced threat hunting using Microsoft Sentinel, Defender XDR, and MITRE ATT&CK Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities Support threat intelligence ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment … Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/or OnPrem ...

work as part of a global team across the UK, Poland and Mexico. The role is focused entirely on defensive security and threat hunting, with an emphasis on building high-quality detections rather than simply increasing volume. Key responsibilities: Develop high-quality detection use cases from external threat intelligence and internal security data Analyse intelligence and translate it into effective detections for the organisation Use Red Team outputs to identify gaps, understand attack techniques and determine where to detect malicious activity Conduct threat hunting and identify opportunities to improve defensive coverage Work closely with ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-le click apply for full job details ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of our client, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate need for an Acquisition Intelligence Program Manager at the journeyman level who will be primarily responsible for supporting the Cyber Resiliency Office for Weapon Systems (CROWS) at Wright Patterson … functional areas within CROWS are as follows: CROWS Leadership Acquisition Support to increase system security engineering principles into acquisition community Manpower, Education and Training Intelligence integration to increase cyber posture Management of data reporting and tracking of cyber vulnerabilities and risks Data capture, repository and analytics to enable risk ...

between the managed Security Operations Centre (SOC) provider, internal security teams, and wider business stakeholders. The successful contractor will support security monitoring, incident management, threat analysis, and the ongoing improvement of security operations processes. This is an excellent opportunity for a hands-on security professional with strong stakeholder engagement … provider. Investigate, triage, and track security incidents through to resolution. Support the investigation, containment, remediation, and post-incident review of security events. Analyse threat intelligence and provide contextual insight into threats relevant to the organisation. Assess security risks associated with new applications, software deployments, and browser extensions. Maintain ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...