151 to 175 of 500 Threat Intelligence Jobs in England

memory-based evidence, and support the collection and preservation of digital evidence to establish root cause, impact and attacker activity. Working closely with threat intelligence, detection engineering and force stakeholders, you will provide technically sound advice to support incident remediation and organisational decision-making. Key Responsibilities Incident Response … Investigation Lead and support investigations into cyber security incidents affecting UK policing, including ransomware, malware outbreaks, unauthorised access, data compromise and insider threat investigations. Perform detailed forensic analysis of endpoints, servers, cloud environments and associated digital evidence to evaluate the scope, root cause and impact of incidents. Support incident ...

Control Risks in London seeks a Regional Threat Intelligence Specialist to produce reports and other threat-related products for a global tech client. You will support threat, vulnerability, and risk assessments for the EMEA region. The role involves researching threats across locations, delivering concise intelligence ...

core of the firm's cyber defense operations. The analyst will primarily triage security alerts and investigate cases end-to-end, while contributing to threat hunting, detection engineering, and the adoption of AI-assisted tooling to improve investigative efficiency and accuracy. The position suits a technically strong practitioner … based on severity, risk, and business impact.Investigate security incidents and cases end-to-end, from initial detection through containment, eradication, and documented resolution.Conduct proactive threat hunting across endpoints, networks, cloud, and identity telemetry to identify undetected threats and emerging adversary behavior.Contribute to detection engineering: develop, tune, and refine detection ...

core of the firm's cyber defense operations. The analyst will primarily triage security alerts and investigate cases end-to-end, while contributing to threat hunting, detection engineering, and the adoption of AI-assisted tooling to improve investigative efficiency and accuracy. The position suits a technically strong practitioner … severity, risk, and business impact. Investigate security incidents and cases end-to-end, from initial detection through containment, eradication, and documented resolution. Conduct proactive threat hunting across endpoints, networks, cloud, and identity telemetry to identify undetected threats and emerging adversary behavior. Contribute to detection engineering: develop, tune, and refine ...

experienced SOC and Incident Response Lead at ASOS, you will provide hands-on technical leadership across security monitoring, detection, engineering, incident response, and threat-led investigations. You will lead the SOC and Incident Response team, ensure security incidents are investigated and resolved effectively, and maintain a strong operating relationship … complex security incidents. Own and improve the SOC detection lifecycle, including reviewing detection coverage, tuning noisy or low-value alerts, creating new detections from threat intelligence and incident learnings, and mapping coverage against relevant attack techniques and critical business assets. Establish and maintain incident response processes, procedures ...

experienced SOC and Incident Response Lead at ASOS, you will provide hands‐on technical leadership across security monitoring, detection, engineering, incident response, and threat‐led investigations. You will lead the SOC and Incident Response team, ensure security incidents are investigated and resolved effectively, and maintain a strong operating relationship … complex security incidents. Own and improve the SOC detection lifecycle, including reviewing detection coverage, tuning noisy or low‐value alerts, creating new detections from threat intelligence and incident learnings, and mapping coverage against relevant attack techniques and critical business assets. Establish and maintain incident response processes, procedures ...

directly with SIEM/XDR platforms and custom tooling, you'll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts. You'll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous … growth. Our SOC culture is built by engineers who've progressed through roles in security operations, threat intelligence, and engineering. You'll benefit from cyber ranges, training labs, and the freedom to shape your development path. As part of a leading MSSP, you'll gain exposure ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

engineering and service delivery teams to understand operational requirements and deliver automation solutions. Build and maintain integrations with security technologies including SIEM, SOAR, EDR, threat intelligence and cloud platforms. Leverage APIs and external data sources to enhance security workflows and processes. Explore and implement AI-enhanced automation capabilities … Python, JavaScript or similar scripting and development languages. Good understanding of REST APIs and systems integration. Experience working within a Security Operations, Incident Response, Threat Engineering or Security Engineering environment. Understanding of modern security technologies including SIEM, SOAR, EDR, IAM, threat intelligence and vulnerability management solutions. Knowledge ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives.Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing security … operations, threat intelligence, vulnerability management, and incident response capabilities.Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats.Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents.Oversee threat intelligence programmes, identifying emerging risks and implementing ...

frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls Experience with threat … Manager, Cyber Security, Information Security, Security Architecture, Cyber Risk, NIST, ISO 27001, CIS, CAF, Defence, Government, Security Clearance, SC, DV, Incident Response, Vulnerability Management, Threat Intelligence, NSD #J-18808-Ljbffr ...

frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls Experience with threat … Manager, Cyber Security, Information Security, Security Architecture, Cyber Risk, NIST, ISO 27001, CIS, CAF, Defence, Government, Security Clearance, SC, DV, Incident Response, Vulnerability Management, Threat Intelligence, NSD #J-18808-Ljbffr ...

frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls Experience with threat … Manager, Cyber Security, Information Security, Security Architecture, Cyber Risk, NIST, ISO 27001, CIS, CAF, Defence, Government, Security Clearance, SC, DV, Incident Response, Vulnerability Management, Threat Intelligence ...

prestigious public sector client. If you thrive in a dynamic environment, excel at managing teams, and possess a deep understanding of incident management and threat intelligence, this is your opportunity to make a tangible impact.As SOC Manager, you will define and lead the delivery of our Cyber Security … security. Strong understanding of incident management processes and security monitoring tools. Demonstrated ability to lead and manage high-performing security teams. Extensive experience delivering threat intelligence and assessment. Hands-on experience with cyber security solutions such as SIEM, IDS/IPS, antivirus, and endpoint detection tools. Experience managing ...

excellent opportunity for a cyber security professional who wants to move beyond purely technical security and develop their career across cyber risk, threat intelligence, cyber insurance and strategic risk management. The Role You’ll work closely with senior cyber risk stakeholders and contribute to a broad range … initiatives, including: Monitoring and analysing the evolving cyber threat landscape Leading the production of cyber and insurance market intelligence Supporting cyber risk strategy, appetite and guidelines Contributing to Realistic Disaster Scenarios (RDS) and risk modelling Supporting the development and delivery of cyber technical training Assessing and selecting technical ...

Harvey Nash Group seeks a Cyber Threat Intelligence Delivery Lead for Reading/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires ...