51 to 75 of 211 Threat Intelligence Jobs in England

DescriptionRole - Threat Modeler (TM)Technology - Threat Modeling, Cloud Security, Infrastructure as Code, PythonLocation – Belfast/LondonCompensation - Competitive (including bonus)Job DescriptionWe are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role … cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams. Key ResponsibilitiesPerform threat modeling using a documented and repeatable process. Identify threats and specify effective mitigating security controls while maintaining a high standard of quality. Manage the lifecycle ...

response to cyber security threats, vulnerabilities, and security incidents across the organisation. The role holder will leverage a broad understanding of security technologies, threat intelligence, and security operations processes to identify, assess, and mitigate cyber risks.The role requires strong analytical and technical capabilities to correlate data from multiple … security platforms and business systems, enabling effective threat detection, risk assessment, and incident management. The role holder will lead the development, optimisation, and tuning of security monitoring and detection capabilities, ensuring cyber threats are identified and responded to in a timely and effective manner.The Senior Cyber Security Technical Specialist ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

data science and machine learning to cyber security problems. The role will focus on developing security analytics and Security Knowledge Graph capabilities to improve threat detection, risk prioritisation and security decision-making. Key Responsibilities Develop machine learning and statistical models for threat detection, anomaly detection and security risk … analytics. Design features and analytical methods using security telemetry, threat intelligence and enterprise data. Build and use Security Knowledge Graphs to connect entities, events, vulnerabilities and attack paths. Evaluate model accuracy, bias, explainability, robustness and operational effectiveness. Partner with security analysts and engineers to productionise analytical use cases. ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing … security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats. Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents. Oversee threat intelligence programmes, identifying ...

successful candidate will have an incident response background; technical expertise spanning infrastructure, web servers and cloud environments; a deep understanding of current and emerging threat actors; and a genuine interest in developing tooling that improves the delivery of investigations. Please note that this role will require you to work … affecting SaaS platforms and software development environments (e.g. source code repositories and CI/CD pipelines), drawing on an understanding of common development practices. Threat hunting and identification of attacker activity, using EDR and agent-led forensic tooling, to inform the investigation and containment activities Perform live compromise assessments ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership.Key responsibilities:This role will provide you the opportunity to lead key activities to progress your … capability through coaching, review and structured feedback.Represent the area in CSO governance and cross-functional forums.Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership. Key responsibilities: This role will provide you the opportunity to lead key activities to progress … coaching, review and structured feedback. Represent the area in CSO governance and cross-functional forums. Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

full contact details are readily available on our website).Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

Central LondonAs a Security Operations intern, you'll gain first-hand experience investigating security alerts and incidents. You'll support senior team members across threat intelligence, detection engineering, forensics and malware analysis. Working alongside experienced security engineers, you'll also be paired with a mentor to support your … range of systems and platforms, including Windows, Linux, Kubernetes and cloud environmentsLeading the triage and coordination of security incidents raised across the organisationConducting threat hunting across a large, centralised data lakeUsing threat intelligence sources to enhance and tune existing detection capabilitiesWorking with our internally developed interface backed ...

ongoing threats, manage vulnerabilities and help maintain a secure global technology environment. Key ResponsibilitiesDevelop and maintain a range of cyber security solutions and controls.Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required.Maintain vulnerability and remediation records to support audit compliance … Intune, Conditional Access, Identity Protection and Purview.Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM.Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup ...

manage vulnerabilities and help maintain a secure global technology environment. Key Responsibilities Develop and maintain a range of cyber security solutions and controls. Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required. Maintain vulnerability and remediation records to support audit compliance … Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team. What We Offer: Hybrid working | Permanent | Full-time, part-time or job share. Flexible ...

cyber security risks you will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO … . Strong stakeholder management and people management experience. Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader ...

cyber security risks you will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO … . Strong stakeholder management and people management experience. Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader ...

ecosystem serving millions of customers. You will combine deep engineering expertise with an innovation mindset to build production-grade solutions that leverage applied Artificial Intelligence (AI), automation, and modern development practices to strengthen Tesco’s cyber defence. This role sits at the point where ideas become real: you will … across diverse security and technology teams with a customer-first focus. In the immediate term, you will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams.This team operates as an innovation incubator for cyber defence capabilities: rapidly exploring ideas, validating them through prototypes ...

thinking, defining, and applying playbook responses Applying root cause analysis and lessons learned to improve security posture and processes Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response Strong collaboration with … cybersecurity related disciplines, not limited to: e.g. vulnerability research, network traffic analysis, static and dynamic malware analysis, digital forensics, memory analysis, web-security and threat hunting. Preferred Experience: Experience in creating queries and alerts in a SIEM, preferably in SPL. Experience with Windows/Unix OS forensics. Experience with ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...

will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning … technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape. Your Impact SOC Advisory: 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving ...