176 to 200 of 294 Threat Intelligence Jobs in London

Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead for AI security, helping to establish practical … incidents, working with internal teams, external SOC providers and specialist partners. Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory ...

causeMonitoring and analysing activity across SIEM, EDR and other security platformsIdentifying indicators of compromise, suspicious activity and emerging threatsSupporting incident response and containment activitiesPerforming threat hunting activities to proactively identify potential security risksEscalating significant or complex incidents where appropriateWorking closely with Tier 1 and Tier 3 analysts, incident responders … other technical teamsTuning and improving detection rules and use cases to reduce false positives and improve threat detectionAnalysing logs and security events from endpoints, networks, cloud environments and other infrastructureProducing clear investigation reports and documenting incidents, findings and recommendationsMaintaining awareness of the latest cyber threats, vulnerabilities and attacker techniquesContributing ...

activity across SIEM, EDR and other security platforms Identifying indicators of compromise, suspicious activity and emerging threats Supporting incident response and containment activities Performing threat hunting activities to proactively identify potential security risks Escalating significant or complex incidents where appropriate Working closely with Tier 1 and Tier 3 analysts … incident responders and other technical teams Tuning and improving detection rules and use cases to reduce false positives and improve threat detection Analysing logs and security events from endpoints, networks, cloud environments and other infrastructure Producing clear investigation reports and documenting incidents, findings and recommendations Maintaining awareness ...

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

Sentinel, SentinelOne, Netskope, Flashpoint, Wiz or similar tooling. Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines. Working knowledge of DLP and threat intelligence monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks ...

integration platforms.Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation.Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies.Act as the technical lead for AI security, helping to establish practical controls … security incidents, working with internal teams, external SOC providers and specialist partners.Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation.Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual ...

approaches and drive delivery from concept through to operational handover. Youll bring deep, hands-on Security Operations experience across areas such as incident response, threat hunting, digital forensics, malware analysis, network analysis and detection engineering. Using your understanding of the evolving threat landscape, youll translate threat intelligence ...

existing approaches and drive delivery from concept through to operational handover.Youll bring deep, hands-on Security Operations experience across areas such as incident response, threat hunting, digital forensics, malware analysis, network analysis and detection engineering. Using your understanding of the evolving threat landscape, youll translate threat intelligence ...

improvement while driving lessons learned activities Demonstrated integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities Talent management of direct reports with empathy and patience, while developing them … Information Security Professional Information System Administration/Engineering 5+ years’ collective experience between the following roles: Security Operations Center (SOC) Analyst/Manager Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions Attack & Penetration Testing (Active Defense) eDiscovery or related role performing forensic functions 3+ years ...

Security Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence.DevSecOps - Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles.AI - Drive … configuration management.Experience managing and supporting enterprise security platforms.Understanding of security operations processes, including alert triage, investigation, and incident response.Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval-Augmented Generation (RAG) concepts.Strong knowledge of system ...

Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence. DevSecOps – Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles. AI – Drive … Experience managing and supporting enterprise security platforms. Understanding of security operations processes, including alert triage, investigation, and incident response. Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval‐Augmented Generation (RAG) concepts. Strong knowledge ...

security alertsto identify and promptly respond to securityevents. Collaboratewith key stakeholders during investigations to gather further information and coordinate response actions. Derive value fromrelevant threat intelligence to drive proactive action. Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle. ...

practice within Cloud platforms (AWS and/or Microsoft Azure)In-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A good understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Experience working with security standards ...

Darktrace Ltd. in London/Cambridge is seeking a curious Threat Research Analyst to join our Malware Team. You will investigate emerging threats, analyze malware and attacker TTPs, and translate findings into actionable detections. This hybrid role requires strong technical skills, collaboration with researchers and product teams ...

improvement while driving lessons learned activities Demonstrate integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities To qualify for the role, you must have Education: Bachelor … years’ experience in at least two of the following roles: Security Operations Center (SOC) Analyst/Manager (3 years minimum) Cybersecurity Incident Coordinator Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions eDiscovery or related role performing forensic functions Deep understanding of security threats, vulnerabilities ...

JPMorganChase is actively seeking a Cyber Intelligence Director to identify and analyze external cyber threats, protecting the firm’s interests. You will coordinate across EMEA, North America, and APAC, prioritizing intelligence streams and allocating resources for maximum impact. You will shape security policies and drive threat detection ...

incident response.Participate in shift rotations, including nights and weekends if required.Support Growth of our SOC as a Service capabilityStay current on cybersecurity trends and threat intelligence.Required Qualifications:Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts ...

Cybersecurity Threat Detection team seeks a skilled professional to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms, aligned with MITRE ATT&CK. You will hunt threats, validate log health, and collaborate with threat intelligence and incident response to stay ahead of adversaries. Strong ...

SEFE Marketing & Trading Ltd in London is seeking a Senior Manager, Security Threat, Vulnerability & Testing to lead enterprise threat intelligence, vulnerability management, and security testing across cyber, OT, physical, and people security domains. You will translate complex findings into clear, risk-based insights for senior stakeholders, drive … threat modelling and remediation lifecycles, and collaborate with Security Operations, GRC and business teams to strengthen resilience and reduce #J-18808-Ljbffr ...

confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. … unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team. Built cloud ...

confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. … unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team. Built cloud ...

develop and improve security and IT policies and documentationAct as the point of contact for the business on external audits and assessmentsTrack threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and huntsRun vulnerability management from a threat-led angle: prioritise ...

develop and improve security and IT policies and documentation Act as the point of contact for the business on external audits and assessments Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts Run vulnerability management from a threat ...

security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.We ...

some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global … crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats. Few threats test that mission harder than Iran. Through the IRGC and its Qods Force, a network of proxies ...