51 to 75 of 118 Threat Intelligence Jobs in London

detection through recovery. Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments. Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms. Develop containment, eradication, and remediation strategies aligned to business risk. … triage tools. Experience with Splunk, Microsoft Defender, CrowdStrike Falcon, ServiceNow SIR, and cloud security technologies. Knowledge of network protocols, detection engineering, log analytics, and threat hunting methodologies. Excellent verbal and written communication skills for technical and executive audiences. Demonstrated ability to manage multiple priorities in a global enterprise environment. ...

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

environmentsOversee third-party security testing, including penetration testing and phishing simulationsPromote a strong cyber security culture through training and awareness initiativesMonitor and report on threat intelligence trends and emerging risksAbout YouYou will be a strategic and influential cyber security leader with a strong track record of operating ...

security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. RequirementsAbout your SkillsWe're open-minded when it comes to hiring and we care … Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience with Incident Command and conducting Tabletop ExercisesInterest in Automation. Interest in Threat Intelligence and Analytic Tuning. A high level understanding of mobile, network and operating system security controls. Any experience of programming in Python ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

opportunityWe are seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve … agreements (SLAs)Lead security incident response end to end, from triage and containment through to post-incident review and root cause analysisMonitor the emerging threat landscape and recommend enhancements to our detection and response capabilitiesAutomation, reporting and assuranceAutomate repetitive security processes through scripting and infrastructure-as-codeDeliver operational security ...

cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem-solving ...

working on complex client environments across cloud, on-premises and hybrid infrastructure.This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security, while working alongside experienced engineering and security specialists.The RoleAs a Cyber Security Engineer … network security managementDeveloping and maintaining security policies, standards and proceduresConducting infrastructure security assessments using tools such as CIS BenchmarksSupporting incident detection, response and threat intelligence activitiesContributing to vulnerability management and endpoint securitySupporting security improvements across complex client environmentsWhat We're Looking ForWe're interested in engineers with experience ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

clients. Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution. Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments. Serve as the escalation point for client concerns and day-to-day operational issues. Conduct regular reviews and contribute to client … lead or supervisory role. Strong understanding of incident detection, escalation, and resolution processes. Experience with tools like SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms. Ability to manage team performance and guide junior staff in their development. Excellent verbal and written communication skills. Strong attention ...

Participate in shift rotations, including nights and weekends if required. Support Growth of our SOC as a Service capabilityStay current on cybersecurity trends and threat intelligence. Required Qualifications: Associate's or Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts ...

while shaping the organisation's approach through the development of security frameworks, policies, standards and best practices. The role provides technical leadership in AI threat modelling, risk assessment and security testing, while monitoring emerging threats, industry developments and evolving technologies. Acting as a trusted advisor to stakeholders … security subject matter knowledge to support risk-informed decision-making and the secure adoption of AI technologies across the FCA Carry out AI threat modelling, security risk assessment and security design activities for AI systems and emerging digital capabilities, providing specialist recommendations on risk treatment, security controls and secure ...

Head of Cyber Risk (GHCR) in delivering the cyber security strategy and Mid-term Plan (MTP). Lead the gathering and analysis of market intelligence, contributing to the bi-annual CCoE Horizon Scan, the regular cyber market intelligence report, and ad-hoc internal Technical, Cyber Risk and Market … Intelligence reports. Support the team in the development and delivery of cyber technical training. Support the maintenance and production of Realistic Disaster Scenarios (RDS) and broader risk parametrisation relating to the internal accumulation model. Lead the CCoE's assessment and selection of technical tools, explaining the technical landscape ...

Generation (RAG), and Agentic AI architectures . Strong understanding of Cyber Security Operations Centres (SOC) and associated technologies including SIEM, SOAR, EDR/XDR, threat intelligence, and security operations platforms . Extensive experience defining data architectures, API strategies, and integration patterns to enable AI capabilities within complex enterprise ...

identification and triage through to remediation and closure. Work with infrastructure, engineering and technology teams to coordinate and track remediation activities. Review vulnerability data, threat intelligence feeds and security advisories to determine business risk and remediation priorities. Produce reports, dashboards and metrics to demonstrate vulnerability trends, remediation progress ...

monitoring dashboards. Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents. Utilise online resources for researching and collecting threat intelligence to improve the SOC's abilities to detect cyber-attacks. Develop new, or improve existing run books and use cases based on investigations ...

event analysis and triage potential threats, including recognising successful and unsuccessful intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration ...

backlog, building, tuning and retiring detections across Microsoft Sentinel and Defender, mapped to a coverage model such as MITRE ATT&CK. You'll turn threat intelligence into detection logic and hunting activity, and drive our automation and SOAR maturity by building Logic App playbooks that reduce manual effort … technologies and frameworksIt would be great if you also haveExperience in regulated financial servicesExposure to identity centric detection (Entra ID) and cloud native threat detectionGCIH, GCFA or an equivalent hands-on IR or detection certificationLinks to the SOC and detection engineering community, through conferences, speaking or open source detection ...

Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate AI approaches, including Generative AI, LLMs, RAG and agentic AI. Conduct technical feasibility assessments and build ...

security technologies in a complex environment. In-depth technical knowledge across areas such as SIEM, DLP, firewalls, cloud security centres, intrusion prevention, cyber threat intelligence and vulnerability scanning. Strong leadership, influencing and supplier management skills, with the judgement to make clear, risk-based recommendations. Excellent analytical skills ...

Azure and GCP environments and our clients strategic Zscaler platform (ZIA/ZPA). The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (Cloud Engineering, Network Engineering, Service Delivery), to design and implement secure, scalable ...

Azure and GCP environments and Colt’s strategic Zscaler platform (ZIA/ZPA). The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (Cloud Engineering, Network Engineering, Service Delivery), to design and implement secure, scalable ...

Purview, and will play a key role in modernising our clients security posture. The successful candidate will work closely with Security Engineering, SOC, Threat Intelligence and Risk functions, as well as wider technology teams (DIO, Network Engineering, Service Delivery), to design and implement integrated, Zero Trust-aligned security ...