1 to 25 of 26 Threat Intelligence Jobs in the North of England

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-level communication skills. Key responsibilities: Producing threat assessments, intelligence reports and executive briefings. Translating complex cyber threats into clear, actionable information for senior and non-technical stakeholders. Monitoring intelligence sources and assessing ...

strategy into effective security capabilities. Shapes policy, operating models and priorities, and provides leadership across multiple security disciplines or teams. Job DescriptionJOB TITLE: Cyber Threat Intelligence Senior ManagerSALARY: Non-London: 92,701-119,966London: 107,304-138,864LOCATION(S): Edinburgh, Bristol, Manchester, LondonHOURS: Full-timeWORKING PATTERN: Our work … moment to join Lloyds Banking Group and the Chief Security Office as we transform how security is delivered across the Group. As the Cyber Threat Intelligence Lead, you'll lead a specialised intelligence team responsible for identifying, analysing, and producing actionable intelligence on significant cyber threats. ...

design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis … threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

behaviour into effective detection and response.You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm.The role would particularly suit an experienced detection engineering, security operations, red-team … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile.Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility gaps ...

into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm. The role would particularly suit an experienced detection engineering, security operations … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell's technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility ...

fintech is growing its Information Security team and is looking for a Senior Security Operations Analyst. Senior Security Operations Analyst (SOC/SIEM/Threat Hunting) £55,000 - £65,000 + Bonus + excellent benefits Manchester or Leeds (Hybrid) About the role You'll protect key business assets … monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define and fine-tune ...

Senior Threat Analyst Manchester/Hybrid (on site once a fortnight and as required) Circa £65,000 + Excellent Benefits A Senior Threat Analyst is required to join a well-established public sector organisation within its Cyber Threat Intelligence function. This is a great opportunity … experienced threat intelligence professional who combines strong cyber knowledge with leadership and executive-le click apply for full job details ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...

Analyst. This role focuses on improving SIEM detection and monitoring capabilities. You will develop, test, maintain and improve SIEM monitoring and detection content, using threat intelligence and operational insights to improve detection coverage, accuracy and the identification of cyber threats.You will apply and refine threat-informed detection … agreed standards, providing advice on mitigation, escalation and risk reduction.Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.Support incident response ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

ongoing threats, manage vulnerabilities and help maintain a secure global technology environment. Key ResponsibilitiesDevelop and maintain a range of cyber security solutions and controls.Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required.Maintain vulnerability and remediation records to support audit compliance … Intune, Conditional Access, Identity Protection and Purview.Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM.Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup ...

manage vulnerabilities and help maintain a secure global technology environment. Key Responsibilities Develop and maintain a range of cyber security solutions and controls. Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required. Maintain vulnerability and remediation records to support audit compliance … Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team. What We Offer: Hybrid working | Permanent | Full-time, part-time or job share. Flexible ...

baseline activity to help further develop detection rules and process.Develop and implement roadmaps aligned to strategic objectives and emerging threats – being actively aware of threat landscape, vulnerabilities, risks, and mitigations.As required, operate flexibly, to provide input and support to other cyber and information security sections of TCS, helping manage …/MSOC).Experience managing security incidents and crisis-level response; able to operate under pressure.Strong understanding of incident response and digital forensics.Strong understanding of threat intelligence and threat hunting.Strong understanding of vulnerability management and security controls.Strong understanding security testing, assurance, and audit practices.Experience working with regulators, auditors ...

Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence.The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging cyber ...

compromise, and policy violations correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity. * Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. * Work with Detection and Automation team … 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/ ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...