1 to 25 of 44 Threat Intelligence Jobs in the South East

Title: Threat Intelligence Analyst Type: Contract | ASAP START - 1/03/2027 Day Rate: £582.28 (Umbrella Equivalent Rate) Location: Remote MUST HAVE SC - SECURITY CLEARANCE! Our client a seeking a Threat Intelligence Analyst to join their security team. Responsibilities Collaborate with Incident Responders, Security Operations … other teams to define and prioritise cyber threat indicators. Maintain a comprehensive understanding of the evolving threat landscape to provide high-level situational awareness and proactive warnings about emerging threats. Monitor and analyse intelligence sources, including internal data, open-source reports, online databases and restricted intelligence ...

exciting remote-based opportunity has arisen for a Threat Intelligence Lead to join our Technology team, reporting to the Chief Information Security Officer. You will design and lead the company’s cyber threat intelligence (CTI), security testing and proactive threat-hunting programmes, helping to protect … assets and brands across our global operations.Working closely with our internal and external security operations teams, you will anticipate, assess and mitigate threats. The intelligence you provide will support strategic decisions, incident response and continuous improvements to our cyber resilience. This pivotal Cyber Security role requires strong technical expertise ...

based on business risks and threats Review and improve existing SecOps standards and capabilities e.g. by highlighting requirements for additional logging, identifying incident or threat trends and detection and business-as-usual optimisation opportunities Perform security monitoring, reviewing and triaging triggered alerts, and suggesting improvements (on a rota basis … senior stakeholders in a consulting capacity Participate in alert testing and incident response tabletop exercises as required Remain up to date with latest threat intelligence which may be of interest to our clients Additional responsibilities may include (client dependent):Proactive threat hunting and tradecraft development Incident response ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact … closely with internal teams and an outsourced SOC partner Mission-focused : Protect critical healthcare data that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with ...

Head of Cyber Resilience and Cloud to join its cyber leadership team. Reporting directly to the CISO, this role will lead cyber operations, threat reduction and resilience capabilities across both cloud and on premises environments. You will act as a trusted advisor to senior leaders, driving strategic initiatives that … cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

property industry. Job DescriptionSupport security operations, incident investigations and response activities.Collaborate with the Security Operations Centre (SOC) to analyse threats and security alerts.Conduct threat intelligence research and identify emerging cyber risks, adversary tactics and indicators of compromise.Utilise Microsoft Defender XDR and associated Microsoft Defender products to support investigations … simulation campaigns.Strong knowledge of user engagement initiatives, targeted training and compliance reporting.Solid understanding of recognised security frameworks and standards, particularly Cyber Essentials.Knowledge of cyber threat intelligence concepts, including IOCs, TTPs and threat analysis.Experience working with SOC teams, managed security service providers or security operations functions.Hands-on experience ...

directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts.You’ll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous growth. … culture is built by engineers who’ve progressed through roles in security operations, threat intelligence, and engineering. You’ll benefit from cyber ranges, training labs, and the freedom to shape your development path.As part of a leading MSSP, you'll gain exposure to a wide range of industries ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls ...

people who are technical at heart and understand what analysts need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part … complex cases to Senior and Lead Analysts with appropriate context.Review vulnerability management output and provide basic prioritisation insight. Hunt and improveTake part in directed threat hunting activities.Suggest improvements to detections, dashboards and runbooks.Support testing of new use cases and detection logic.Collaborate and communicateProvide clear written updates for customers ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world … gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure ...

Access Management (PAM) capabilitiesLead identity governance and administration initiativesDevelop secure authentication and authorisation frameworksEnsure access management aligns with Zero Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud security architectures across Azure, AWS and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre ...

Lead identity governance and administration initiatives Develop secure authentication and authorisation frameworks Ensure access management aligns with Zero Trust and least privilege principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud & Security Solutions Design cloud security architectures across Azure, AWS and hybrid environments Architect endpoint protection, DLP and advanced threat protection solutions Design application security ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDesign business continuity and cyber resilience frameworksCompliance & Standards ImplementationEnsure security architectures comply with MOD security requirements and ITAR regulationsDesign security solutions supporting Information Security Management System (ISMS) complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...