1 to 25 of 73 Threat Intelligence Jobs in the UK excluding London

Title: Threat Intelligence Analyst Type: Contract | ASAP START - 1/03/2027 Day Rate: £582.28 (Umbrella Equivalent Rate) Location: Remote MUST HAVE SC - SECURITY CLEARANCE! Our client a seeking a Threat Intelligence Analyst to join their security team. Responsibilities Collaborate with Incident Responders, Security Operations … other teams to define and prioritise cyber threat indicators. Maintain a comprehensive understanding of the evolving threat landscape to provide high-level situational awareness and proactive warnings about emerging threats. Monitor and analyse intelligence sources, including internal data, open-source reports, online databases and restricted intelligence ...

exciting remote-based opportunity has arisen for a Threat Intelligence Lead to join our Technology team, reporting to the Chief Information Security Officer. You will design and lead the company’s cyber threat intelligence (CTI), security testing and proactive threat-hunting programmes, helping to protect … assets and brands across our global operations.Working closely with our internal and external security operations teams, you will anticipate, assess and mitigate threats. The intelligence you provide will support strategic decisions, incident response and continuous improvements to our cyber resilience. This pivotal Cyber Security role requires strong technical expertise ...

Outside IR35 Contract Length: 6 months initially Location: Hybrid/Liverpool UK I'm supporting a large enterprise organisation seeking an experienced Cyber Threat Intelligence Lead to support and enhance its Threat Intelligence capability within a complex enterprise environment. Key Responsibilities Deliver actionable cyber threat intelligence to support security operations and risk reduction. Leverage Threat Intelligence platforms to identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. ...

Threat Hunting & Detection Engineering Analyst Location: UK (Hybrid) Salary: Competitive + Excellent Benefits Threat Hunting & Detection Engineering Analyst A leading global technology consultancy is looking to hire a Threat Hunting & Detection Engineering Analyst to join its growing Cyber Security practice. This is an exciting opportunity to work … forefront of cyber defence, helping enterprise clients improve their detection capabilities through advanced threat hunting, detection engineering and SOC content development. Working alongside Threat Intelligence teams, Security Operations Centres and client stakeholders, you'll play a key role in strengthening organisations' ability to identify and respond ...

based on business risks and threats Review and improve existing SecOps standards and capabilities e.g. by highlighting requirements for additional logging, identifying incident or threat trends and detection and business-as-usual optimisation opportunities Perform security monitoring, reviewing and triaging triggered alerts, and suggesting improvements (on a rota basis … senior stakeholders in a consulting capacity Participate in alert testing and incident response tabletop exercises as required Remain up to date with latest threat intelligence which may be of interest to our clients Additional responsibilities may include (client dependent):Proactive threat hunting and tradecraft development Incident response ...

responsible for overseeing SOC operations, managing a team of 8+ cyber security professionals and driving the continuous improvement of security monitoring, incident response and threat detection capabilities. The successful candidate will work across security operations, threat intelligence, incident management, stakeholder engagement and supplier management. The role … senior escalation point for critical security alerts and incidents. Develop and improve SOC monitoring capabilities, detection rules, use cases and playbooks. Support proactive threat hunting and intrusion detection activities. Use threat intelligence, including OSINT and commercial intelligence, to identify emerging threats. Define cyber security metrics, KPIs ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact … closely with internal teams and an outsourced SOC partner Mission-focused : Protect critical healthcare data that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with ...

Head of Cyber Resilience and Cloud to join its cyber leadership team. Reporting directly to the CISO, this role will lead cyber operations, threat reduction and resilience capabilities across both cloud and on premises environments. You will act as a trusted advisor to senior leaders, driving strategic initiatives that … cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational ...

hackajob is partnering directly with BAE Systems Digital Intelligence to hire for this role. Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

hackajob is partnering directly with BAE Systems Digital Intelligence to hire for this role. Location(s): UK, Europe & Africa : UK : Manchester BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

interpret data Effective verbal and written communication skills Knowledge of Common Security Vulnerabilities (CVEs) and remediation techniques Solid operational knowledge of working with Threat Intelligence Platforms, SIEM appliances, or intelligence feeds that have been acquired in large organisations Experience with large LANs and cloud environments, preferably … willproceedto shortlisting. Shortlisting In the event ofa large number ofapplications wemay conductan initialsift, on the lead criteria of: Solid operational knowledge of working with Threat Intelligence Platforms, SIEM appliances, or intelligence feeds that have been acquired in large organisations Demonstrable ability to analyse and interpret data Desirable ...

manage an established Security Operations Centre (SOC) Develop and deliver the SOC strategy and operational roadmap Oversee incident management and security monitoring capabilities Drive threat intelligence and cyber threat assessment activities Manage cyber security tools and operational technologies Build and maintain relationships with MSSPs, vendors, and technology … Analysts will not be considered) Strong leadership and people management experience In-depth knowledge of incident management processes Experience delivering effective security monitoring and threat intelligence capabilities Hands-on experience managing cyber security tools and technologies Experience working with external vendors and Managed Security Service Providers (MSSPs) Desirable ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence – how feeds are sourced, what constitutes actionable information ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world … gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure ...

currently recruiting for SOC Manager (SC) with background experience in leading and managing a SOC, delivering threat intelligence and assessment and effective security monitoring, to join a great project for 6+months, that is ran by a UK GOV Client. The best thing about this opportunity is that … experience as a SOC Manag er, Effective in deploying resources In-depth knowledge of incident management processes Can deliver an effective security monitoring capability, threat intelligence and assessment Managing relationships (external vendors, managed security service providers, technology partners) SC Clearance - Candidates holding active SC will benefit ...

from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement of the Incident Response service. Support both BAU incidents and strategic capability development. Manage incidents … reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested in the role please ...