1 to 25 of 66 Threat Intelligence Jobs in the UK excluding London

Cyber Threat Intelligence Analyst Utilities Predominantly remote: 1 day per month onsite in Warwick 6 months Day rate contract In short: We require a CTI expert to join a strong threat intelligence team for a critical national infrastructure energy client. In this role you will … Operational Technology) but having experience of this is NOT a prime requisite – more of a nice-to-have. Ultimately, we need a solid Cyber Threat Intelligence SME. In full: The role will work directly across all areas of Cyber Defend to produce bespoke and technical intelligence across ...

Threat and Vulnerability Manager £55k Newport (x1 day a week) Benefits: 28.9% pension & Flexi-working The Opportunity Yolk Recruitment Public Sector & Not-for-Profit team has partnered with a specialised Civil Service Organisation who are presently undergoing an interesting transformation into the cloud space. In this role, you will … oversee and continuously improve the management of vulnerability assessments across our hybrid IT environment. Using a risk-based, threat-informed approach, you will prioritise remediation efforts and work closely with stakeholders to enhance the security posture of our systems and services. Vulnerability Management (Primary Focus) Lead and improve ...

operations activities are executed efficiently, consistently and in line with defined SLAs and operational standards, through hands-on technical leadership across SOC, Incident Response, Threat Intelligence, Insider Risk and Vulnerability Management. This role acts as a senior technical escalation point, supporting complex investigations and driving improvements in detection … capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox, Google Threat Intelligence), Vulnerability management solutions (e.g. Tenable, Rapid7), and Insider Risk and DLP tools ...

Cyber Threat Intelligence Practitioner Applying for this role is straight forward Scroll down and click on Apply to be considered for this position. 12 Month Contract Based: Preston Hourly Rate: £27.03 Paye or £36.30 umbrella Onsite – 1 – 2 days per month Full time – 37 hours Monday – Friday Overview … Systems is seeking a skilled Cyber Threat Intelligence Practitioner to support tactical and operational cyber threat intelligence activities across the organisation. xkybehq In this role, you will take owners Please click on the apply button to read the full job description ...

drive effective remediation activity. Accountabilities Allocation of the correct risk rating and remediation prioritisation to a vulnerability based on industry standards for assessment, available threat intelligence concerning exploitation, the reachability of the host (or asset) and the value of the service(s) running on the impacted host. Development … stakeholders, vendors, external security partners and affect business units using reports and dashboards and provide recommendations for improvement in vulnerability management practices. Collaboration with Threat intelligence and Cyber Operations teams to assess and contextualise exposure to latest threat trends and exploits and set appropriate remediation timescales. Definition ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … SIEM applications with Vulnerability Management, and Asset and Configuration Management systems to enrich efficacy of the solution. Integration of SIEM application with Cyber Threat Intelligence and Case Management solutions. Design, implement and manage log collection and onboarding activities to SIEM. Identify initial set of use cases & playbooks ...

future threats in an ever-changing cyber landscape. You will join our comprehensive Cyber Defence Department as a senior member of the dedicated Threat Hunt team. You will operate within a robust security ecosystem, partnering directly with Cyber Operations, Threat Intelligence, Engineering, and Threat Vulnerability Management. … What you’ll do : Conduct proactive threat hunts across the enterprise, broadcast, and telco networks to identify abnormal activity, emerging attack techniques, and advanced threats. ·Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. ·Collaborate ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key Responsibilities Lead and manage the Cyber Defence function … overseeing security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats. Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents. Oversee threat intelligence programmes ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment ...

response activities, ensuring effective containment, eradication, recovery, and lessons learned. Develop, maintain, and test cyber incident response plans, procedures, and playbooks. Oversee security monitoring, threat detection, threat intelligence, and vulnerability management activities. Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management … gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents across complex technology environments. Knowledge of threat intelligence, vulnerability management, and cyber risk management practices. Excellent stakeholder management and communication skills, with the ability to translate technical issues into business ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

available throughout the hiring process. This is an opportunity to play a key role in protecting critical customer environments, leading complex investigations, driving proactive threat hunting activities, and helping shape the future of our security monitoring services. Were looking for someone who enjoys solving difficult security challenges, mentoring others … across high-security customer environments Act as a senior escalation point for Tier 1 and Tier 2 analysts during active security events Drive proactive threat hunting campaigns to identify emerging threats, vulnerabilities, and anomalous behaviour Develop and improve detection logic, alerting, and monitoring content within SIEM platforms including Elastic ...

monitoring, analysing and responding to security threats, while driving continuous improvement across our security operations capability. Youll play a key role in incident response, threat intelligence, vulnerability management and ensuring effective use of our security tools and processes to reduce risk across the technology estate. Key responsibilities Monitor … activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics, KPIs and operational performance Technical expertise Good understanding ...

Head of Marketing – Cyber Threat Intelligence & Managed Detection & Response Location: UK (Hybrid). Sector: Cybersecurity Consultancy. Reporting to: Senior Leadership. Package: c£90-100,000 Basic + Benefits. The Opportunity This is a rare, genuinely greenfield opportunity to build a marketing function from the ground … most credible and operationally grounded cybersecurity consultancies. Founded in 2019 and built on a foundation of military intelligence, law enforcement and national security expertise, this business has earned a reputation as a trusted, differentiated operator in a crowded market. Following a significant investment from a leading UK private equity ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst Experience working with Splunk Familiarity with … threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols and attacker ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst or equivalent Experience working with Splunk … Familiarity with threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst or equivalent Experience working with Splunk … Familiarity with threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst or equivalent Experience working with Splunk … Familiarity with threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst or equivalent Experience working with Splunk … Familiarity with threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols ...

client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 2+ years experience as a Cyber Security Operations Analyst or equivalent Experience working with Splunk … Familiarity with threat intelligence frameworks and methodologies End-to-end incident response lifecycle experience Detection engineering and alert development expertise. Strong scripting or programming skills (Python, Bash, C/C++, Java). Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics. Understanding of common network protocols ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

holistic view of the organisation's security posture. Present findings and recommendations to senior leadership and governance forums. Collaborate with internal teams (e.g., threat intelligence, compliance, audit) to ensure assurance activities reflect current threat landscapes. Act as a primary interface for business units, ensuring alignment between assurance … technical and business information to assess risk. Experience in supply chain security assurance. Knowledge of secure by design principles and accreditation processes. Understanding of threat intelligence and its application in assurance. Experience working in regulated or high-assurance environments Familiarity with risk management tools and methodologies. What ...

quality technical documentation, implementation guides, test results and operational procedures. What we're looking for 3+ years' experience in Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence … CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity & Access Management (Entra ID, Active Directory or similar) Threat Intelligence platforms AI-enabled Security Operations tools *Rates depend on experience and client requirements ...

quality technical documentation, implementation guides, test results and operational procedures. What we're looking for 3+ years' experience in Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence … CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity & Access Management (Entra ID, Active Directory or similar) Threat Intelligence platforms AI-enabled Security Operations tools *Rates depend on experience and client requirements ...

deliver high-quality detections across Microsoft Sentinel and Splunk, helping protect critical systems and clients in real time. If you thrive on turning threat intelligence into actionable detection logicand enjoy working at the heart of a live SOCthis is your opportunity to make a real impact. This role … improve SOC efficiency. Validate detections against telemetry and ensure accuracy. Support onboarding of log sources across cloud, infrastructure, identity and network. Collaborate with SOC, Threat Intelligence and Security Architecture teams. Investigate detection issues and improve performance and reliability. Drive continuous improvement using automation, scripting and best practice. Ensure ...