101 to 125 of 201 Threat Intelligence Jobs in the UK excluding London

analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation and response, intrusion detection, forensics, protective security and secure operations. Ability to make timely decisions ...

analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation and response, intrusion detection, forensics, protective security and secure operations. Ability to make timely decisions ...

remediation Manage vulnerability scanning, penetration testing follow-ups, and patching coordination Support and review access and access control policies, including privileged access controls. Monitor Threat Intelligence to ensure threats to Xeinadin devices and systems are mitigated in a timely manner. Technical Security Controls Implement, support and manage security ...

will contribute to post‐incident reviews by sharing findings and identifying opportunities to improve detection, response, or operational processes. You will also apply threat intelligence provided by the SOC to support alert analysis and investigations. Operational discipline is essential. You will follow defined SOC procedures, documentation standards ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

responsibilities include: Leading investigations into security alerts, incidents and emerging threats, ensuring effective containment, eradication and recovery activities. Analysing security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. Conducting threat hunting, forensic investigations and proactive cyber defence activities to identify previously … resilience of one of the UK's largest organisations. What you'll need Strong experience within a Security Operations Centre, Cyber Defence, Incident Response, Threat Hunting or a related cyber security environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding ...

incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving threat landscape and recommend improvements. Provide cyber security guidance to projects, services and operational teams. Support risk management, assurance, audit and compliance activities. Develop … will bring: Experience in incident detection, investigation, response and recovery. Strong knowledge of security technologies, cloud platforms and security architecture. Experience in vulnerability management, threat intelligence and security improvement activities. The ability to assess and communicate cyber risk effectively. Strong analytical, problem‐solving and stakeholder engagement skills. Please ...

compromise, and policy violations correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity. * Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. * Work with Detection and Automation team … 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/ ...

Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

industry-leading frameworks, cutting-edge tooling and experienced security professionals – building skills and credibility that will serve you throughout your career. Key responsibilities:Reviewing threat intelligence feeds and penetration test findings to identify and prioritise use cases for Breach and Attack Simulation (BAS), ensuring our testing reflects … real-world threat landscape.Supporting penetration testing engagements by validating that scope is appropriate and that reports meet AXA's standards, giving you a front-row seat to a wide variety of technical assessments.Reviewing remediation plans arising from penetration testing activity, ensuring that proposed fixes will genuinely address identified issues ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

security and implementing security within cloud environments Knowledge of security technologies including endpoint, data and mobile security Understanding of SIEM, SOC, vulnerability management and threat intelligence capabilities Strong communication skills with the ability to explain security risks to technical and non technical stakeholders CISSP, CISM ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … teams, you’ll influence how security is designed, embedded and continuously improved.You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways of working ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good understanding ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Consultant, you'll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you'll operate at the intersection of threat intelligence, incident response and supplier risk. You'll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You'll play a key role in strengthening our approach to supply chain threat management-supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you'll operate within agile ways of working ...

detection capabilities . Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud … security tools . Support incident response, threat hunting and security investigations . Develop dashboards, reporting and metrics to improve SOC performance. Lead AI-driven security initiatives , including AI agents and agentic workflows for alert triage, investigation and response. Work closely with Security, Infrastructure, Cloud and Application teams. About ...