76 to 100 of 136 Threat Intelligence Jobs in the UK excluding London

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing technology … teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation ...

Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre Strong experience with … client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

include: Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements. Monitor, triage and investigate security alerts/reports. Analyse security event data, including … firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. For more information or to process your application, please apply ...

trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these via the appropriate channels and track through to remediation. Monitoring and gathering Threat intelligence and coordinating subsequent Threat Hunting. Assess security threats from multiple sources and plan mitigation/remediation. Gather relevant data, analyse ...

procedures.The Successful ApplicantPrevious experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.Experience investigating security incidents and coordinating … technologies.Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.Experience securing cloud-based and enterprise collaboration environments.Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.Strong analytical and problem-solving skills with the ability to assess security risks effectively.A proactive approach ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

. The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated workflows, and help shape the future direction … technologies. Scripting and automation expertise (Python, Go, APIs). Experience with cloud platforms such as Azure, AWS or GCP. Knowledge of vulnerability management and threat intelligence integrations. Strong communication, analytical and problem-solving skills. Eligibility for UK security clearance desirable. What's on Offer 2 Days ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

understood, tracked and reported. Contribute to security governance, compliance activities and external assessments, including alignment with frameworks such as ISO 27001 and NIST. Use threat intelligence, testing outcomes and assurance data to help shape priorities, improve resilience and inform senior stakeholders. Support incident preparedness, including investigations and exercises … that test our ability to respond effectively. Help shape our security strategy, monitor emerging threats and intelligence, identifying opportunities to strengthen our approach through security automation. This position has been classified as a hybrid role, requiring the selected candidate to typically spend 40-60% of their time collaborating ...

Experience of line managing, supervising, supporting, coaching or providing technical direction to cyber security or technical staff. Experience of SIEM, Managed Detection and Response, threat intelligence, supplier assurance or third-party cyber security activities. Skills and Knowledge Essential Good understanding of cyber security principles and enterprise security controls ...

with cross-functional teams to influence project outcomes and enhance solution quality. Experience & Skills Advanced proficiency in Cybersecurity is required. Advanced proficiency in Cyber Threat Intelligence is suggested. Advanced proficiency in Threat Modeling is suggested. ...

vendors. Key Responsibilities Define and lead the CSOC strategy, operations, and governance. Take command of major incident response, managing remediation and stakeholder communication. Oversee threat intelligence, vulnerability management, and security monitoring capabilities. Manage relationships with external agencies, Managed Security Service Providers (MSSPs), and technology partners. What We Need ...

design and run a mature 24/7 security monitoring program that reduces dwell time and improves detection coverage. Hands-on experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR ...

update the risk assessments for our secure networks, communicate implications to relevant stakeholders, and track progress against action itemsStay up to date with the threat landscape affecting our secure networks, using a range of sources such as the corporate Threat Intelligence teamTrack progress made by a range ...

risk assessments for our secure networks, communicate implications to relevant stakeholders, and track progress against action items Stay up to date with the threat landscape affecting our secure networks, using a range of sources such as the corporate Threat Intelligence team Track progress made by a range ...

your contribution is always valued.Why this job mattersAs a key element of critical national infrastructure, telecommunications operators are interwoven into a severe and relentless threat landscape. In a role like no other, dealing with the most advanced and harmful adversaries is our daily routine. Our unique and specialist team … model, TCP/IP suite, routing, subnetting etc. You may have experience using packet analysis tools, intrusion detection systems, SIEM platforms and threat intelligence platforms.You may have applied your analytical skills in environments such as cyber security, signalling, digital forensics, or network administration. Your experience might include areas ...

27001.The Technology & Data Risk Manager also helps the organisation anticipate and respond to emerging risks and opportunities, including developments in artificial intelligence, evolving cyber threats, and third-party dependencies. Through effective stakeholder engagement, assurance activity and risk reporting, the role contributes to maintaining a resilient, compliant, and well-controlled … assurance. Knowledge of AI risk, data ethics or emerging technology governance. Working knowledge of UK GDPR and the Data Protection Act 2018. Knowledge of threat intelligence, vulnerability disclosure, and security testing approaches. Relevant professional certifications (e.g. CISM, CISSP, ISO 27001 LI/LA, CRISC, ITIL). ...

triaging incidents and guiding response actions. Ability to translate technical findings into clear, actionable output for both technical and non technical audiences. Confidence interpreting threat intelligence and applying it meaningfully across a client security estate. Comfortable producing operational and service delivery reports. What can we offer you? Healthcare ...

improvement of OT cyber monitoring, detection, and alerting capabilities across operational environments.Develop and influence OT security strategies, roadmaps, and capability plans, aligning operational risks, threat intelligence, regulatory requirements, and engineering priorities.Provide expert OT cyber security guidance and risk-based recommendations to engineering, operational, cyber security, and supplier stakeholders.Act … teams, ensuring OT-specific risks and operational considerations are reflected in security processes.Apply specialist knowledge of OT monitoring technologies, industrial control systems, and cyber threat detection to improve visibility and resilience across critical assets.Drive the development of detection use cases, alert tuning, monitoring enhancements, reporting, and performance metrics ...

deployment activities. Document implementation requirements, testing results, architecture components, and operational procedures. Your Profile Essential Skills & Experience Solid experience in cybersecurity engineering, security operations, threat detection, or security platform implementation roles. Experience implementing and integrating enterprise security technologies. Familiarity with SIEM, SOAR, EDR, threat intelligence platforms ...

lead and manage a team * In-depth knowledge of incident management processes * Proven experience delivering an effective security monitoring capability * Proven experience delivering threat intelligence and assessment * Proven experience operating cyber security solutions and tools * Demonstrated experience in managing relationships with external vendors, managed security service providers (MSSPs ...

hybrid cloud and on premises environment, triaging and investigating alerts, and supporting coordinated incident response activities. You will operate our vulnerability management processes, translate threat intelligence into actionable defences, and contribute to the improvement of detection content and security controls. You will also work closely with IT colleagues ...

solving problems, collaborating with experts, and making a real impact on cybersecurity, this could be the perfect opportunity for you.You'll monitor vulnerability and threat intelligence sources, translating complex security information into clear, actionable insights for technical teams.You'll conduct internal IT Health Checks (ITHCs), working with security ...