276 to 300 of 487 Threat Intelligence Jobs in the UK

Architect required within Cards and Payments to provide coverage of architectural domains and meet project demand. You will be assigned projects- Resilience and Insider Threat and you will own these projects and you will work with Business Analysts to produce solution designs. The work will be varied, involving some … integration, cloud and on-premise, and associated security best practise, at enterprise-scale. Experience in one or more of the following domains: Physical Security Threat Intelligence Insider Threat Cyber Forensics Resilience Strong technical leadership and communication. Stakeholder management to CxO-level. Some other highly valued skills ...

hackajob is partnering directly with BAE Systems Digital Intelligence to hire for this role. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

Jobtailor is seeking a Cyber Threat Analyst to monitor global threat landscapes, analyse intel from OSINT, dark web sources, and feeds, and support incident response for manufacturing and logistics sectors. You will develop KQL queries for threat hunting, produce actionable reports, and collaborate with SOC teams ...

exclusive discounts & savings To be successful in this role, you will bring significant experience across Cyber Security Operations, Incident Response, Digital Forensics and Threat Detection within a complex enterprise environment. You will be comfortable providing technical leadership, managing complex investigations and influencing stakeholders across both technical and non-technical … senior cyber security specialist, supporting the development of security operations capability while helping to protect Post Office against an evolving cyber threat landscape. In addition to this, the ideal candidate will: Demonstrate substantial experience within Cyber Security Operations, Incident Response, Digital Forensics or IT Security in a large, complex ...

Gurugram, New Delhi, Berlin, Paris and LuxembourgABOUT THE ROLE:The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & ResponseProduct Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design … reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We're proactive in our defence, constantly hacking ourselves to improve our security posture ...

risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. The SOC Team Lead drives performance … operational excellence acrossShared Service’s Cyber Services function. Acting as both a technical escalation point and line manager, they support the team in threat analysis, incident response, and security assurance activities. They foster a proactive culture of cyber hygiene and continuous improvement while collaborating across departments to strengthenShared Service ...

Labs Inc. is seeking a Blockchain Intelligence Analyst to conduct high-judgment investigations using on-chain data, OSINT, and threat intelligence to trace ransomware proceeds and identify threat actor infrastructure. You’ll generate actionable intelligence for investigations and partner with law enforcement and private sector ...

security alerts and incidents Acting as an escalation point for the firm's Managed Security Service Provider Reviewing and refining security detections to improve threat visibility and reduce false positives Monitoring threat intelligence sources and assessing emerging cyber risks Supporting vulnerability identification, prioritisation, remediation and reporting Identifying ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next‐gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

Responsibilities Monitor and analyse security alerts from SIEM and security tooling platforms Perform triage and investigation of security events and potential incidents Conduct threat hunting and identify indicators of compromise Escalate and coordinate incident response activities where required Analyse endpoint, network, and cloud security telemetry Develop and improve detection … rules and use cases Produce detailed investigation and incident reports Collaborate with cyber threat intelligence and incident response teams Support continuous improvement of SOC processes and procedures SOC Analyst - Required Skills and Experience Active DV clearance Experience working within a SOC environment (Level 2 or Level 3 preferred ...

Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead for AI security, helping to establish practical … incidents, working with internal teams, external SOC providers and specialist partners. Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory ...

causeMonitoring and analysing activity across SIEM, EDR and other security platformsIdentifying indicators of compromise, suspicious activity and emerging threatsSupporting incident response and containment activitiesPerforming threat hunting activities to proactively identify potential security risksEscalating significant or complex incidents where appropriateWorking closely with Tier 1 and Tier 3 analysts, incident responders … other technical teamsTuning and improving detection rules and use cases to reduce false positives and improve threat detectionAnalysing logs and security events from endpoints, networks, cloud environments and other infrastructureProducing clear investigation reports and documenting incidents, findings and recommendationsMaintaining awareness of the latest cyber threats, vulnerabilities and attacker techniquesContributing ...

activity across SIEM, EDR and other security platforms Identifying indicators of compromise, suspicious activity and emerging threats Supporting incident response and containment activities Performing threat hunting activities to proactively identify potential security risks Escalating significant or complex incidents where appropriate Working closely with Tier 1 and Tier 3 analysts … incident responders and other technical teams Tuning and improving detection rules and use cases to reduce false positives and improve threat detection Analysing logs and security events from endpoints, networks, cloud environments and other infrastructure Producing clear investigation reports and documenting incidents, findings and recommendations Maintaining awareness ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

hackajob is partnering directly with BAE Systems Digital Intelligence to hire for this role. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good understanding ...

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate ...

Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem‐solving ...

Sentinel, SentinelOne, Netskope, Flashpoint, Wiz or similar tooling. Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines. Working knowledge of DLP and threat intelligence monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics, or LLM‐assisted investigation. Understanding of AI security risks ...

responsibilities include: Leading investigations into security alerts, incidents and emerging threats, ensuring effective containment, eradication and recovery activities. Analysing security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. Conducting threat hunting, forensic investigations and proactive cyber defence activities to identify previously … resilience of one of the UK's largest organisations. What you'll need Strong experience within a Security Operations Centre, Cyber Defence, Incident Response, Threat Hunting or a related cyber security environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding ...

Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security Operations, and Incident Management … fast-paced environment. Key Responsibilities Investigate and respond to cyber security incidents across the enterprise environment. Perform host-based investigations, forensic analysis, and threat containment activities. Monitor and support critical information security technologies operating within a 24/7 environment. Work closely with internal and external stakeholders to support ...

approaches and drive delivery from concept through to operational handover. Youll bring deep, hands-on Security Operations experience across areas such as incident response, threat hunting, digital forensics, malware analysis, network analysis and detection engineering. Using your understanding of the evolving threat landscape, youll translate threat intelligence ...

improvement while driving lessons learned activities Demonstrated integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities Talent management of direct reports with empathy and patience, while developing them … Information Security Professional Information System Administration/Engineering 5+ years’ collective experience between the following roles: Security Operations Center (SOC) Analyst/Manager Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions Attack & Penetration Testing (Active Defense) eDiscovery or related role performing forensic functions 3+ years ...

incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving threat landscape and recommend improvements. • Provide cyber security guidance to projects, services and operational teams. • Support risk management, assurance, audit and compliance activities. • Develop … will bring: • Experience in incident detection, investigation, response and recovery. • Strong knowledge of security technologies, cloud platforms and security architecture. • Experience in vulnerability management, threat intelligence and security improvement activities. • The ability to assess and communicate cyber risk effectively. • Strong analytical, problem-solving and stakeholder engagement skills. ...

incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving threat landscape and recommend improvements. • Provide cyber security guidance to projects, services and operational teams. • Support risk management, assurance, audit and compliance activities. • Develop … will bring: • Experience in incident detection, investigation, response and recovery. • Strong knowledge of security technologies, cloud platforms and security architecture. • Experience in vulnerability management, threat intelligence and security improvement activities. • The ability to assess and communicate cyber risk effectively. • Strong analytical, problem-solving and stakeholder engagement skills. ...