51 to 75 of 146 Threat Intelligence Jobs in the UK

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … release or change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with deep knowledge of cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Core Duties Knowledge and experience of design, build, deployment ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

network, application, data, and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero‐trust security models and continuous verification frameworks. Cyber Threat & Risk Management – Assess cyber threat landscape and design threat‐informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence, and cyber defence capabilities. Architect security monitoring, detection, and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation – Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting ISMS compliance. Architect compliance and audit capabilities for regulatory ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

Required Skills Optional Skills Accepting Feedback Accepting Feedback Active Listening Analytical Thinking Cloud Security Coaching and Feedback Communication Conducting Research Creativity Cyber Defense Cyber Threat Intelligence Embracing Change Emotional Regulation Empathy Encryption Inclusion Influence Information Security Intellectual Curiosity Intelligence Analysis Intelligence Report Intrusion Detection Intrusion Detection ...

threats. Lead the vulnerability management process to ensure that vulnerabilities are detected, escalated, and remediated for both the customer and corporate environments. Lead the Threat Intelligence process, document and report out to key stakeholders. Work with Engineering, DevSecOps, Software and IT teams in relation to identifying and patching … shifting priorities. Proven ability to work independently on resolving complex issues, assisted by the Information Security Manager, IT and DevSecOps. Excellent experience with the Threat Landscape, Threat Hunting, Adversary Methodologies, Cyber Defence and MITRE attack framework. Significant previous experience working in a lead role ...

British Airways is seeking a Cyber Threat Lead to identify and report cyber threats relevant to BA, covering both tactical and strategic requirements. You will act as the technical leader for threat identification across BA and support threat intelligence management to ensure timely, specific information … decision making. In this role, you will engage with IAG, industry peers, and government bodies, manage intelligence requirements, and drive end-to-end intelligence lifecycle. #J-18808-Ljbffr ...

technology teams. Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes. Partner with engineering leadership to ensure risk‐driven supply chain … with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it. Detection, Response & SOC Partnership Own the strategic relationship with our 24/7 outsourced SOC holding them ...

following established playbooks and incident response processes. Manage email security operations across Mimecast and Abnormal, including releases, journal pulls, and reported-phishing investigations. Monitor threat feeds and threat intelligence, applying relevant findings to the environment. Maintain and tune detections, correlation rules, and Cortex XSOAR playbooks to reduce … management across Windows and macOS (Intune, Jamf). Strong knowledge of cloud environments, including Microsoft Azure, AWS, and Microsoft 365. Understanding of layered security, threat hunting, and incident response. Qualifications A degree in a computer-related subject, or equivalent experience in cyber security. Holding, or actively working towards, relevant ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

across customer environments. Develop, tune, and maintain SIEM detection rules in Microsoft Sentinel and IBM QRadar , including supporting rule migration between platforms. Conduct proactive threat hunting, threat intelligence research, and root cause analysis of security incidents. Lead the development of SOC processes, playbooks, and continuous service improvements. … email security platforms. Strong working knowledge of KQL (Kusto Query Language) and AQL (Ariel Query Language) . Experience developing SIEM detection rules, threat hunting, and security monitoring use cases. Experience mentoring and supporting SOC analysts, with the ability to lead by example and drive continuous improvement. ...

British Airways is seeking a Cyber Threat Lead to join our security team in the UK. You will report to the Cyber Threat Intelligence Manager and work with IAG and BA business units to identify, understand and respond to cyber threats and emerging vulnerabilities. You will lead … threat identification, support incident response, and collaborate with industry peers and government bodies to deliver end-to-end threat intelligence. Strong analytical and communication skills are essential. #J-18808-Ljbffr ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

Threat and Vulnerability Management Lead Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time Competitive Salary available, depending on experience 37.5 hours per week At Nuffield Health, our mission to build a healthier nation is powered by passionate people … make a difference every day. We are seeking an experienced Threat and Vulnerability Management Lead to join our growing Cyber Security team and take ownership of our enterprise-wide Threat and Vulnerability Management function. This is an exciting opportunity to shape and mature our vulnerability management capability, driving ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

Vice President Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Develop and maintain threat models for Mizuho information assets and services. … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

workflows, and knowledge-base content to improve consistency and operational readiness. Provide technical leadership in intrusion analysis, incident response, digital forensics, malware investigations, and threat hunting activities. Lead response efforts during significant security incidents, ensuring effective coordination, decision-making, and ownership through resolution. Stay current on threat actor … tactics, techniques, and procedures (TTPs), leveraging threat intelligence to enhance investigations, detections, and response capabilities. Partner with Engineering, Labs, and Content teams to improve detection quality, reduce false positives, and address recurring investigation gaps. What you will bring Up to 12 years of total work experience. 5+ years ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

excellent opportunity for someone who thrives in leading high-performing cyber security operations teams, driving continuous improvement, and responding to an evolving threat landscape. Candidates with experience gained within financial services, banking, insurance, defence, government or other highly regulated industries are particularly encouraged to apply. The Role … effective use and optimisation of SIEM, EDR/XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams to enhance detection capabilities. Manage relationships with third-party security providers and technology vendors. Produce operational ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

Security strategy, maintain a clear cyber roadmap, control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection … response times Cyber Incident Response: Own cyber incident response playbooks and readiness for realistic scenarios including ransomware, data loss, account compromise, supplier failure, insider threat and social engineering. Coordinate technical response, evidence gathering, communications input, lessons learned and remediation tracking Operational Resilience: Work with IT, Risk, Compliance and business ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. The opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with ...