51 to 75 of 256 Threat Intelligence Jobs in the UK

between the managed Security Operations Centre (SOC) provider, internal security teams, and wider business stakeholders. The successful contractor will support security monitoring, incident management, threat analysis, and the ongoing improvement of security operations processes. This is an excellent opportunity for a hands-on security professional with strong stakeholder engagement … provider. Investigate, triage, and track security incidents through to resolution. Support the investigation, containment, remediation, and post-incident review of security events. Analyse threat intelligence and provide contextual insight into threats relevant to the organisation. Assess security risks associated with new applications, software deployments, and browser extensions. Maintain ...

cloud, and application environments Prioritize vulnerabilities based on risk, exploitability, and business context, partnering with asset owners to track remediation through closure Apply cyber threat intelligence—including active exploitation, threat actor targeting, and emerging tactics, techniques, and procedures—to strengthen prioritization and risk scoring Develop mitigation strategies … Bring Experience operating vulnerability discovery and assessment tools; five or more years of hands-on vulnerability management experience with meaningful exposure to cyber threat intelligence is preferred Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit ...

DescriptionKey Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during … cyber security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date. Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances. Support cyber threat ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join … experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling. What ...

DescriptionRole - Threat Modeler (TM)Technology - Threat Modeling, Cloud Security, Infrastructure as Code, PythonLocation – Belfast/LondonCompensation - Competitive (including bonus)Job DescriptionWe are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role … security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams.Key ResponsibilitiesPerform threat modeling using a documented and repeatable process.Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.Manage the lifecycle ...

Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing- Experience managing competing priorities and using metrics to drive business decisions- Bachelor's degree or above in Computer Science … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Experience in one or more of the following: application security frameworks, security code reviews, incident ...

Technology teams offer an environment filled with exciting challenges, from supporting and enhancing legacy systems to implementing cutting-edge technologies such as Artificial Intelligence, Machine Learning and highly automated trading applications. Your role in the teamBerenberg, one of Europe's leading investment banks, is seeking a Senior SOC Analyst … bank's monitoring and detection capabilities, helping to maintain a proactive and resilient security posture. You will also have the opportunity to expand our threat intelligence capabilities and mentor other team members, sharing best practices and driving continuous improvement across our incident response processes. You will ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...

Working in a client-facing consultancy role, you will provide operational security management, oversight and GRC advisory services. You will help clients translate business, threat and regulatory requirements into practical operational risk decisions and security improvements. Security governance and oversight: Establish, operate and improve proportionate security governance, policies, standards … assessed, prioritised, assigned and progressed to closure. Vulnerability and exposure oversight: Review vulnerability and security testing outputs, challenge prioritisation using asset criticality, exploitability, threat intelligence and business impact, and monitor remediation, exceptions and risk acceptance. Threat and alert oversight: Work with security operations, technology and service teams ...

Analyst. This role focuses on improving SIEM detection and monitoring capabilities. You will develop, test, maintain and improve SIEM monitoring and detection content, using threat intelligence and operational insights to improve detection coverage, accuracy and the identification of cyber threats.You will apply and refine threat-informed detection … agreed standards, providing advice on mitigation, escalation and risk reduction.Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.Support incident response ...

DescriptionRole - Threat Modeler (TM)Technology - Threat Modeling, Cloud Security, Infrastructure as Code, PythonLocation – Belfast/LondonCompensation - Competitive (including bonus)Job DescriptionWe are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role … cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams. Key ResponsibilitiesPerform threat modeling using a documented and repeatable process. Identify threats and specify effective mitigating security controls while maintaining a high standard of quality. Manage the lifecycle ...

attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote … environments. You will work closely with other experienced industrial defenders and mentor junior analysts to investigate anomalous network behaviors, validate detection triggers, and support threat hunters and incident responders with high-quality escalations. You will also operate and maintain the Dragos platform on behalf of customers, helping manage vulnerabilities ...

response to cyber security threats, vulnerabilities, and security incidents across the organisation. The role holder will leverage a broad understanding of security technologies, threat intelligence, and security operations processes to identify, assess, and mitigate cyber risks.The role requires strong analytical and technical capabilities to correlate data from multiple … security platforms and business systems, enabling effective threat detection, risk assessment, and incident management. The role holder will lead the development, optimisation, and tuning of security monitoring and detection capabilities, ensuring cyber threats are identified and responded to in a timely and effective manner.The Senior Cyber Security Technical Specialist ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

data science and machine learning to cyber security problems. The role will focus on developing security analytics and Security Knowledge Graph capabilities to improve threat detection, risk prioritisation and security decision-making. Key Responsibilities Develop machine learning and statistical models for threat detection, anomaly detection and security risk … analytics. Design features and analytical methods using security telemetry, threat intelligence and enterprise data. Build and use Security Knowledge Graphs to connect entities, events, vulnerabilities and attack paths. Evaluate model accuracy, bias, explainability, robustness and operational effectiveness. Partner with security analysts and engineers to productionise analytical use cases. ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing … security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats. Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents. Oversee threat intelligence programmes, identifying ...

successful candidate will have an incident response background; technical expertise spanning infrastructure, web servers and cloud environments; a deep understanding of current and emerging threat actors; and a genuine interest in developing tooling that improves the delivery of investigations. Please note that this role will require you to work … affecting SaaS platforms and software development environments (e.g. source code repositories and CI/CD pipelines), drawing on an understanding of common development practices. Threat hunting and identification of attacker activity, using EDR and agent-led forensic tooling, to inform the investigation and containment activities Perform live compromise assessments ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership.Key responsibilities:This role will provide you the opportunity to lead key activities to progress your … capability through coaching, review and structured feedback.Represent the area in CSO governance and cross-functional forums.Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership. Key responsibilities: This role will provide you the opportunity to lead key activities to progress … coaching, review and structured feedback. Represent the area in CSO governance and cross-functional forums. Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

full contact details are readily available on our website).Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

Central LondonAs a Security Operations intern, you'll gain first-hand experience investigating security alerts and incidents. You'll support senior team members across threat intelligence, detection engineering, forensics and malware analysis. Working alongside experienced security engineers, you'll also be paired with a mentor to support your … range of systems and platforms, including Windows, Linux, Kubernetes and cloud environmentsLeading the triage and coordination of security incidents raised across the organisationConducting threat hunting across a large, centralised data lakeUsing threat intelligence sources to enhance and tune existing detection capabilitiesWorking with our internally developed interface backed ...

ongoing threats, manage vulnerabilities and help maintain a secure global technology environment. Key ResponsibilitiesDevelop and maintain a range of cyber security solutions and controls.Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required.Maintain vulnerability and remediation records to support audit compliance … Intune, Conditional Access, Identity Protection and Purview.Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM.Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup ...