51 to 75 of 594 Threat Intelligence Jobs in the UK

Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. We build, tune, and maintain the detection content that security operation teams depend on, and hunt proactively for threats that existing controls … catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Job Description Job Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. ...

CISO, Cyber Operations.You will own the full incident response lifecycle, run follow-the-sun security operations across AMER, EMEA, and APAC, direct the cyber threat intelligence program, and drive the conversion of that intelligence into the detection coverage and defensive architecture that protect Kyndryl's global enterprise … preservation standards maintained throughout.Coordinate with the Incident Commander function with clear escalation authorities, runbooks, and cross-functional coordination protocols for cybersecurity incidents.Direct the Cyber Threat Intelligence program and own the intelligence-to-defense loop: convert prioritized adversary intelligence into detection requirements, control coverage decisions, and changes ...

entirely new network for the world's money. For everyone, everywhere. More about our mission and what we offer . We are seeking an Intelligence Collections Specialist to play a pivotal role in developing, scaling, and operating our industry-leading Intelligence Collection Framework (ICF). As a foundational … member of the newly established Threat Intelligence Unit (TIU), you will be responsible for identifying and mitigating threats before they impact our network. Your Mission: Fraud and financial crime do not originate at Wise; they are conceptualized, tested, and commercialized within external threat-actor ecosystems long before ...

learn and collaborate with some of the most talented people in the industry.Rockstar is on the lookout for a passionate Associate Principal Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service … titles as well as the organization at large. The successful candidate will have a strong understanding of intelligence and investigations principles, excellent analytical skills, and the ability to stay ahead of emerging threats. This is a full-time, permanent and in-office position based in Rockstar’s unique game ...

talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This … Service Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service ...

team, you’ll help safeguard our clients and data while advancing your career. Experience a supportive culture where your contributions matter.As a Cyber Intelligence Director (Executive Director) at JPMorganChase within the EMEA Threat Intelligence team, you will identify and analyze external cyber threats to protect our firm … interests. You will collaborate with teams in North America and APAC, prioritizing intelligence streams and allocating resources for maximum impact. Your role enables secure business initiatives and strengthens our threat detection and response capabilities. You will help shape policies and frameworks that drive our cybersecurity strategy. We foster ...

fast-growing Blue Team within a dynamic Cyber Practice. This senior role offers the chance to work on high-profile client engagements, delivering threat detection, monitoring, incident response, and security operations expertise. The role is ideal for a self-motivated professional with strong technical skills, inquisitive thinking … passion for protecting enterprise systems from evolving cyber threats.The RoleThe Cyber Security Operations Specialist will use advanced tools and threat intelligence to ensure effective incident detection and response across client environments. Working closely with security analysts and wider teams, the role combines detection engineering, monitoring, incident response ...

fast-growing Blue Team within a dynamic Cyber Practice. This senior role offers the chance to work on high-profile client engagements, delivering threat detection, monitoring, incident response, and security operations expertise. The role is ideal for a self-motivated professional with strong technical skills, inquisitive thinking … passion for protecting enterprise systems from evolving cyber threats. The Role The Cyber Security Operations Specialist will use advanced tools and threat intelligence to ensure effective incident detection and response across client environments. Working closely with security analysts and wider teams, the role combines detection engineering, monitoring, incident ...

shedding light on external threats. We enable cybersecurity teams to proactively detect high-risk external exposure across the dark and clear web, before threat actors have a chance to leverage it. We unify the core functionalities of cyber threat intelligence and external attack surface management into … Develop use‐cases, technical demos, and manage Proof of Concepts (POCs) end-to-end Build strong relationships with technical stakeholders in customer organizations Deliver threat briefings to sector ISACs (FS-ISAC, H-ISAC, RH-ISAC), connecting active cybercrime campaigns to the exposure member organizations actually face ...

Lloyds Banking Group is seeking an experienced Cyber Threat Intelligence professional to lead a small team and advance the Group’s Threat Intelligence Platform (TIP) through automation and AI enrichment. You will oversee CTI activities, collaborate with stakeholders, and ensure intelligence informs security operations, decision … making, and technology platforms across the organisation. The role blends hands-on threat intelligence with strategic TIP development in a large, inclusive employer. #J-18808-Ljbffr ...

Cyber Threat Intelligence (CTI) Delivery Lead Reading/Havant (Hybrid) | 6 Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security … technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme Lead or Cyber ...

Cyber Threat Intelligence (CTI) Delivery Lead Reading/Havant (Hybrid) | 6 Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security … technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme Lead or Cyber ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1-2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management … capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month road map. ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1–2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management … capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap. The immediate ...

Architect, you will support Account Managers and customers across three key solution domains:SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence.Exposure Management – vulnerability management, CTEM and attack path analysis.Email Security.You will work closely with our Cyber Defence Operations Centre (CDOC), representing our Managed … Managed VOC and Threat Intelligence services, and confidently explaining how they deliver security outcomes for customers.While you will support opportunities across the wider security portfolio, your initial area of deeper ownership will be the Microsoft security stack, particularly Microsoft Defender and Microsoft Sentinel.As you develop in the role ...

Architect, you will support Account Managers and customers across three key solution domains: SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence. Exposure Management – vulnerability management, CTEM and attack path analysis. Email Security. You will work closely with our Cyber Defence Operations Centre (CDOC), representing … Managed SOC, Managed VOC and Threat Intelligence services, and confidently explaining how they deliver security outcomes for customers. While you will support opportunities across the wider security portfolio, your initial area of deeper ownership will be the Microsoft security stack, particularly Microsoft Defender and Microsoft Sentinel. ...

Google Unified Security (GUS) engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise … support the deployment of secure cloud foundation blueprints. Support clients with secure AI workloads including the use of model armor and agent identities. Google Threat Intelligence Operationalise Google Threat Intelligence inside SecOps — IoC matching, Applied Threat Intelligence, and curated detections. Build threat‐informed ...

programme within a global enterprise environment. This role is ideal for a senior, hands‐on Security Operations professional who combines strong incident investigation and threat analysis skills with experience in detection engineering, operational process development, and stakeholder engagement. Working as a key bridge between regional and global Security Operations … expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection gaps, duplicate content and optimisation opportunities through detection engineering, threat hunting, and alert tuning activities. ...

Google Unified Security (GUS) engagements across the full stack - from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/CD pipelines, secure landing zones and cloud posture reviews. Expertise … support the deployment of secure cloud foundation blueprints. Support clients with secure AI workload including the use of model armor and agent identities. Google Threat Intelligence Operationalise Google Threat Intelligence inside SecOps — IoC matching, Applied Threat Intelligence, and curated detections Build threat-informed ...

King's Cross, one to three if you want it Building the systems that analyse malware, not analysing it by hand Malware and threat research background, plus real software engineering, plus LLM tooling Three to five years experience, they are hiring on talent not seniority Series A deep tech … want someone to analyse malware, they want someone to build the systems that analyse malware. The person they are looking for has come from threat research, threat intelligence or malware analysis, and has already started automating their own workflows using AI and large language models. Someone ...

Cyber Security Analyst – Threat Intelligence SME12 monthsHybrid – London740 per day, Inside IR35Proven Cyber Security Analyst – Threat Intelligence SME required for our large Government Department. Will conduct safe, simulated cyber-attack simulations against our technology estates, acting as a real-world adversary might, to test our defences … highlight weaknesses and contribute cyber security expertise and insight in support of the department’s strategic security decision-making functions.Key ResponsibilitiesDesigning and executing threat intelligence-based full-spectrum cyber-attack simulations, including long-term campaign planning, persistence, and post-exploitation operations against the organisation.Adopting a red team approach ...

role is based.We are looking for an experienced and credible cyber security leader to join our Information & Cyber Security function as Director, Third Party Intelligence & Incident Investigations. This is a high-impact leadership role within Client & Third Party Security, a specialist team responsible for helping the Bank understand, assess … role offers significant visibility, senior stakeholder engagement and the opportunity to lead a team of four direct reports while supporting the Bank’s broader threat-led, risk-focused and intelligence-enabled approach to third party security risk management.Key ResponsibilitiesLead and mature the Bank’s third party incident investigations ...

Raise Our Bar | Move First. Learn Fast Job Description:At Darktrace, we're looking for a curious and driven Threat Research Analyst to join our Malware Team. This is an exciting opportunity for someone with a strong technical foundation and a passion for cyber threat research and data … analysis of cyber threats, malware, and adversary tactics, techniques, and procedures (TTPs).Proactively hunting for emerging threats and identifying new attack trends.Producing high-quality threat intelligence reports, blogs, and research publications.Developing data-driven methodologies to support threat hunting and intelligence production.Presenting research findings internally and externally ...

talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This … Service Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service ...

controls across internal systems, third parties and public networks. Provide governance and oversight to cyber security operations and liaise with specialist technical teams. Coordinate threat intelligence and vulnerability management, remediation SLAs and external providers. Support incident response, crisis management, operational resilience, business continuity and IT disaster recovery, including … regulation, including ISO 27001:2022, NIST CSF, UK GDPR, and awareness of FCA/PRA and payment scheme expectations. Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and incident/breach management, with the ability to interpret events and drive effective remediation. Working knowledge ...