16 of 16 Threat Intelligence Jobs in the South West

understanding of Team application domain and technology used. Level 3 should be able to give effort estimates for simple changes.Job DescriptionJOB TITLE: Software Engineer (Threat Intelligence Platforms) SALARY: 47,120 - 58,900LOCATION: Edinburgh, Bristol or Manchester WORKING PATTERN: Our work style is hybrid, which involves spending at least … days per week, or 40% of our time, at our office location. About this OpportunityOur Threat Intelligence Engineering team builds and maintains the platforms, integrations and automation that help turn intelligence into action. We work across a range of security and intelligence tooling, connecting data sources ...

lead an incident bridge. You will run a global function and own Security Operations end to end: the SOC, incident response, detection engineering and threat intelligence, along with the people and platforms behind them. THE CHALLENGE:Own incident response. Preparation, triage, containment, eradication, and the post-incident reviews … drive the coverage roadmap across our cloud estate and applications, and you know the difference between a thousand alerts and one good one. Make threat intelligence earn its keep. Build an intel capability that changes what we hunt for, what we detect, and what we brief to leadership. ...

advanced queries, and applying behavioural and anomaly-detection techniques. Leveraging commercial and open-source technologies, including AI-enabled tools, to automate repetitive tasks, enhance threat detection, and improve response efficiency. Identifying opportunities to automate SOC processes and improve operational efficiency. Assessing programme strengths and weaknesses and recommending AI solutions … correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments. Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments. Mentoring junior analysts and supporting the development of the wider SOC team's technical capabilities. ...

from Cheltenham. This is a rare opportunity to combine technical cyber expertise with leadership responsibility. You'll lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities. … this role offers the opportunity to make a meaningful impact every day. What You'll Do Lead, mentor and develop a team of cyber threat analysts, providing direction, coaching and day-to-day operational oversight. Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage ...

eradication, recovery and escalation. Develop and optimise SIEM detection rules, EDR policies and security monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. Investigate threats using frameworks such as MITRE ATT&CK. Work closely with internal IT, engineering and security teams, alongside … Experience investigating security incidents across cloud and on-premise environments . Knowledge of Windows environments, with working knowledge of Linux/Unix. Understanding of threat intelligence, IOCs, TTPs and the MITRE ATT&CK framework . Experience improving detection logic, alert quality and security controls. Strong stakeholder communication ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

prioritisation, remediation and reporting. Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature distribution. Establish secure mechanisms for threat intelligence ingestion and data transfer within disconnected environments. Define and implement vulnerability scanning regimes and remediation processes. Advise on endpoint hardening, firewall rules … Endpoint hardening and security controls Experience working within offline/air-gapped environments. Strong understanding of: Secure patching and update models, AV signature management, Threat intelligence management, Controlled data transfer mechanisms and Vulnerability assessment and remediation Experience producing formal technical documentation, including High-Level Designs (HLDs), Low-Level ...

will collaborate with cross-functional teams to create innovative strategies and develop programs that drive sustainable effectiveness. As a part of the GSRS Global Intelligence, your mission is to inform business decisions with trusted security risk analysis to protect Alphabet's people, property, and ideas. In this role … will join the Leadership Support Services Intelligence Team, a varied and creative team of analysts who provide timely risk analysis that directly informs critical protective operations, keeping the companys most at-risk employees safe. You will apply well-honed judgement, security acumen, and open-source research skills to conduct ...

Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem‐solving ...

Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

update the risk assessments for our secure networks, communicate implications to relevant stakeholders, and track progress against action itemsStay up to date with the threat landscape affecting our secure networks, using a range of sources such as the corporate Threat Intelligence teamTrack progress made by a range ...

Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as requiredWork closely with other interdependent processes such as Threat Intelligence, Incident Management, Site security management, audits, business management network process and BCP/DR processConduct/support educational workshops, training and awareness ...

appropriately and practically defend the enterprise in accordance with established policies, procedures, guidelines and practices.Prepare and document standard operating procedures and protocols.Work with the threat intelligence and cyber assurance teams to monitor and research industry information sources, for zero-day threats and vulnerabilities that impact Computershare.Establish and maintain … security protocols, encryption, and authentication methods/excellent troubleshooting skills.Other essential experience:Proven experience as an engineer in InfoSecSIEMData loss preventionCloud securityIDS/IPSEmail threat preventionEndpoint detection and responseIdentity protectionPrivileged password managementIdentity access managementRewards designed for you Flexible work to help you find the best balance between work ...

management information reports. Collaborate with third-party managed services providers to monitor security posture, including integrating additional security monitoring, logging, and alerting capabilities. Use threat intelligence from various sources to identify emerging threats and act as a security escalation point within the team to provide advice, guidance ...

EMEA CSOC Lead to oversee cyber defense operations from Cheltenham, leading analysts and coordinating across UK, Europe and the US. The role blends technical threat hunting with leadership responsibility to protect critical operations. The successful candidate will drive incident response, digital forensics and threat intelligence, while shaping ...

Experienced in responding to security alerts and performing data-based investigations. Experienced in alert rule creation and development (SNORT, YARA, SIEM).Experienced in environment threat modeling. Experienced in identifying and handling security incidents. Preferred Qualifications (Desired Skills/Experience): Experience researching current threats and vulnerabilities to Information Technology systems. … Experience of practical threat hunting experience in a high value information/high threat processing environment dealing with persistent threats. Information Security qualification, Degree-level education in Information Security or related areaCISSP CertificationCREST – Intrusion Analyst, Cyber Threat IntelligenceSANS GNFA, GCIA, GCIHComptia Security+, CySA+Splunk Enterprise Data AdministrationSplunk Enterprise ...