201 to 225 of 411 Threat Intelligence Jobs

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

governance, operational resilience and third-party risk management. Sufficient technical cyber security knowledge to engage with and challenge Security Operations teams on incidents, vulnerabilities, threat intelligence, cloud security and security controls. Experience producing management reports. Strong stakeholder management skills with the confidence to challenge constructively and influence decisions. … Technical Knowledge Expected Security Operations (SOC), SIEM and incident response. Vulnerability management and threat intelligence. Identity & Access Management (IAM) and privileged access controls. Data protection and DLP controls. Cloud security, particularly AWS. Security monitoring, detection and response processes. Security architecture and control design principles. ...

governance, operational resilience and third-party risk management. Sufficient technical cyber security knowledge to engage with and challenge Security Operations teams on incidents, vulnerabilities, threat intelligence, cloud security and security controls. Experience producing management reports. Strong stakeholder management skills with the confidence to challenge constructively and influence decisions. … Technical Knowledge Expected Security Operations (SOC), SIEM and incident response. Vulnerability management and threat intelligence. Identity & Access Management (IAM) and privileged access controls. Data protection and DLP controls. Cloud security, particularly AWS. Security monitoring, detection and response processes. Security architecture and control design principles. ...

responsibilities include: Leading investigations into security alerts, incidents and emerging threats, ensuring effective containment, eradication and recovery activities. Analysing security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. Conducting threat hunting, forensic investigations and proactive cyber defence activities to identify previously … resilience of one of the UK's largest organisations. What you'll need Strong experience within a Security Operations Centre, Cyber Defence, Incident Response, Threat Hunting or a related cyber security environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding ...

Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security Operations, and Incident Management … fast-paced environment. Key Responsibilities Investigate and respond to cyber security incidents across the enterprise environment. Perform host-based investigations, forensic analysis, and threat containment activities. Monitor and support critical information security technologies operating within a 24/7 environment. Work closely with internal and external stakeholders to support ...

Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good understanding ...

threats by leveraging Client Enterprise Security to monitor, detect, analyze, and respond to security events. The ideal candidate has strong expertise in log analysis, threat hunting, and writing Client queries to identify and contain malicious activity. Responsibilities: Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous … security incidents, follow forensic evidence, and collaborate with IT and network teams to remediate threats. Develop and refine detection and response playbooks based on threat intelligence and frameworks like MITRE ATT&CK. Work with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across ...

improvement while driving lessons learned activities Demonstrated integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities Talent management of direct reports with empathy and patience, while developing them … Information Security Professional Information System Administration/Engineering 5+ years’ collective experience between the following roles: Security Operations Center (SOC) Analyst/Manager Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions Attack & Penetration Testing (Active Defense) eDiscovery or related role performing forensic functions 3+ years ...

incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving threat landscape and recommend improvements. Provide cyber security guidance to projects, services and operational teams. Support risk management, assurance, audit and compliance activities. Develop … will bring: Experience in incident detection, investigation, response and recovery. Strong knowledge of security technologies, cloud platforms and security architecture. Experience in vulnerability management, threat intelligence and security improvement activities. The ability to assess and communicate cyber risk effectively. Strong analytical, problem‐solving and stakeholder engagement skills. Please ...

Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence. DevSecOps – Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles. AI – Drive … Experience managing and supporting enterprise security platforms. Understanding of security operations processes, including alert triage, investigation, and incident response. Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval‐Augmented Generation (RAG) concepts. Strong knowledge ...

compromise, and policy violations correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity. * Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. * Work with Detection and Automation team … 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/ ...

Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

security alertsto identify and promptly respond to securityevents. Collaboratewith key stakeholders during investigations to gather further information and coordinate response actions. Derive value fromrelevant threat intelligence to drive proactive action. Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle. ...

industry-leading frameworks, cutting-edge tooling and experienced security professionals - building skills and credibility that will serve you throughout your career. Key responsibilities Reviewing threat intelligence feeds and penetration test findings to identify and prioritise use cases for Breach and Attack Simulation (BAS), ensuring our testing reflects … real-world threat landscape. Supporting penetration testing engagements by validating that scope is appropriate and that reports meet AXA's standards, giving you a front-row seat to a wide variety of technical assessments. Reviewing remediation plans arising from penetration testing activity, ensuring that proposed fixes will genuinely address ...

expert knowledge of SS7/Diameter abuse patterns and translate this into detection logic, alerts and investigative guidance.* Feed lessons learned from incidents and intelligence back into preventative controls, dashboards and playbooks.* Raise and manage incident and remediation tickets (e.g. Remedy)* Manage enrichment of signalling telemetry (e.g. via Cribl … coordinated through GitHub Enterprise).* Consume telecom specific threat intelligence and integrate insights into SigFW/SigIDS detections, playbooks and operational workflows.* Identify control gaps and propose enhancements to detection logic, SigFW policies and operational procedures to improve signalling security posture.* Act as a technical liaison between Cyber ...

enterprise customers with risk analysis, vulnerability assessment, and remediation guidance. Working within the **Qualys** **Risk Operations Center (ROC)**, you will monitor, research, and contextualize threat and vulnerability data to help customers make informed decisions and reduce their cyber risk exposure.You’ll collaborate with Senior Cyber Risk Advisors, Solution Architects … complex IT and cloud environments.**Responsibilities*** Perform continuous monitoring and analysis of customer vulnerability and asset risk data using the Qualys TruRisk Platform.* Research threat intelligence, vulnerability disclosures, and exploit activity to determine risk relevance and customer impact.* Generate reports, dashboards, and executive briefings to communicate key cyber ...

improvement while driving lessons learned activities Demonstrate integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities To qualify for the role, you must have Education: Bachelor … years’ experience in at least two of the following roles: Security Operations Center (SOC) Analyst/Manager (3 years minimum) Cybersecurity Incident Coordinator Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions eDiscovery or related role performing forensic functions Deep understanding of security threats, vulnerabilities ...

Supply Chain) to help Lloyds Banking Group identify, understand and respond to cyber risk across its third-party ecosystem. The role sits in the Threat Lab, intersecting threat intelligence, incident response and supplier risk. You’ll detect and analyse threats, inform business and technology decisions, and work ...

globe. Sprytech has started an India office based in Mumbai and is working to establish an AI/ML driven cybersecurity and digital threat analytics centre to enhance the security of industry and government organisations. We at Sprytech, as cyber security industry experts, work collaboratively with universities and provide … alerts from various sources (SIEM, IDS/IPS, firewalls, antivirus, etc.). Analyze security incidents and events to identify potential threats and vulnerabilities. Use threat intelligence to understand and anticipate cyber threats. Respond to security incidents and alerts, performing initial triage and investigation. Collaborate with other teams ...

JPMorganChase is actively seeking a Cyber Intelligence Director to identify and analyze external cyber threats, protecting the firm’s interests. You will coordinate across EMEA, North America, and APAC, prioritizing intelligence streams and allocating resources for maximum impact. You will shape security policies and drive threat detection ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

security and implementing security within cloud environments Knowledge of security technologies including endpoint, data and mobile security Understanding of SIEM, SOC, vulnerability management and threat intelligence capabilities Strong communication skills with the ability to explain security risks to technical and non technical stakeholders CISSP, CISM ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...