26 to 50 of 185 Threat Intelligence Jobs

will be in the domain of proactive advice and guidance as it relates to Security Operations/Defensive Cyber Operations (Incident Management, Vulnerability Management, Threat Intelligence). Organisations face increasing challenges operating effective security operations capabilities across threat intelligence, vulnerability management and incident management. This role … proactive Security Operations/Defensive Cyber Operations issues. This may include advising on Frontier AI use cases in cyber defence, designing operating models for threat intelligence teams, building technology at scale for attack surface monitoring or building concepts for at scale vulnerability management. Drafting well thought ...

This is an excellent opportunity for a strategic cyber security leader to take ownership of a mature Security Operations Centre, driving continuous improvement, enhancing threat detection capabilities and leading a high-performing security team. About the Role As the SOC Manager, you will be responsible for leading the Security … Operations Centre, ensuring effective security monitoring, incident response and threat intelligence capabilities while shaping the future direction of the SOC. Working closely with internal stakeholders, external vendors and managed security service providers (MSSPs), you will play a key role in strengthening the organisation's cyber resilience. Essential Experience ...

flags, validating sources, and making judgment calls about the completeness and accuracy of information (especially during M&A cyber due diligence).* Utilize threat intelligence to identify, contextualize and analyse emerging threats, vulnerabilities, and risks to clients.* Develop and innovate technologies and solutions that can be used … assess cybersecurity maturity and risks.* Conduct external exposure and threat intelligence assessments using a range of subscription and open-source databases and toolsets to identify the attack surface and threat profile of clients.* Maintain current knowledge of industry trends, threats, methodologies, and core technologies to assimilate client ...

go. You'll manage the SOC team, own incident management, and make sure resources are deployed effectively. You'll also drive the security monitoring, threat intelligence and vendor relationships that keep the organisation protected. You will need proven experience in the following: SOC management, including leading and developing … team Strategic resource planning and deployment Incident management processes Delivering effective security monitoring capability Threat intelligence and assessment Operating cyber security tools and solutions Managing relationships with external vendors and MSSPs The following would be beneficial: Cloud security experience (AWS, Azure) ITIL Foundation or equivalent service management qualification ...

go. You'll manage the SOC team, own incident management, and make sure resources are deployed effectively. You'll also drive the security monitoring, threat intelligence and vendor relationships that keep the organisation protected. You will need proven experience in the following: SOC management, including leading and developing … team Strategic resource planning and deployment Incident management processes Delivering effective security monitoring capability Threat intelligence and assessment Operating cyber security tools and solutions Managing relationships with external vendors and MSSPs The following would be beneficial: Cloud security experience (AWS, Azure) ITIL Foundation or equivalent service management qualification ...

Head of Cyber Resilience and Cloud to join its cyber leadership team. Reporting directly to the CISO, this role will lead cyber operations, threat reduction and resilience capabilities across both cloud and on premises environments. You will act as a trusted advisor to senior leaders, driving strategic initiatives that … cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational ...

reporting through CRM/PRM Collaborate closely with global partner, marketing, product, and sales engineering teams to deliver a cohesive partner experience Feed market intelligence and partner feedback into Cyble's product and GTM roadmap Experience What You’ll Need: 5+ years in partner management, channel sales, or alliance … stage, including MSSPs, SI, and consulting firm partnerships Experience owning and exceeding partner‐sourced revenue targets in a quota‐carrying capacity Prior exposure to threat intelligence, SOC services, MDR, or dark web monitoring is a strong advantage Skills & Competencies Strategic thinker with the ability to translate regional market ...

Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

Location(s): UK, Europe & Africa : UK : Manchester BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

lead our Security Operations Centre (SOC). In this contract role, you will lead a team of 8+ security professionals, drive the department's threat detection and response strategy, and act as the principal escalation point for critical incidents. You will also oversee managed service providers (MSSPs) to ensure … incident triage, containment, escalation, and post-incident reviews. Security Operations and SIEM: Oversee SIEM operations, intrusion detection, rule tuning, and proactive threat-hunting capabilities. Threat Intelligence: Analyze OSINT and commercial threat intelligence to mitigate organizational risks. Vendor and Stakeholder Management: Manage MSSP performance, SLAs ...

this role, you will be a trusted delivery partner for organizations undergoing massive infrastructure shifts or looking to validate their structural defenses against sophisticated threat actors. You will be comfortable managing technical projects, leading architecture workstreams, and translating deep technical details into clear business terms for management and engineering … need to travel up to 30% and support business operations as required.Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

interpret data Effective verbal and written communication skills Knowledge of Common Security Vulnerabilities (CVEs) and remediation techniques Solid operational knowledge of working with Threat Intelligence Platforms, SIEM appliances, or intelligence feeds that have been acquired in large organisations Experience with large LANs and cloud environments, preferably … willproceedto shortlisting. Shortlisting In the event ofa large number ofapplications wemay conductan initialsift, on the lead criteria of: Solid operational knowledge of working with Threat Intelligence Platforms, SIEM appliances, or intelligence feeds that have been acquired in large organisations Demonstrable ability to analyse and interpret data Desirable ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

manage an established Security Operations Centre (SOC) Develop and deliver the SOC strategy and operational roadmap Oversee incident management and security monitoring capabilities Drive threat intelligence and cyber threat assessment activities Manage cyber security tools and operational technologies Build and maintain relationships with MSSPs, vendors, and technology … Analysts will not be considered) Strong leadership and people management experience In-depth knowledge of incident management processes Experience delivering effective security monitoring and threat intelligence capabilities Hands-on experience managing cyber security tools and technologies Experience working with external vendors and Managed Security Service Providers (MSSPs) Desirable ...

Barclays is seeking an Insider Threat Intelligence Analyst to uncover insider risks and translate complex data into actionable intelligence for security decisions. You will work across intelligence, security and cross-functional teams to strengthen defences and provide timely insights for leadership. Ideal candidates demonstrate strong analytical … capabilities, experience delivering defensible intelligence judgments, and the ability to communicate complex findings to both technical and #J-18808-Ljbffr ...

expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build-vs-buy decisions … Leadership: Own the full incident response lifecycle — detection, triage, containment, eradication, recovery, post-incident review. Author and maintain IR playbooks, runbooks and escalation procedures. Threat Intelligence: Investigate security events, perform root cause analysis, and apply threat intelligence to improve defensive posture. Understand attacker TTPs and operationalise ...

industry. Description Support security operations, incident investigations and response activities. Collaborate with the Security Operations Centre (SOC) to analyse threats and security alerts. Conduct threat intelligence research and identify emerging cyber risks, adversary tactics and indicators of compromise. Utilise Microsoft Defender XDR and associated Microsoft Defender products … knowledge of user engagement initiatives, targeted training and compliance reporting. Solid understanding of recognised security frameworks and standards, particularly Cyber Essentials. Knowledge of cyber threat intelligence concepts, including IOCs, TTPs and threat analysis. Experience working with SOC teams, managed security service providers or security operations functions. Hands ...

need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small engineering teams Strong … Strong knowledge of security controls, least privilege, encryption and system hardening Experience with endpoint security, EDR, Active Directory or LDAP Understanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligence Ability to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes ...

directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts. You’ll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous … growth. Our SOC culture is built by engineers who’ve progressed through roles in security operations, threat intelligence, and engineering. You’ll benefit from cyber ranges, training labs, and the freedom to shape your development path. As part of a leading MSSP, you'll gain exposure ...

2. Technical security operations experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft Defender XDR and the wider Microsoft security ecosystem … repetitive investigation and response activities. Track alert quality, triage, investigation, containment and automation performance. Use operational data to identify weaknesses and drive improvement. Support threat hunting and the use of threat intelligence. Turn incident lessons into improved detections, playbooks and response procedures. Maintain awareness of emerging threats, attacker ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

solutions are designed and deployed with security by design from the outset. Stay current with AI security risks and emerging attack vectors, translating threat intelligence into practical controls. Security Engineering & Standards Embed security into CI/CD pipelines and DevOps workflows, championing shift‐left practices across engineering teams. … guidelines for use across platform and product delivery. Participate in architecture and design reviews, providing security input as part of the delivery lifecycle. Threat Intelligence & External Partnerships Act as the internal interface for Arctic Wolf, the organisation's outsourced MDR provider, triaging escalations and feeding intelligence back ...

tracking, build leadership dashboards, and escalat Conference & Travel Security. Produce location-specific security briefings and short-form audio content for major conferences, drawing on threat intelligence inputs and distributing through our events coordination channels. New Hire Security Onboarding. Deliver monthly live onboarding sessions, create interactive exercises and follow … assessments, maintain on-demand recordings, and manage automated follow-up communications. Threat Briefings. Coordinate quarterly security briefings for high-profile researchers and secure recurring slots at leadership forums to deliver concise threat updates. Internal Security Portal. Maintain and expand the clients security resource hub with a library ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards ...