26 to 50 of 435 Threat Intelligence Jobs

Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. We build, tune, and maintain the detection content that security operation teams depend on, and hunt proactively for threats that existing controls … catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Job Description Job Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. ...

entirely new network for the world's money. For everyone, everywhere. More about our mission and what we offer . We are seeking an Intelligence Collections Specialist to play a pivotal role in developing, scaling, and operating our industry-leading Intelligence Collection Framework (ICF). As a foundational … member of the newly established Threat Intelligence Unit (TIU), you will be responsible for identifying and mitigating threats before they impact our network. Your Mission: Fraud and financial crime do not originate at Wise; they are conceptualized, tested, and commercialized within external threat-actor ecosystems long before ...

other monitoring technologies, while continuously improving SOC processes, procedures, workflows, automation, and playbooks to increase operational effectiveness and maturity. You will actively engage in threat hunting, leveraging your deep understanding of application code, infrastructure and hosting architectures (cloud and on premises), the software development lifecycle (SDLC), and CI/… successful delivery of projects associated with SOC tooling, automation, compliance, and operational maturity. This role encompasses reactive incident response, proactive detection engineering, threat hunting, vulnerability management, and operational leadership. You will also contribute to strategic initiatives including penetration testing coordination, security assessments, audit preparation, threat intelligence activities ...

talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This … Service Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service ...

Team application domain and technology used. Level 3 should be able to give effort estimates for simple changes. Job Description JOB TITLE: Software Engineer (Threat Intelligence Platforms) SALARY: £47,120 - £58,900 LOCATION: Edinburgh, Bristol or Manchester WORKING PATTERN: Our work style is hybrid, which involves spending … least two days per week, or 40% of our time, at our office location. About This Opportunity Our Threat Intelligence Engineering team builds and maintains the platforms, integrations and automation that help turn intelligence into action. We work across a range of security and intelligence tooling ...

shedding light on external threats. We enable cybersecurity teams to proactively detect high-risk external exposure across the dark and clear web, before threat actors have a chance to leverage it. We unify the core functionalities of cyber threat intelligence and external attack surface management into … their use of the Flare platform. In this role, you are responsible for handling the technical aspects of customer relationships, providing onboarding support, ongoing threat intelligence support, educating customers about the Flare platform, ensuring the alignment of technical solutions with customer needs, and collaborating closely with internal teams ...

Meta Security is looking for a threat intelligence investigator with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a broad set of security threats, as well as tracking actor groups with an interest or capability to target Meta … employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta’s security posture. 3+ years threat intelligence experience Bachelor's degree in Computer Science, Information Security, or relevant ...

fast-growing Blue Team within a dynamic Cyber Practice. This senior role offers the chance to work on high-profile client engagements, delivering threat detection, monitoring, incident response, and security operations expertise. The role is ideal for a self-motivated professional with strong technical skills, inquisitive thinking … passion for protecting enterprise systems from evolving cyber threats. The Role The Cyber Security Operations Specialist will use advanced tools and threat intelligence to ensure effective incident detection and response across client environments. Working closely with security analysts and wider teams, the role combines detection engineering, monitoring, incident ...

shedding light on external threats. We enable cybersecurity teams to proactively detect high-risk external exposure across the dark and clear web, before threat actors have a chance to leverage it. We unify the core functionalities of cyber threat intelligence and external attack surface management into … Develop use‐cases, technical demos, and manage Proof of Concepts (POCs) end-to-end Build strong relationships with technical stakeholders in customer organizations Deliver threat briefings to sector ISACs (FS-ISAC, H-ISAC, RH-ISAC), connecting active cybercrime campaigns to the exposure member organizations actually face ...

Cyber Threat Intelligence (CTI) Delivery Lead Reading/Havant (Hybrid) | 6 Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security … technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme Lead or Cyber ...

Cyber Threat Intelligence (CTI) Delivery Lead Reading/Havant (Hybrid) | 6 Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security … technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme Lead or Cyber ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1-2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management … capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month road map. ...

Vulnerability & Threat Exposure Manager (Contract, Inside IR35) Location: London (1–2 days per week in office, remainder remote) Contract: Initial 6 months, with potential to extend IR35 Status: Inside IR35 Our client, a large, complex enterprise organisation, is urgently seeking a manager to lead their vulnerability and exposure management … capability, with a mandate to expand into threat intelligence and enhanced security testing over time. You'll join a lean, focused team and play a hands-on leadership role from day one, with genuine scope to shape process, tooling, and maturity over a six-month roadmap. The immediate ...

programme within a global enterprise environment. This role is ideal for a senior, hands‐on Security Operations professional who combines strong incident investigation and threat analysis skills with experience in detection engineering, operational process development, and stakeholder engagement. Working as a key bridge between regional and global Security Operations … expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection gaps, duplicate content and optimisation opportunities through detection engineering, threat hunting, and alert tuning activities. ...

King's Cross, one to three if you want it Building the systems that analyse malware, not analysing it by hand Malware and threat research background, plus real software engineering, plus LLM tooling Three to five years experience, they are hiring on talent not seniority Series A deep tech … want someone to analyse malware, they want someone to build the systems that analyse malware. The person they are looking for has come from threat research, threat intelligence or malware analysis, and has already started automating their own workflows using AI and large language models. Someone ...

controls across internal systems, third parties and public networks. Provide governance and oversight to cyber security operations and liaise with specialist technical teams. Coordinate threat intelligence and vulnerability management, remediation SLAs and external providers. Support incident response, crisis management, operational resilience, business continuity and IT disaster recovery, including … regulation, including ISO 27001:2022, NIST CSF, UK GDPR, and awareness of FCA/PRA and payment scheme expectations. Sound understanding of the cyber threat landscape, threat intelligence, vulnerability management and incident/breach management, with the ability to interpret events and drive effective remediation. Working knowledge ...

Recruitment seeks an experienced Threat Intelligence and Vulnerability Manager for a 6-month contract in London. This hands-on leadership role coordinates Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting within a complex, high-profile environment. You will identify emerging ...

Work with cyber threat analysts, economists, data scientists, actuaries, and risk modelers to develop insights, scores, and features for cyber risk analytics products serving the reinsurance industry Own CyberCube's point of view on technology risk, including threat actor capabilities and trends, security hygiene standards and mitigations … event-family library for cyber catastrophe modeling, including emerging AI-driven scenarios Own the assumptions register and expert-judgment governance Present CyberCube methodology, threat landscape, and emerging risk trends to clients and prospects Engage stakeholders as a key thought leader on technology risk Collaborate cross-functionally with engineering, product ...

Lead Threat Detection Engineer| London | Up to £120k + Bonus I'm working with a leading global fintech on a senior hire into a newly established security function. This is a hands-on role for someone who wants to go beyond responding to alerts and take real ownership … threat detection and intelligence is built, automated and improved across a large-scale, multi-cloud environment. You’ll be joining at a point where the core security tooling is already in place, but there’s significant scope to define what best-in-class looks like. What ...

This isn't just another SOC role. You'll have the opportunity to: Lead investigations into advanced cyber threats within highly secure environments. Drive threat hunting campaigns and uncover previously unseen attack techniques. Influence how security monitoring services evolve and improve. Mentor and develop junior analysts, helping shape … next generation of cyber talent. Work directly with customers and stakeholders, becoming a trusted cyber security adviser. Build expertise in threat intelligence, content engineering, incident response, and security operations strategy. What You'll Be Doing As a Tier 3 Security Analyst, you'll play a pivotal role ...

This isn't just another SOC role. You'll have the opportunity to: Lead investigations into advanced cyber threats within highly secure environments. Drive threat hunting campaigns and uncover previously unseen attack techniques. Influence how security monitoring services evolve and improve. Mentor and develop junior analysts, helping shape … next generation of cyber talent. Work directly with customers and stakeholders, becoming a trusted cyber security adviser. Build expertise in threat intelligence, content engineering, incident response, and security operations strategy. What You'll Be Doing As a Tier 3 Security Analyst, you'll play a pivotal role ...

Vanguard is seeking a Cyber Threat Intelligence Analyst to join the team in a hybrid capacity in the United Kingdom. You will collect and analyze threat intelligence from OSINT, commercial, and government sources, and produce concise reports and IOCs for stakeholders. You will monitor the threat landscape, identify new TTPs, track threat actors, and support incident response across Vanguard’s technology footprint. Strong collaboration with hunt teams and leadership is essential. #J-18808-Ljbffr ...

hackajob is partnering directly with BAE Systems Digital Intelligence to hire for this role. Location(s):UK, Europe & Africa : UK : Frimley || UK, Europe & Africa : UK : Gloucester || UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Leeds || UK, Europe & Africa : UK : London || UK, Europe & Africa : UK : Manchester BAE Systems Digital … Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant ...

VMDR/Tenable Security Centre/Rapid7 InsightVM to ensure full coverage. Perform risk-based vulnerability prioritisation: correlate CVSS scores with asset criticality, exposure, threat intelligence (EPSS, CISA KEV), and business context. Translate vulnerability findings into actionable remediation tasks for patch management teams across EUC, Data Center, Networks … automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST APIs (Qualys/Tenable API), or ServiceNow workflows. Conduct threat-informed vulnerability analysis: monitor NVD, CISA KEV, vendor security advisories, and threat intelligence feeds to identify exploitable CVEs requiring emergency response. Lead ...

perform a business impact analysis on the security incident. You will leverage a deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend … response actions and escalation path. You will be guided by Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping ...