26 to 50 of 123 Threat Intelligence Jobs

Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing- Experience managing competing priorities and using metrics to drive business decisions- Bachelor's degree or above in Computer Science … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Experience in one or more of the following: application security frameworks, security code reviews, incident ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...

risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication … security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication. Substantial experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk ...

Working in a client-facing consultancy role, you will provide operational security management, oversight and GRC advisory services. You will help clients translate business, threat and regulatory requirements into practical operational risk decisions and security improvements. Security governance and oversight: Establish, operate and improve proportionate security governance, policies, standards … assessed, prioritised, assigned and progressed to closure. Vulnerability and exposure oversight: Review vulnerability and security testing outputs, challenge prioritisation using asset criticality, exploitability, threat intelligence and business impact, and monitor remediation, exceptions and risk acceptance. Threat and alert oversight: Work with security operations, technology and service teams ...

materials and initiatives. Support information security activities across areas such as vulnerability management, third-party risk, governance, policy development, and emerging technologies. Assist with threat intelligence activities, including opportunities to automate threat intelligence feeds as time permits. Collaborate with Information Security team members and business partners … preferred. Competencies: Business insight Cultivates innovation Drives results Makes sound decisions Being a brand champion Collaborates Communicates effectively Customer focus Being Authentic Emotional Intelligence Self-development Being flexible and adaptable If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating ...

successful candidate will have an incident response background; technical expertise spanning infrastructure, web servers and cloud environments; a deep understanding of current and emerging threat actors; and a genuine interest in developing tooling that improves the delivery of investigations. Please note that this role will require you to work … affecting SaaS platforms and software development environments (e.g. source code repositories and CI/CD pipelines), drawing on an understanding of common development practices. Threat hunting and identification of attacker activity, using EDR and agent-led forensic tooling, to inform the investigation and containment activities Perform live compromise assessments ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership. Key responsibilities: This role will provide you the opportunity to lead key activities to progress … coaching, review and structured feedback. Represent the area in CSO governance and cross-functional forums. Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT. Build and run continuous control ...

contact details are readily available on our website). Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

contact details are readily available on our website). Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

contact details are readily available on our website). Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

Central LondonAs a Security Operations intern, you'll gain first-hand experience investigating security alerts and incidents. You'll support senior team members across threat intelligence, detection engineering, forensics and malware analysis. Working alongside experienced security engineers, you'll also be paired with a mentor to support your … range of systems and platforms, including Windows, Linux, Kubernetes and cloud environmentsLeading the triage and coordination of security incidents raised across the organisationConducting threat hunting across a large, centralised data lakeUsing threat intelligence sources to enhance and tune existing detection capabilitiesWorking with our internally developed interface backed ...

manage vulnerabilities and help maintain a secure global technology environment. Key Responsibilities Develop and maintain a range of cyber security solutions and controls. Analyse threat intelligence and respond to day-to-day cyber threats, implementing mitigating controls where required. Maintain vulnerability and remediation records to support audit compliance … Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking ...

Perform regular vulnerability scans and across applications and infrastructure. Validate and prioritise remediation of vulnerabilities from the firm's security tooling. Monitor security advisories, threat intelligence services and vendor notifications for vulnerability remediation. Skills and experience: Expert experience of working with enterprise vulnerability management platforms. Working experience with … threat intelligence, attack surface mgmt. and exposure mgmt. platforms. Expert understanding of vulnerability scoring, including CWE, CVSS and MITRE ATT&CK.Foundational knowledge of windows, Linux and networking. Ability to assess security risks and prioritise remediation works at enterprise scale. Experience in the creation and development of Vulnerability dashboards ...

design and deliver high-quality detections across Microsoft Sentinel and Splunk, helping protect critical systems and clients in real time.If you thrive on turning threat intelligence into actionable detection logic—and enjoy working at the heart of a live SOC—this is your opportunity to make a real … false positives and improve SOC efficiency.Validate detections against telemetry and ensure accuracy.Support onboarding of log sources across cloud, infrastructure, identity and network.Collaborate with SOC, Threat Intelligence and Security Architecture teams.Investigate detection issues and improve performance and reliability.Drive continuous improvement using automation, scripting and best practice.Ensure detections are clearly ...

deliver high-quality detections across Microsoft Sentinel and Splunk, helping protect critical systems and clients in real time. If you thrive on turning threat intelligence into actionable detection logic—and enjoy working at the heart of a live SOC—this is your opportunity to make a real impact. … improve SOC efficiency. Validate detections against telemetry and ensure accuracy. Support onboarding of log sources across cloud, infrastructure, identity and network. Collaborate with SOC, Threat Intelligence and Security Architecture teams. Investigate detection issues and improve performance and reliability. Drive continuous improvement using automation, scripting and best practice. Ensure ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team. What We Offer: Hybrid working | Permanent | Full-time, part-time or job share. Flexible ...

/EDR experience: Microsoft Defender, CrowdStrike, Cortex, or SentinelOne; hands-on NDR knowledge, such as Vectra AI or Corelight. Cloud security telemetry, particularly Azure; threat intelligence integration and awareness of AI-driven SOC tools. Customer-facing consultancy skills and clear technical communication. Duties & Responsibilities Build and tune SIEM … sources, assess coverage, and close telemetry, logging, and enrichment gaps. Build SOAR automations, integrations, response workflows, and documented incident playbooks for SOC teams. Turn threat intelligence and operational lessons into stronger detections and automations. Own detection-as-code pipelines, structured use case development, and versioning. Advise customers, lead ...

/EDR experience: Microsoft Defender, CrowdStrike, Cortex, or SentinelOne; hands-on NDR knowledge, such as Vectra AI or Corelight. Cloud security telemetry, particularly Azure; threat intelligence integration and awareness of AI-driven SOC tools. Customer-facing consultancy skills and clear technical communication. Duties & Responsibilities Build and tune SIEM … sources, assess coverage, and close telemetry, logging, and enrichment gaps. Build SOAR automations, integrations, response workflows, and documented incident playbooks for SOC teams. Turn threat intelligence and operational lessons into stronger detections and automations. Own detection-as-code pipelines, structured use case development, and versioning. Advise customers, lead ...

/EDR experience: Microsoft Defender, CrowdStrike, Cortex, or SentinelOne hands-on NDR knowledge, such as Vectra AI or Corelight. Cloud security telemetry, particularly Azure threat intelligence integration and awareness of AI-driven SOC tools. Customer-facing consultancy skills and clear technical communication. Duties & Responsibilities Build and tune SIEM … sources, assess coverage, and close telemetry, logging, and enrichment gaps. Build SOAR automations, integrations, response workflows, and documented incident playbooks for SOC teams. Turn threat intelligence and operational lessons into stronger detections and automations. Own detection-as-code pipelines, structured use case development, and versioning. Advise customers, lead ...

ecosystem serving millions of customers. You will combine deep engineering expertise with an innovation mindset to build production-grade solutions that leverage applied Artificial Intelligence (AI), automation, and modern development practices to strengthen Tesco’s cyber defence. This role sits at the point where ideas become real: you will … across diverse security and technology teams with a customer-first focus. In the immediate term, you will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams.This team operates as an innovation incubator for cyber defence capabilities: rapidly exploring ideas, validating them through prototypes ...

About the opportunity Launch your cyber security career with Netcom Training’s government-funded Cyber Security course. Gain practical skills in threat intelligence, vulnerability testing and incident response, developing the technical knowledge needed to protect IT systems and prepare for security roles. Earn a Level 3 NCFE Certificate … Qualification: NCFE Certificate in Cyber Security Practices (Level 3) What you’ll learn Cyber Principles: Understand core frameworks and cyber security principles. Threat Intelligence: Identify risks and analyse threats to IT systems. Vulnerability Testing: Conduct security testing, identify vulnerabilities and implement controls. Incident Response: Learn how to prepare ...

serving enterprise customers. Experience developing large-scale cyber security platforms, particularly systems processing millions of internet-facing assets. Background in internet-wide scanning, vulnerability intelligence, threat data pipelines or automated security testing platforms. Strong understanding of offensive security, adversary tactics, techniques and procedures (TTPs), and the development … security, penetration testing, exploit development or red teaming. Building AI-powered security products, autonomous agents or multi-stage LLM orchestration systems. Developing large-scale threat intelligence, vulnerability research or automated security assessment technologies. Contributions to open-source security projects, technical research or developer tooling. Applicants must have unrestricted ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...