276 to 300 of 499 Threat Intelligence Jobs

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

security and implementing security within cloud environments Knowledge of security technologies including endpoint, data and mobile security Understanding of SIEM, SOC, vulnerability management and threat intelligence capabilities Strong communication skills with the ability to explain security risks to technical and non technical stakeholders CISSP, CISM ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...

shift rotations, including nights and weekends if required. Support Growth of our SOC as a Service capability Stay current on cybersecurity trends and threat intelligence. Required Qualifications: Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience). Basic understanding of networking concepts ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

Cybersecurity Threat Detection team seeks a skilled professional to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms, aligned with MITRE ATT&CK. You will hunt threats, validate log health, and collaborate with threat intelligence and incident response to stay ahead of adversaries. Strong ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … teams, you’ll influence how security is designed, embedded and continuously improved.You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways of working ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways of working ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good understanding ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Consultant, you'll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you'll operate at the intersection of threat intelligence, incident response and supplier risk. You'll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You'll play a key role in strengthening our approach to supply chain threat management-supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you'll operate within agile ways of working ...

Consultant, you'll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you'll operate at the intersection of threat intelligence, incident response and supplier risk. You'll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You'll play a key role in strengthening our approach to supply chain threat management-supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you'll operate within agile ways of working ...

detection capabilities . Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud … security tools . Support incident response, threat hunting and security investigations . Develop dashboards, reporting and metrics to improve SOC performance. Lead AI-driven security initiatives , including AI agents and agentic workflows for alert triage, investigation and response. Work closely with Security, Infrastructure, Cloud and Application teams. About ...

confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. … unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team. Built cloud ...

experience within our team. We are looking for a AWS Cloud Security Engineer to join our team in Manchester. You will own vulnerability and threat management for an environment where the stakes are real; the software you help protect supports law enforcement and emergency services across … across cloud infrastructure, networks, and applications, prioritizing findings by risk, and tracking remediation through to closure. Researched emerging threats relevant to our environment, turning threat intelligence into clear, actionable guidance on what to patch, watch, or harden next. Led the response to a security alert: triaging it, containing ...

coordinate the monthly risk register review with executive risk sponsors, and track treatment plans to closure. Draft register entries from audit findings, incident lessons, threat assessments and customer requirements, for CISO review, each with a proposed owner. Maintain the list of security-related product roadmap requests and coordinate prioritisation … exceptions and report performance. Maintain the protective monitoring standard and the logging and monitoring evidence an assurance review will test. Keep a record of threat intelligence intake from NCSC and other sources, and of the actions taken. Incident management Act as incident coordinator: convene the response channel, keep ...

develop and improve security and IT policies and documentationAct as the point of contact for the business on external audits and assessmentsTrack threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and huntsRun vulnerability management from a threat-led angle: prioritise ...

develop and improve security and IT policies and documentation Act as the point of contact for the business on external audits and assessments Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts Run vulnerability management from a threat ...

segmentation, remote access arrangements and physical protection systems. Identify opportunities to improve the integration of cyber and physical security measures. Review and communicate relevant threat intelligence to stakeholders. Contribute to security awareness projects across the business. Support supplier and contractor security assessments and oversee third-party access assurance. ...

technology in line with business objectives Undertake cyber related technical due diligence for business proposals offered to clients Assist in the gathering, analyzing of threat intelligence and learning from security partners, industry peers and government agencies to understand potential and relevant impacts to RES Support incident response ...

Security Consultant (Supply Chain) to help identify, understand and respond to cyber risk across its third-party ecosystem. You will work in the Threat Lab, combining threat intelligence, incident response and supplier risk to deliver actionable advice to business and technology stakeholders. The role is hybrid, with ...

maintaining the pipeline integrations themselves.Administer and drive adoption of GitHub Advanced Security (GHAS) : code scanning, secret scanning, and dependency review across engineering repositories.Participate in threat modeling and design/architecture spec reviews to identify and mitigate security risks early in the SDLC.Coordinate with stakeholders to develop and implement … vulnerability management program and to perform threat-hunting activities.Own and conduct internal penetration testing and vulnerability assessments of applications and infrastructure, and validate findings from third-party pentest engagements.Monitor and respond to application-layer security threats like API abuses, business logic flaws, and common web vulnerabilities.Collaborate with product ...