19 of 19 Contract Threat Intelligence Jobs in England

Outside IR35 Contract Length: 6 months initially Location: Hybrid/Liverpool UK I'm supporting a large enterprise organisation seeking an experienced Cyber Threat Intelligence Lead to support and enhance its Threat Intelligence capability within a complex enterprise environment. Key Responsibilities Deliver actionable cyber threat intelligence to support security operations and risk reduction. Leverage Threat Intelligence platforms to identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. ...

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance … have a proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency ...

Cyber Threat Intelligence Analyst (x2) Location : London, East Kilbride or Milton Keynes Type: Hybrid (2 days on-site, flexible) Rate : £680 - £780 IR35 : Inside Length : 12 months Clearance: UKSV DV Essential Familiarity with cyber threat frameworks - for example, MITRE ATT&CK, Diamond Model, and the Intelligence Cycle Experience using open-source and commercial research methods, threat intelligence platforms or security tooling. Experience of working in an intelligence role, with practical application of the intelligence lifecycle. Demonstrable analytical capability, including the ability to identify patterns and produce balanced, evidenced judgements. Experience researching ...

Head of Cyber Resilience and Cloud to join its cyber leadership team. Reporting directly to the CISO, this role will lead cyber operations, threat reduction and resilience capabilities across both cloud and on premises environments. You will act as a trusted advisor to senior leaders, driving strategic initiatives that … cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational ...

security operations team on an initial 6-month contract. This is an excellent opportunity for a senior cyber security professional with strong incident response, threat hunting, and SOC expertise to play a critical role in protecting enterprise IT and operational environments from advanced cyber threats. You will work closely … investigation and response to high-severity cyber security incidents and escalated alerts Drive containment, eradication, and recovery activities to minimise business impact Perform advanced threat hunting using threat intelligence, IOCs, and behavioural analysis Analyse complex security events across endpoints, networks, cloud, applications, and infrastructure Improve and develop ...

from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement of the Incident Response service. Support both BAU incidents and strategic capability development. Manage incidents … reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested in the role please ...

funded Cyber Security course (NCFE Certificate in Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast … with, helping you start your career protecting businesses, data and digital systems. What you’ll learn Principles: Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

excellent opportunity for someone who thrives in leading high-performing cyber security operations teams, driving continuous improvement, and responding to an evolving threat landscape. Candidates with experience gained within financial services, banking, insurance, defence, government or other highly regulated industries are particularly encouraged to apply. The Role … effective use and optimisation of SIEM, EDR/XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams to enhance detection capabilities. Manage relationships with third-party security providers and technology vendors. Produce operational ...

include: Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements. Monitor, triage and investigate security alerts/reports. Analyse security event data, including … firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. For more information or to process your application, please apply ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

Enterprise Security, Splunk Cloud, Microsoft Sentinel, and Cribl Stream. This is an exciting opportunity to work within a large-scale enterprise environment, helping improve threat detection, security monitoring, automation, and incident response capabilities. Essential Experience Bachelor's degree (minimum qualification). Strong experience administering and developing Splunk Enterprise . … Sentinel . Experience with Cribl Stream , including log ingestion, data routing, transformation, parsing, and data normalisation. Experience working in enterprise Security Operations environments, including threat detection, incident response, and security event analysis. Experience with SOAR platforms, playbook development, and security automation. Good understanding of network security, including Firewalls, proxies ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities Integrate XSIAM with other security tools and information systems to automate security operations and workflows Conduct continuous monitoring and analysis … security alerts and incidents to identify trends and potential threats Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats, technologies ...

areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence or other critical ...

areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence or other critical ...

with employers across tech, logistics, public services and digital sectors. What you'll learn Cyber security principles: the core frameworks that keep organisations secure Threat intelligence: how to spot risks before they become problems Security testing: finding vulnerabilities and putting the right controls in place Incident response: what ...

registers. Experience producing security documentation and supporting audit and assurance activities. Ability to communicate security risks and governance updates to senior stakeholders. Knowledge of threat intelligence and security incident management. Qualifications CompTIA Network+, CompTIA Security+, ISACA CRISC, or an equivalent security qualification. Disclaimer: This vacancy is being advertised ...

knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. Own the global prioritisation of the Endpoint, Platform and Incident Response backlog, ordered against the enterprise cyber risk register and exploitation-based intelligence ...