21 of 21 Contract Threat Intelligence Jobs

significance, potentialimpactandappropriate courseofactions. Correlate information from multiple data sources toestablishattack timelines,identifyaffectedsystemsand support the assessment of cyber security incidents. Analyseindicators of compromise, attackertechniquesand available threat intelligence todeterminethe nature and severity of security events. Escalate indicatorsconfirmed or suspected cyber security incidentsto the Lead SOC Analyst or Incident Responder teamin … Cyber security operations, Forensics,Incident management, incident investigation and response, Information risk assessment and risk management,Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment Experience working within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security ...

Cyber security operations Forensics Incident management, incident investigation and response Information risk assessment and risk management Intrusion detection analysis Protective security Secure operations management Threat intelligence and threat assessment Threat understanding: Practitioner In addition you will possess demonstrable experience working within a SOC or similar cyber … Sentinel, LogRhythm or equivalent. Experience investigating complex cyber security events and determining appropriate escalation paths. Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in mentoring or coaching technical staff within an operational environment. Excellent analytical, investigative and problem-solving skills. Ability ...

work as part of a global team across the UK, Poland and Mexico. The role is focused entirely on defensive security and threat hunting, with an emphasis on building high-quality detections rather than simply increasing volume. Key responsibilities: Develop high-quality detection use cases from external threat intelligence and internal security data Analyse intelligence and translate it into effective detections for the organisation Use Red Team outputs to identify gaps, understand attack techniques and determine where to detect malicious activity Conduct threat hunting and identify opportunities to improve defensive coverage Work closely with ...

considered, you must have AI & Advanced Threat Defence experience (purple or blue team) Job Title Security Purple Team Lead - Blue Team, AI & Advanced Threat Defence - Contract Contract Length 2 months initial Overview We are seeking an experienced Security Purple Team Lead to join a major cybersecurity programme within … Purple Team role, the current requirement has a stronger emphasis on Blue Team activity. The successful candidate will bring strong defensive security experience across threat detection, detection engineering, threat hunting and security operations, while having sufficient understanding of offensive security and Red Team techniques to translate simulated attacks ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest rates. Proven experience leading …/LDAP. Knowledge of cyber threats, risk assessment, vulnerability management, and security best practices. Good understanding of enterprise ICT services, Security Operations processes, and threat intelligence, threat actors, and TTPs. Current UK SC clearance. ...

Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across ...

scalable, and resilient. Splunk Engineering & Security Monitoring Develop and maintain security monitoring capabilities using Splunk. Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility. Support log ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve ...

protecting a diverse technology estate from evolving cyber threats. This is an excellent opportunity for a security professional who enjoys investigating complex security incidents, threat hunting, and working across cloud, endpoint, identity, network, and application environments. You'll take ownership of escalated investigations, support incident response activities, and help … security events using SIEM, EDR, cloud, identity, and network security tools. Determine the scope, severity, and business impact of security incidents. Conduct proactive threat hunting activities based on intelligence and emerging attack techniques. Coordinate containment, eradication, and recovery activities with technology and incident response teams. Improve detection effectiveness ...

identified threats. Correlate information from multiple technical sources to establish attack timelines and identify affected systems. Analyse indicators of compromise, attacker techniques and threat intelligence. Escalate confirmed or suspected incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical … alerts using enterprise monitoring technologies. Good knowledge of SIEM platforms, security-monitoring tools and log-analysis techniques. Understanding of cyberattack methodologies, indicators of compromise, threat intelligence and common attacker techniques. Experience analysing data from multiple technical sources to investigate security events. Experience supporting cyber incident-response activities. Knowledge ...

false positives and low-impact findings. Assess vulnerabilities using CVSS, exploitability, asset criticality, exposure and business impact. Monitor emerging vulnerabilities, zero-days and relevant threat intelligence. Work closely with infrastructure, cloud, application, DevOps and IT operations teams to coordinate remediation. Track vulnerabilities through to resolution, ensuring remediation is completed … vulnerability management. Experience with container, Kubernetes or DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP or similar. ...

analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation and response, intrusion detection, forensics, protective security and secure operations. Ability to make timely decisions ...

Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security Operations, and Incident Management … fast-paced environment. Key Responsibilities Investigate and respond to cyber security incidents across the enterprise environment. Perform host-based investigations, forensic analysis, and threat containment activities. Monitor and support critical information security technologies operating within a 24/7 environment. Work closely with internal and external stakeholders to support ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider multi … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

embedded into solution design and project governance. Work with technical teams and risk owners to ensure security controls are proportionate and aligned with the threat and risk environment. Assess cyber threats and translate threat intelligence into practical security controls and recommendations. Review cloud, hybrid and on-premises ...

government systems. Technical & Architectural Competencies SOC Technologies: Design, build, and deployment experience using at least two core technologies: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Architectural Frameworks: Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and system modeling. Environments: Proficiency in both On-Premises and Cloud security architectures, designing ...

Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud security architectures. Experience working with ...

Ability to review and govern vulnerability exceptions, balancing business needs with security risk. Experience producing risk reporting, governance updates, and management information. Knowledge of threat intelligence, vulnerability advisories, and security risk assessment methodologies. Experience with Qualys is highly desirable. Strong stakeholder engagement skills with the ability to challenge ...

areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence or other critical ...

with employers across tech, logistics, public services and digital sectors. What you'll learn Cyber security principles: the core frameworks that keep organisations secure Threat intelligence: how to spot risks before they become problems Security testing: finding vulnerabilities and putting the right controls in place Incident response: what ...

status or IRSE licence. Experience with Software Defined Networking (SDN), virtualisation, data centres or network automation. Experience with next-generation firewalls, SIEM, IAM or threat intelligence. Experience with Juniper networking technologies. Experience designing and securing industrial control systems, including industrial Ethernet switches, routers and firewalls. Experience with DMZ, IPsec ...