4 of 4 Remote/Hybrid Contract Threat Intelligence Jobs

customers. Your responsibilities: (Up to 10, Avoid repetition) Design and own the architecture for ServiceNow SecOps modules including Security Incident Response, Vulnerability Response, Threat Intelligence, and Configuration Compliance. Lead integration of ServiceNow with key cybersecurity tools: SIEM, SOAR, EDR, CMDB, threat intelligence platforms, and OT/… controls into CI/CD pipelines, helping support ongoing digital transformation and automation initiatives. AI/ML in Security Operations Exposure to leveraging artificial intelligence or machine learning techniques to improve threat detection, incident analysis, or automated response capabilities within SecOps. ...

clear and consistent internal and external incident communication workflows. * Develop detailed incident response playbooks, such as ransomware, business email compromise (BEC), data breach, insider threat, malware outbreak, DDoS attack, cloud service compromise. (Final scenarios to be agreed during discovery.) Strengthen Organisational Incident Preparedness * Conduct discovery sessions with technical … organisation. Collaborate Across the Business * Work closely with SOC staff, IT teams, legal, risk, compliance, communications, and senior leadership. * Convert technical details and threat intelligence into clear, actionable steps appropriate for operational use. Required Experience & Skills * Proven experience (typically 5+ years) in incident response, SOC operations, cybersecurity consulting ...

SIEM detection rules and correlation logic Developing and maintaining dashboards and reporting in Elastic Creating automation scripts and workflows to support faster response Translating threat intelligence using frameworks such as MITRE ATT&CK into actionable detections Working closely with SOC teams to reduce false positives and improve detection … networking Experience working with cloud platforms (Azure, AWS, O365) Scripting skills in Python, PowerShell, or Bash Familiarity with MITRE ATT&CK and modern threat detection techniques What's on Offer Fully remote working Outside IR35 contract Opportunity to work with a large-scale telecoms environment ECS Recruitment Group ...

Responsibilities Design end-to-end API security architecture across cloud and on-premise environments. Define API security standards covering authentication, authorization, encryption, and threat protection. Lead architectural reviews, threat modelling, and risk assessments for API integrations. Select, architect, and optimize API gateways, WAFs, and security controls. Develop reference … patterns). Nice to Have Certifications: CISSP, CCSP, GIAC, SABSA. Experience with DevSecOps, container security, and microservices architecture. Knowledge of SIEM, API analytics, and threat intelligence. ...