5 of 5 Permanent Threat Intelligence Jobs in Birmingham

Engineer and play a pivotal role in defending clients against evolving cyber threats. You will leverage your expertise in SIEM platforms, threat detection, and incident response to strengthen security operations center (SOC) capabilities. Collaborating with cross-functional teams, you’ll develop automated playbooks, engineering use cases, and deploying advanced … real-time environment. Core Responsibilities SIEM Engineering & Analytics Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.Normalize and onboard diverse log sources from cloud and on-premises environments for seamless monitoring.Develop and continually refine SIEM rules and queries ...

performance metrics and service levels, such as MTTD and MTTR, and actively contribute to improving investigation quality and response outcomes. You will apply threat intelligence to investigations and alert triage, maintaining awareness of emerging threats, vulnerabilities, and attacker techniques. Incident learnings and threat insights will … capabilities. You will also contribute to the development and tuning of SOC detection use cases, ensuring alerting remains relevant, effective, and aligned to current threat activity. This includes supporting onboarding of new services, identifying detection gaps, and recommending improvements to tooling, processes, and coverage. Clear and accurate documentation ...

dealing with cyber incidents.Provide written and verbal reports to the wider IR team, senior business partners (internal and external).Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.A team-first, collaborative approach working across all relevant technical teams … requisites for the role: Demonstrably strong incident management and analytical skills. Demonstrably strong written and speaking English skills. Demonstrably strong understanding of Threat Actor TTP’s. Demonstrably strong commercial awareness. Demonstrable ability to work on own projects and within a team. At least 36 months of relevant IT Security ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. This role is based in BT's Birmingbam office & requires 3 days in office. What … Doing Data Ingestion and Enrichment: Configure Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development: Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules ...