17 of 17 Permanent Insider Threat Jobs in London

Cyber Fusion Centre leadership to enhance detection capabilities, case intake and reporting, use case development, and other aspects relevant to Insider Threat prevention, detection, and response. This role is responsible for managing and improving predictive and detection analytics models, DLP controls, real-time monitoring tools, building dashboards … PowerShell, or equivalent technologies to automate analytical and investigative workflows. Relevant cybersecurity or insider risk certifications preferred, including CERT Insider Threat Program Manager (ITPM) Certificate, Global Counter-Insider Threat Professional (GCITP), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH ...

seeking a Senior Threat Analyst tojoin our rapidly growing Information Security team. This is a unique opportunity for a seasoned cyber security professional to be at the forefront of our cyber defence strategy, protecting our brand from existing and emerging threats. You will combine the expertise of a Threat Hunter and Cyber Threat Intelligence Analyst, and have the autonomy to help define our threat intelligence and hunting capabilities as our organisation continues to scale. You'll have a major input on what new tooling and services we use and the backing to implement this. ...

thinking, defining, and applying playbook responses Applying root cause analysis and lessons learned to improve security posture and processes Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response Strong collaboration with … cybersecurity related disciplines, not limited to: e.g. vulnerability research, network traffic analysis, static and dynamic malware analysis, digital forensics, memory analysis, web-security and threat hunting. Preferred Experience: Experience in creating queries and alerts in a SIEM, preferably in SPL. Experience with Windows/Unix OS forensics. Experience with ...

evaluation through data onboarding, detection parity, SOAR automation, cutover, and day-two operations. The pod's core responsibilities includes but not limited to threat hunting, insider threat, incident response, managing security events, purple teaming, phishing and email threat assessment across a remote-first, AWS-native … sampling of tier-one work, and QBRs. Make the handoff between 24x7 partner coverage and internal 24x5 response seamless and measurable.Build and run the threat hunting and detection engineering program. Lead hypothesis-driven hunts mapped to MITRE ATT&CK, own the detection lifecycle and coverage gap analysis, integrate threat ...

technical consulting or big‐data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

committed to on-going self-development and education and possess strong technical acumen and customer service skills. Responsibilities Ensure data is protected from insider threats, cyber-attacks, and policy violations Onboard Customers to Varonis platforms and deliver on-going value and support Ensure Customer success through frequent proactive ...

Lead and manage the end-to-end client engagement process for high-stakes, complex matters, including cyber investigations, data breaches, and insider threat cases. Client relationship management: Serve as the primary point of contact for high-impact clients, fostering and maintaining strong, long-term relationships with ...

experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and security assurance within enterprise environments. #J-18808-Ljbffr ...

capabilities firm wide. Securing that footprint and the platforms that underpin them is the job. Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls to operate ...

agentic AI capabilities firm wide. Securing that footprint and the platforms that underpin them is the job.Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls ...

management; cloud security (AWS, Azure, or GCP); email and collaboration security (O365/M365, Google Workspace); application and API security. Solid understanding of the threat landscape facing financial institutions, including phishing/BEC, insider threats, and data exfiltration risks tied to confidential deal information. Practical experience with ...

across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials/API keys Control‐plane, workload, container, and Kubernetes threat detection Cross‐cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi‐cloud environments. Automation, Agentic … Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. Qualifications What you’ll bring: Required Skills ...

infrastructure, including several of the following:Email security, SMTP, DNS, SPF, DKIM, and DMARCMicrosoft 365 and ExchangeData Loss Prevention and Insider Threat ManagementIdentity, SSO, authentication, and directory servicesCloud, hybrid, and on-premises architecturesAPIs, integrations, JSON, and authentication mechanismsSIEM/SOAR and wider security ecosystem integrationsHTTP, TLS, proxies ...

Customer Engagement: Serve as an advisor to UK public sector CISOs and security leaders, providing practitioner-level guidance on strategic planning initiatives, the current threat landscape, and proactive initiatives to stay ahead of adversaries Establish and maintain active relationships with key customers and decision-makers across UK central government … events, including CyberUK, government cyber forums, defence and security conferences, and public sector technology events Host customer roundtables and advisory sessions, sharing industry strategies, threat intelligence, and facilitating feedback opportunities for product enhancements relevant to UK government requirements Produce high-quality written content including blog posts, articles, white papers ...

written and verbal communication skills in English (mandatory); additional languages are a significant advantage. Nice to Have: Familiarity with digital marketing, mobile and cyber threat ecosystems, or AdTech (strong advantage). Strong trend analysis capabilities and a sharp ability to identify evolving methodologies of online threat actors. … collection and surface leads. Working knowledge of how technical underground campaigns operate, methods, TTPs, and the terminology of technical underground activity understood from the threat actor's side, not only the analyst's About Alice Alice is a trust, safety, and security company built for the AI era. ...

This cybersecurity startup is building AI-powered threat detection that actually works. While legacy security tools drown analysts in false positives, their platform uses machine learning to identify real threats with precision — from insider threats to zero-day exploits to nation-state attacks. Their customers include FTSE … attackers are using it, and the defenders need to as well. You'll work on anomaly detection, behavioural analysis, natural language processing for threat intelligence, and building interfaces that help analysts respond faster. The problems are adversarial, the data is noisy, and the stakes are real. Responsibilities Build analyst ...

highly motivated Intelligence Operations Analyst to join our team in London. You will conduct advanced investigations, analyze digital ecosystems, monitor cyber and insider threats, and transform raw intelligence into actionable insights. Key responsibilities include deep-dive research on online threats, generating intelligence reports, leading workflows from data collection ...