Permanent Cyber Threat Intelligence Jobs in Scotland

2 of 2 Permanent Cyber Threat Intelligence Jobs in Scotland

Senior SOC Engineer

Scotland, United Kingdom
Hybrid / WFH Options
Anson Mccade
and drive continuous improvement across detection, response, and automation. This pivotal role requires deep expertise in IBM QRadar, with a strong focus on playbook development, analytical rule creation, and threat modelling. The Senior SOC Engineer will play a key role in building and optimising detection and response strategies, ensuring robust protection against evolving threats. Key Responsibilities SIEM Engineering & Management … Deploy, configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis. Playbook Development & Automation Design and implement incident response playbooks for scenarios such as phishing, lateral movement, and data exfiltration. Integrate playbooks with SOAR platforms (e.g., Microsoft Logic … Apps, XSOAR) to streamline triage and automate response. Refine playbooks based on threat intelligence and incident insights. Threat Detection & Response Monitor and analyse security alerts and events to identify potential threats. Conduct investigations and coordinate incident response activities. Collaborate with threat intelligence teams to enhance detection logic. Threat Modelling & Use Case Development Lead threat More ❯
Employment Type: Permanent, Work From Home
Posted:

SOC Analyst

Scotland, United Kingdom
Hybrid / WFH Options
Anson Mccade
develop detection signatures. Provide incident response leadership, from containment and eradication to recovery. Collaborate with cross-functional teams and external parties (forensics, law enforcement, clients). Stay current on threat intelligence and integrate insights into monitoring processes. Contribute to the creation and refinement of runbooks, playbooks, and incident response documentation. Support pre-sales activities, solution scoping, and client …/or Azure) preferred. Willingness to participate in 24/7 operations or on-call rotations. If you're passionate about protecting organisations and leading from the front in cyber defence, we'd love to hear from you. Reference: SMM/NTD/SOC #samc More ❯
Employment Type: Permanent, Work From Home
Posted:
Cyber Threat Intelligence
Scotland
Median
£22,129