1 to 25 of 40 Permanent Threat Intelligence Jobs in the South East

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence ...

innovative security solutions that protect critical systems, services and infrastructure. As a Cyber Security Detection Engineer, you'll play a vital role in strengthening threat detection capabilities across government, defence, financial services and other essential industries. You'll take ownership of complex engineering challenges, transform threat intelligence … clearance without restrictions or caveats. Your future duties and responsibilities: In this role, you will take ownership of designing, developing and optimising advanced cyber threat detection capabilities across diverse and complex client environments. Working closely with Security Operations Centre (SOC) teams, security specialists and client stakeholders, you will translate ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join … experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling. What ...

data science and machine learning to cyber security problems. The role will focus on developing security analytics and Security Knowledge Graph capabilities to improve threat detection, risk prioritisation and security decision-making. Key Responsibilities Develop machine learning and statistical models for threat detection, anomaly detection and security risk … analytics. Design features and analytical methods using security telemetry, threat intelligence and enterprise data. Build and use Security Knowledge Graphs to connect entities, events, vulnerabilities and attack paths. Evaluate model accuracy, bias, explainability, robustness and operational effectiveness. Partner with security analysts and engineers to productionise analytical use cases. ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

cyber security risks you will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence, vulnerability assessment and ensuring all risks are managed taking into account business priorities and regulatory requirements. This role works closely with the CISO … . Strong stakeholder management and people management experience. Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter expert ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre Strong experience with … client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture.You’ll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities.You’ll support the engineering and continuous improvement of security controls … lifecycle of cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation.You’ll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required.You’ll remediate and/or work with Technology teams and value streams to support the remediation ...

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. You'll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. You'll support the engineering and continuous improvement of security … cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation. You'll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required. You'll remediate and/or work with Technology teams and value streams to support the remediation ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

security controls, standards, and procedures. Act as the technical lead for cyber security monitoring, vulnerability management, security hardening, and incident response. Monitor security alerts, threat intelligence and emerging cyber risks, coordinating appropriate responses. Analyse security trends and vulnerabilities, recommending and implementing risk-based improvements. Coordinate remediation activities ...