76 to 100 of 244 Permanent Threat Intelligence Jobs

Incident Response Manager, you will ensure the organisation is prepared to detect, analyse and respond to cyber threats by bringing together incident response, threat intelligence and detection engineering into a cohesive and proactive operational strategy.What You’ll Be DoingIn this highly influential role, you will lead the full … cyber incident lifecycle, from readiness and threat detection through investigation, containment, eradication, recovery and post-incident improvement. You will ensure that threat intelligence directly informs detection capabilities and response decisions, while lessons learned from incidents are translated into stronger controls, enhanced detection logic, improved playbooks and wider ...

Category: Information TechnologyRequisition Number: CYBER002028 Description Position Summary You are the kind of engineer who stays curious when no one is watching. You read threat intelligence because understanding the adversary is how you stay ahead of them. When something is compromised, you run toward it. You care more … Lead application security across the software development lifecycle by partnering with Engineering and DevOps to integrate security into design, development, testing, and deployment. Perform threat modeling, secure design reviews, code reviews, and implement automated SAST, DAST, SCA, and secrets detection within CI/CD pipelines while enabling engineering teams ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

people who are technical at heart and understand what analysts need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part … complex cases to Senior and Lead Analysts with appropriate context.Review vulnerability management output and provide basic prioritisation insight. Hunt and improveTake part in directed threat hunting activities.Suggest improvements to detections, dashboards and runbooks.Support testing of new use cases and detection logic.Collaborate and communicateProvide clear written updates for customers ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives.Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing security … operations, threat intelligence, vulnerability management, and incident response capabilities.Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats.Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents.Oversee threat intelligence programmes, identifying emerging risks and implementing ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

SIEM use cases, alerting strategies, and telemetry pipelinesBuild and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistencyPartner with Threat Intelligence to contextualize threats and improve detection coverageConduct root cause analysis (RCA) and lead post-incident reviews to drive continuous improvement and risk … GitLab in a security or engineering contextHands-on experience with SIEM, EDR, and/or detection engineeringExperience with cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience ...

prestigious public sector client. If you thrive in a dynamic environment, excel at managing teams, and possess a deep understanding of incident management and threat intelligence, this is your opportunity to make a tangible impact.As SOC Manager, you will define and lead the delivery of our Cyber Security … security. Strong understanding of incident management processes and security monitoring tools. Demonstrated ability to lead and manage high-performing security teams. Extensive experience delivering threat intelligence and assessment. Hands-on experience with cyber security solutions such as SIEM, IDS/IPS, antivirus, and endpoint detection tools. Experience managing ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence – how feeds are sourced, what constitutes actionable information ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

About the CompanyTata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of CommunicationsJob InformationJob TitleCyber Security SME: Security Solution ArchitectLocation: United Kingdom … winning medium and large cybersecurity transformation programmes.Cyber Security DomainsThe candidate should have a broad understanding of enterprise cybersecurity technologies, including:Security OperationsSIEM, SOAR, UEBA, Threat Intelligence, Threat Hunting, Incident Response, XDR, MDRNetwork SecurityNext Generation Firewalls, WAF, SASE, DNS Security, DDoS, NDREndpoint & Identity SecurityEDR, Endpoint Protection ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

cross-functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvementUtilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analyticsRequired qualifications, capabilities, and skills5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing infrastructures, cloudFoundational ...

with customers to understand their security architecture, deployment requirements, and desired business outcomesDesign comprehensive deployment strategies for CrowdStrike Falcon platform implementations, including endpoint protection, threat intelligence, identity protection, and cloud security modulesDevelop detailed Statements of Work (SOWs) that accurately reflect technical scope, resource requirements, timelines, and success criteriaCreate … security consulting or managed security servicesFamiliarity with ITIL, project management methodologies, and services frameworksExperience with identity and access management, cloud workload protection, or threat intelligence platformsIndustry certifications such as CISSP, CCSP, CEH, or relevant cloud certificationsExperience in a high-growth SaaS environmentKnowledge of compliance frameworks (NIST ...

across Tesco’s technology landscape. Apply secure, test-driven development principles to build resilient, maintainable, and scalable security solutions. Leverage automation and Applied Artificial Intelligence (AI) to enhance detection accuracy, reduce false positives, and optimise response workflows. Contribute to the hardening of cloud and enterprise environments through innovative detection … prevention mechanisms. Work closely with Security Operations Centre (SOC), Threat Intelligence, and platform engineering teams to deliver integrated, customer-first security outcomes. Actively learn from incidents, research emerging threats, and translate insights into improved detection coverage and engineering practices, fostering an inclusive and innovative team culture.You will need ...

reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world … gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure ...

reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world … gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team.You will be asked to demonstrate this live as part of the interview process ...

Tesco’s Innovation Engineering team, you will build and lead a new engineering capability that accelerates Tesco’s cyber defence through applied Artificial Intelligence (AI), automation, and modern engineering practices. You will help protect a retail ecosystem serving millions of customers, ensuring innovation is delivered safely, responsibly … without compromising trust, resilience, or responsible AI principles. In the immediate term, you and your team will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams. This team operates as an innovation incubator for Cyber Defence capabilities, rapidly exploring ideas, validating them through prototypes ...

ecosystem serving millions of customers. You will combine deep engineering expertise with an innovation mindset to build production-grade solutions that leverage applied Artificial Intelligence (AI), automation, and modern development practices to strengthen Tesco’s cyber defence. This role sits at the point where ideas become real: you will … across diverse security and technology teams with a customer-first focus. In the immediate term, you will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams. This team operates as an innovation incubator for cyber defence capabilities: rapidly exploring ideas, validating them through prototypes ...

team at Egregious have designed advanced algorithms to protect the internet from these novel threats. We are seeking a highly capable Intelligence Analyst to operate at the cutting edge of synthetic threat intelligence. This role focuses on the identification, infiltration, mapping, and intelligence extraction from coordinated … will Identify, map, and analyse coordinated synthetic influence networks , including AI-driven bots, automated personas, and hybrid human-machine operations. Conduct deep-dive intelligence collection using OSINT, HUMINT and SOCMINT methodologies to understand bot network structure, behaviour, narratives, and amplification strategies. Build and maintain persistent access to synthetic ecosystems ...

Access Management (PAM) capabilitiesLead identity governance and administration initiativesDevelop secure authentication and authorisation frameworksEnsure access management aligns with Zero Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud security architectures across Azure, AWS and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre ...