14 of 14 Threat Intelligence Jobs in Birmingham

performance metrics and service levels, such as MTTD and MTTR, and actively contribute to improving investigation quality and response outcomes. You will apply threat intelligence to investigations and alert triage, maintaining awareness of emerging threats, vulnerabilities, and attacker techniques. Incident learnings and threat insights will … capabilities. You will also contribute to the development and tuning of SOC detection use cases, ensuring alerting remains relevant, effective, and aligned to current threat activity. This includes supporting onboarding of new services, identifying detection gaps, and recommending improvements to tooling, processes, and coverage. Clear and accurate documentation ...

such as CIS Benchmarks. Identify vulnerabilities, assess risks and support the implementation of effective remediation measures. Contribute to security monitoring, incident detection, response and threat intelligence activities. Skills and Experience The ideal candidate will have experience in several of the following areas: Strong understanding of cybersecurity fundamentals, networking ...

will contribute to post‐incident reviews by sharing findings and identifying opportunities to improve detection, response, or operational processes. You will also apply threat intelligence provided by the SOC to support alert analysis and investigations. Operational discipline is essential. You will follow defined SOC procedures, documentation standards ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence.The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging cyber ...

dealing with cyber incidents.Provide written and verbal reports to the wider IR team, senior business partners (internal and external).Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.A team-first, collaborative approach working across all relevant technical teams … requisites for the role: Demonstrably strong incident management and analytical skills. Demonstrably strong written and speaking English skills. Demonstrably strong understanding of Threat Actor TTP’s. Demonstrably strong commercial awareness. Demonstrable ability to work on own projects and within a team. At least 36 months of relevant IT Security ...

clients. Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution. Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments. Serve as the escalation point for client concerns and day-to-day operational issues. Conduct regular reviews and contribute to client … lead or supervisory role. Strong understanding of incident detection, escalation, and resolution processes. Experience with tools like SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms. Ability to manage team performance and guide junior staff in their development. Excellent verbal and written communication skills. Strong attention ...

detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously … projects that enhance the capability of our services and ensure we are providing cutting-edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting-edge technology, malware analysis, recommending detections and getting involved in strategic cross-team projects as part of your ...

management, and rigorous information assurance remain integral throughout the entire solution lifecycle. You will act as the vital bridge translating complex customer security requirements, threat intelligence, business goals, and technical constraints into coherent, highly secure architectures and control strategies. Your operating environment will span secure information exchange, cross ...

will be responsible for the following Drive AI Security Strategy: Champion the definition and deployment of security controls, frameworks, and guardrails for artificial intelligence applications across global operations. Architect Scalable Defense: Lead the architectural design across cloud (AWS/Azure), hybrid, and on-premises environments, aligning controls with frameworks … Technical Engineering & Automation: Guide cross-functional engineering teams in embedding secure-by-design principles across IAM, network defense, endpoint security, and automated pipelines. Incidents & Threat Intelligence: Oversee deep-dive technical root-cause analyses and provide technical direction during critical vulnerability remediations. C-Suite & Stakeholder Advisory: Translate complex technical ...

Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and proactively monitor SIEM infrastructure health. Security Engineering: Drive security projects, system transformations, and respond to emerging threats. What You Bring: Proven ...

networks at scale. As an SIEM Application Engineer, you'll support the design, development, operation and optimisation of an Elastic-based SIEM platform-strengthening threat detection, security monitoring and incident response. What you'll be doing: * Configure Elasticsearch pipelines to ingest security data (including from Kafka) and improve enrichment … with threat intelligence and context * Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch * Optimise SIEM rules, alerts and dashboards to improve detection accuracy and operational efficiency * Write and refine Elasticsearch queries for fast, relevant event retrieval; monitor and manage platform performance * Support ...

year Your key responsibilities Managing the end-to-end serious vulnerability response and resolution lifecycle Prioritising vulnerabilities based on severity, exploitability, business criticality, and threat intelligence Leading and managing vulnerability remediation activities across global technology teams Ensuring critical and high-risk vulnerabilities are remediated within agreed SLAs Driving ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...