1 to 25 of 29 Threat Intelligence Jobs in Central London

internal use): 11. The Team The Cyber Defense team is at the forefront of protecting S&P Global's critical assets through advanced threat intelligence and proactive security measures. We operate as a collaborative, high-performing unit that values technical excellence, continuous learning, and innovative approaches to emerging … team culture emphasizes knowledge sharing, mentorship, and the pursuit of industry-leading security practices. Responsibilities and Impact Own and lead the end-to-end Threat Intelligence Platform, driving its strategic design, delivery, and ongoing development to maximize value and adoption across the global cyber defense organization. Build ...

seeking a highly motivated, self-driven Cyber Threat Intelligence Analyst to join a global threat intelligence team. The role will be located in London, UK. The position will report to the Threat Intelligence Manager and will involve technical research and intelligence analysis … industry, business, and related technologies. The ideal candidate will be aware of industry trends and frameworks and how they could impact our business, including threat actor groups, their TTPs, intrusion activities, and geopolitical relevance. Job Description Collects, processes, and disseminates cyber threat intelligence from varying sources, including ...

seeking a highly motivated, self-driven Cyber Threat Intelligence Analyst to join a global threat intelligence team in London, UK. The role reports to the Threat Intelligence Manager and involves technical research and intelligence analysis of threats relevant to our industry and related … technologies. Responsibilities include collecting, processing, and disseminating cyber threat intelligence, producing strategic and tactical intelligence products, and briefing senior leaders. #J-18808-Ljbffr ...

Description Job Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. We build, tune, and maintain the detection content that security operation teams depend on, and hunt proactively for threats that existing controls … catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, and document the intent, data source, and expected behavior of each detection Detection ...

Global is seeking a Senior Threat Intelligence Lead to own and advance the Threat Intelligence Platform within the Cyber Defense team. You will design and deliver strategic capabilities, integrate critical intelligence feeds, and promote best practices across a global organization. You will mentor junior analysts … produce actionable intelligence for technical and executive audiences, and collaborate with security, testing, and incident response teams to strengthen the firm’s defensive #J-18808-Ljbffr ...

Meta is seeking Security Engineers to join our Applied Artificial Intelligence (AAI) organization. As a Security Engineer in AAI, you will apply deep domain expertise to solve hard, real-world security problems, building novel security capabilities, prototyping AI-powered defenses, and advancing the frontier of what AI systems … original adversary research, developing detection and response capabilities, and translating security expertise into scalable, AI-native systems. Your domain knowledge — whether in detection engineering, threat intelligence and adversarial analysis, cloud security, adversary simulation, mobile and platform security, forensic investigation, or emerging areas like AI/ML security — becomes ...

identity management frameworks. Preferred qualifications: Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent). Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters. Proven experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex client … this role, you will be a trusted delivery partner for organizations undergoing massive infrastructure shifts or looking to validate their structural defenses against sophisticated threat actors. You will be comfortable managing technical projects, leading architecture workstreams, and translating deep technical details into clear business terms for management and engineering ...

risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant … term or strategic security transformation projects in addition to IR engagements. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. ...

unstoppable together. And we're just getting started. Join us to put AI to work for people. Job Description We are expanding our Vulnerability Intelligence, Prioritization & Detection Response (VIPR/VMDR) capability to elevate Armis’ cyber defense posture globally. This role will lead the integration of vulnerability discovery, detection … intelligence enrichment, prioritization, and coordinated response into a unified, high-impact customer program across EMEA. Role Overview The VIPR & VMDR Expert serves as an architect,, strategic analyst and technical operator — combining vulnerability lifecycle management with exploit intelligence, detection automation, and cross-functional coordination (ITSM). You’ll lead ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

would also depend on your ability to adhere to the UK Security Clearance check criteria. iProov is looking for a biometric incident responder and threat analyst. This specialised role will combine data analytics and threat intelligence methods and will include daily monitoring coverage of internally raised alerts … active threat hunting of novel attack methodologies. We are looking for someone with experience in incident triage, an interest in biometrics and expanding their skill set. How you can make an impact Monitor biometric imagery from production traffic to detect patterns of fraudulent behaviour. Escalate validated and confirmed imagery ...

JPMorgan Chase & Co. is seeking a Blockchain Intelligence Vice President to lead and evolve threat intelligence for our institutional blockchain security operations. You will own on-chain/off-chain monitoring, threat detection, and incident response across complex environments. You will collaborate with cross-functional teams ...

London Market insurer to join its cyber team in a hybrid role based in City of London. The position offers exposure to cyber risk, threat intelligence, and cyber insurance at scale. You will work with senior risk stakeholders on threat landscape monitoring, risk appetite, incident scenario modelling … market intelligence, while developing reports and training materials for diverse audiences. #J-18808-Ljbffr ...

Meta is seeking Security Engineers to join our Applied Artificial Intelligence (AAI) organization. As a Security Engineer in AAI, you will apply deep domain expertise to solve hard, real-world security problems — building novel security capabilities, prototyping AI-powered defenses, and advancing the frontier of what AI systems … original adversary research, developing detection and response capabilities, and translating security expertise into scalable, AI-native systems. Your domain knowledge — whether in detection engineering, threat intelligence, cloud security, adversary simulation, forensic investigation, or emerging areas — becomes the foundation for capabilities no existing AI system can replicate.This role ...

Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title Incident Response Analyst Location Hybrid; 1 day per month reporting in London office Employment Type Full-time Profile … team. This is an exciting opportunity to play a critical role in protecting organisations from cyber threats by leading investigations, conducting digital forensics, performing threat hunting activities, and driving continuous improvements in incident detection and response. As an Incident Response Analyst, you will work across a diverse range ...

including network and endpoint alerts, to ensure security logging and monitoring coverage meets the needs of CFC's business objectives and its technology and threat environments. Leads incident response operations and continuous improvement from investigation through containment and recovery, publishes incident reports with revised playbooks. Designs and operates threat assessment services, including threat profiling and modelling and attack simulation, and records attack paths, threat intelligence and new requirements arising from assessments. Diagnoses complex chains of vulnerabilities or misconfigurations in software, application security tests, the build pipeline, malware defences, email and web protection, secure configuration ...

Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: Senior Azure Security Engineer Location: Hybrid; 1 day per month reporting in London office Employment Type: Full-time … Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365 and Defender XDR. Develop security monitoring use cases, threat detections and hunting queries aligned to business risks, threat intelligence and MITRE ATT&CK. Design secure cloud and hybrid architecture patterns ...

providers. Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement of the Information Security Management System (ISMS). Conduct security … client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption and use of Artificial Intelligence (AI) technologies across the organisation. Conduct security and privacy risk assessments for AI platforms, tools, and third‐party AI service providers. Evaluate AI solutions ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security Operations, and Incident Management … fast-paced environment. Key Responsibilities Investigate and respond to cyber security incidents across the enterprise environment. Perform host-based investigations, forensic analysis, and threat containment activities. Monitor and support critical information security technologies operating within a 24/7 environment. Work closely with internal and external stakeholders to support ...

Cybersecurity Threat Detection team seeks a skilled professional to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms, aligned with MITRE ATT&CK. You will hunt threats, validate log health, and collaborate with threat intelligence and incident response to stay ahead of adversaries. Strong ...

confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. … unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team. Built cloud ...

. Security Operations (SecOps) & Cyber Defense: Design and build solutions that integrate with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization: Build data ...

efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company. What is the role? A successful candidate will be focused … during times of staff shortage Coordinate & communicate Delegate tasks in a timely manner and manage them to closure or management handoff Facilitate incident/threat resolution through prompt communication across multiple teams Document status and regularly communicate updates to stakeholders and senior management Maintain and track key metrics ...