24 of 24 Remote/Hybrid Cyber Threat Intelligence Jobs in England

security of supply through facilities in Europe, the UK, and the United States. Your Role: You will be responsible for revising, developing, and maturing Threat Intelligence processes, tooling, and policies to strengthen existing services and ensure they remain effective against a constantly evolving external threat landscape. This … includes identifying external cyber risks that may impact the organisation, highlighting associated challenges, and driving improvements to the quality, timeliness, and operational effectiveness of intelligence outputs. The role will work closely with internal and external stakeholders, building strong, trusted relationships across the business and with peer organisations within ...

helping our clients interpret prioritised findings. Our aim is to become trusted advisors to our clients. You will help our clients to build cyber resilience, enhance their understanding of the threat landscape and become better prepared to face dynamic and evolving security risks. This will involve being … affected and actions they can take. Technical testing ; vulnerability scanning, attack surface discovery, manual exploit validation, light‐touch pentesting and Open‐Source Intelligence (OSINT) gathering Client Engagement ; translating client challenges into solutions that fit S‐RM’s ASM service offerings and value proposition, understanding and supporting the proposal process ...

Security Assurance Analyst (Contractor) Reports To: Head of Information and Cyber Security Department: Information Security Location: London (Hybrid - 2 days per week onsite) Contract Type: Contract (3 months) Organisation: Financial Services Compensation Scheme (FSCS) About the Role We are seeking a Security Assurance Analyst to support a strategic sourcing … across core service pillars, assessing quality, completeness, and relevance Define what meaningful performance measurement looks like across: Managed Detection and Response (MDR) Vulnerability Management Cyber Threat Intelligence Continuous Improvement Conduct structured comparisons of SOC provider performance, identifying material differences across key service dimensions Produce comparative performance assessments ...

error-free ingestion. Use Case & Detection Content Development Design, implement, test, and tune detection use cases based on attacker techniques (MITRE ATT&CK), threat intelligence, and risk appetite. Build correlation rules, anomaly-based detections, dashboards, and alerting workflows. Regularly review detection efficacy and reduce false positives through tuning … understanding of log formats (JSON, syslog, XML, CEF, etc.) and ingestion technologies (Syslog, API, Event Hubs, Kafka, Agents). Practical knowledge of detection engineering, threat modelling, and attacker behaviour analysis. Experience building and tuning correlation rules, searches, and dashboards. Familiarity with SOAR platforms and automation workflows. Security Knowledge Strong ...

integrity of the .UK registry and help protect users from online harm. This is an ideal opportunity for someone with a strong interest in cyber threat operations and a desire to build hands‐on experience and develop their skills further. What You’ll Be Doing Investigating domain abuse … reports using internal tools and open‐source intelligence (OSINT), escalating complex cases when needed Supporting operational workflows and identifying ways to improve our tools, processes and automation Assisting in the development and refinement of detection rules and identifying patterns in malicious activity Liaising with registrars and other external stakeholders ...

largest and most complex partners - helping institutions adopt digital assets securely and with confidence. You will: Advise enterprise clients on risk, compliance, investigations, cyber‐threat intelligence, and digital‐asset management solutions. Lead discovery and solution‐design sessions, translating business goals, compliance requirements, and system architectures into tailored … integrations, data‐workflow design, architecture, troubleshooting, and best‐practice implementation, supported by clear documentation. Partner with regional commercial teams - Sales, Customer Success, GPRG, Intelligence, and Product Management - to guide customers through evaluation, onboarding, and adoption. Bridge commercial and technical leadership by capturing and prioritising customer insights that inform product ...

Account Executive – Cybersecurity SaaS (Hybrid, London) Location: London (Hybrid – 2–3 days/week in office) Industry: Cybersecurity/Threat Intelligence About the Company A fast-growing cybersecurity vendor backed by top-tier investors, this company delivers cutting-edge threat intelligence solutions to help organisations stay … exceed revenue targets Requirements 3+ years of experience in SaaS or cybersecurity sales Proven track record of closing complex enterprise deals Strong understanding of threat intelligence or willingness to learn Excellent communication and consultative selling skills Based in London or able to commute to the office ...

Cyber Security Engineer Location: London (Hybrid - 2 days per week in office) Industry: SaaS Type: Full-time About the Role We are seeking a hands-on Cyber Security Engineer to join a growing Security Operations team within a fast-paced, data-driven organisation. This is an operationally focused … security posture through continuous monitoring Security Operations Perform daily alert reviews across SIEM and security tooling Contribute to runbooks, playbooks, and operational documentation Support threat intelligence analysis and apply findings to detection and response activities Work closely with Engineering, DevOps, and IT teams to drive remediation Essential Requirements ...

About the Role We are a people-focused, values-driven global service provider delivering end-to-end IT outsourcing (ITO), including cyber defence services, to a wide range of clients—from fast-growing organizations to large enterprise and public sector environments. Our security function supports clients through capabilities such … Managed Detection and Response (MDR), threat hunting, vulnerability management, penetration testing, and incident response, alongside advisory-led consulting engagements. The organization is experiencing strong growth and continues to invest in its people, platforms, and capabilities. This is an opportunity to work in a collaborative environment where professional development ...

Description: Your Impact We're looking for a Cyber Security Analyst to join the ARCHANGELTM Protective Monitoring (ProMon) Team. ARCHANGELTM delivers specialist technical cyber security services to a range of clients across a variety of industries including construction, government, defence and aerospace. The ARCHANGELTM ProMon Team sits within … responsible for providing thorough initial investigation into anomalous network activity that may lead to potential security incidents. Beyond ARCHANGELTM, Leonardo and its Cyber & Security Solutions division are a world leader in safety-through-technology, providing tailored solutions for customers in public administration, public safety and security, critical infrastructure, services ...

Senior Cyber Operations Analyst Location: Bristol (hybrid) Salary: Up to £75,000 + on-call compensation We are seeking an accomplished Senior Cyber Operations Analyst to join a high-performing Blue Team operating at the forefront of modern security operations. This is a technical role suited … client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience 5+ years experience as a Cyber Security Operations Analyst Familiarity with threat intelligence ...

Head of Cyber Security Permanent £88,000-£97,000 London (Hybrid - 2 days onsite) 30 days holiday + 8% pension + other benefits A leading regulatory organisation is seeking an experienced Head of Cyber Security to provide strategic leadership and direction across its cyber and information security … function. This is a senior, cross‐functional leadership role responsible for shaping and delivering a comprehensive cyber security strategy, ensuring organisational resilience against evolving cyber threats while enabling secure digital innovation. The Role You will lead the development and implementation of a forward‐thinking cyber security strategy ...

Python Developer – Cyber £60,000 – £70,000 | Fully Remote (UK based) We’re working with a cutting-edge cybersecurity company looking to hire a Python Developer to join their team. This is a highly technical role focused on building tools and systems that detect and analyse real-world cyber threats at scale. Main Duties of the Role Design and develop Python-based tools for threat intelligence and security research Build and optimise data pipelines to process large volumes of security data Work closely with researchers to identify, monitor, and analyse emerging threats Contribute to scalable, cloud ...

Title: Cyber Security Operations Manager Location: Liverpool City Centre on a Hybrid working basis Salary: Up to £75,000 per annum Depending on experience Job Type: Permanent, Full Time Working Hours: 37.5 hours per week, Monday to Friday Acorn are looking to recruit a brand-new role … Cyber Security Operations Manager. The Cyber Security Operations Manager will lead the operational security function responsible for protecting the organisation's information assets, technology services, and users. This role oversees all security operation functions, incident response, threat detection, vulnerability management, and continuous improvement of the organisation ...

Security Operations Analyst £75000 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Permanent Senior Cyber Operations Analyst Location: London (hybrid) Salary: Up to £75,000 + on-call compensation We are seeking an accomplished Senior Cyber Operations Analyst to join a high-performing Blue Team … client engagements; present findings and recommendations to senior stakeholders. Participate in alert testing, readiness exercises, and incident response tabletop sessions. Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience & Attributes 3+ years experience as a Cyber Security Operations Analyst Familiarity with threat ...

Cybersecurity Analyst to join its Cybersecurity Operations Group. This role plays a critical part in protecting a complex global technology environment through continuous monitoring, threat detection, and incident response. The successful candidate will work closely with security and IT stakeholders, contributing to the organisation's defensive capabilities while remaining … forefront of the evolving threat landscape. Key Responsibilities Monitor and analyse security events across networks, endpoints, and cloud environments using SIEM, EDR, and related security tools, in line with documented SLAs. Investigate, respond to, and resolve security incidents and alerts, ensuring timely detection, containment, and remediation. Perform triage ...

Cyber Security Analyst - Tier 3 When registering to this job board you will be redirected to the online application form. Please ensure that this is completed in full in order that your application can be reviewed. Come and join the Littlefish team! Work location: Nottingham (Hybrid) Salary … love to hear from you. The role and what youll be getting up to on a day-to-day basis: As a Tier 3 Cyber Security Analyst, youll work within the CSOC to detect, investigate, and respond to advanced security threats across customer environments. Youll support the CSOC Manager ...

Role: Cyber Security Assurance Specialist Salary/Rate: £45-55 per hr inside IR35 Location: Hybrid, near Oxford 3x per week Contract Duration: until December 2026 We are currently looking for a Cyber Security Assurance Specialist for our government client. This Cyber Security Assurance Specialist role … Abingdon Oxfordshire and the remainder of the week working remotely. There is no further flexibility with the on-site requirement. The contract for this Cyber Security Assurance Specialist position is until December 2026, with potential to extend, operating inside IR35. Security Clearance: eligible for Security Check ("SC Clearance") This ...

Engineer to join a high-performing Security Operations Centre (SOC) environment. This role is focused on designing, developing, and optimising detection content to strengthen cyber defence capabilities and improve threat visibility across enterprise environments. You will play a critical role in enhancing detection efficacy, reducing false positives … ensuring robust coverage against evolving threat landscapes. Key Responsibilities Design and implement detection use cases across SIEM and SOAR platforms using threat intelligence and incident data Develop, map, and maintain detection logic aligned to MITRE ATT&CK frameworks Continuously tune and optimise correlation rules to improve signal ...

CYBER SECURITY CONSULTANT Up to £110,000 + Shares + Staff Benefits Fully Remote SECURE has strategically partnered with a Multi-Award-Winning, Software-Based Organisation at the forefront of Pre-Emptive Exposure Management. As a market leader backed by significant venture funding, they combine proactive Threat Intelligence, Real Attacker Telemetry & Automated Red Teaming to Continuously Identify & Validate Real Exposure. Success in this position will enable the business to Transform Raw Intelligence into actionable insights that protect Fortune 500 Companies & Critical Infrastructure Providers, helping them outrun Real-World Threats in Real-Time. Role Overview ...

Morgan Hunt are working with a central government organisation to recruit a Principal Cyber Security Engineer on a 2-year FTC. The role requires someone with a strong background in Azure infrastructure, as well as AWS experience and Windows Server knowledge. Key Responsibilities: Technically Proficient Implementing Security Controls Administration … Improvement Training & Awareness Secure Architecture Support Compliance and Framework Alignment Essential Skills: Experience with Microsoft Sentinel, Microsoft Defender for Endpoint/Cloud SIEM tools, threat intelligence platforms, and vulnerability management Technical experience securing Microsoft Azure and Amazon Web Services cloud environments as well as on-premise/virtual ...

Security Engineer at FSB, you will play a critical role in defending the organisation against cyber threats across web applications, cloud services, and internal infrastructure. You will also champion cyber security best practice across the business, increasing colleague awareness of cyber risks and driving adoption of security … continuously improve security controls across endpoints, identity, networks, SaaS platforms, cloud services, and on-premise systems. Identify vulnerabilities and misconfigurations through scanning, logging, threat modelling, and configuration reviews, driving remediation with technical teams and service owners. Support secure delivery of web applications and APIs, working closely with ...

THROUGH UMBRELLA Role Description: "Core Responsibilities: Develop and maintain secure architecture frameworks for enterprise-grade systems, including cloud, on-premises, and hybrid environments Conduct threat modelling, risk assessments, and security gap analyses across infrastructure and application layers Define security standards, reference architectures, and policy controls based on industry frameworks … ensure secure software development lifecycles (SSDLC) Lead strategic initiatives in incident response planning, detection and mitigation strategies, and digital forensics Monitor advancements in threat intelligence and regulatory requirements, advising stakeholders on appropriate countermeasures Produce and maintain architectural documentation, ensuring traceability of security controls and compliance obligations Experience: Demonstrated ...

CYBER SECURITY CONSULTANT Up to £110,000 + Shares + Staff Benefits Fully Remote SECURE has strategically partnered with a Multi-Award-Winning, Software-Based Organisation at the forefront of Pre-Emptive Exposure Management. As a market leader backed by significant venture funding, they combine proactive Threat Intelligence ...