1 to 25 of 81 Remote/Hybrid Threat Intelligence Jobs in England

DescriptionAs the Investigative Researcher you will conduct desktop and online investigative research into cyber and online threats, to enrich our Cyber Threat Intelligence (CTI) reporting and support bespoke investigations. This role will primarily involve conducting threat actor and incident-focused research, contributing regular reporting for Control Risks … London (Bank/Monument) office at least three days per week on a hybrid basis.Key ResponsibilitiesResearch and information gatheringConduct regular profiling of cyber threat actors to support on-going incidents and investigations.Demonstrate strong investigation skills relating to specific cyber threat incidents, data breaches and other cyber security incidents.Research ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

behaviour into effective detection and response.You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm.The role would particularly suit an experienced detection engineering, security operations, red-team … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile.Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility gaps ...

into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm. The role would particularly suit an experienced detection engineering, security operations … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell's technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility ...

into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm. The role would particularly suit an experienced detection engineering, security operations … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell's technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility ...

team! We are looking for an experienced Principal Security Researcher with a Digital Forensics and Incident Response background to join our team to perform threat hunts, assist with investigations, develop threat intelligence, and cultivate effective investigation practices within Microsoft tooling and products. Researchers will support a global … cloud environments. Identifying potential threats, enabling proactive defense before an incident occurs. Presenting technical findings and recommendations to improve customers' cybersecurity posture and transferring threat intelligence knowledge to prepare customers to defend against today's threat landscape. Defining requirements for and assisting in the development of production ...

Malware Researcher to join our Malware Team. This is an exciting opportunity for someone with a strong technical foundation and a passion for cyber threat research and data science. You'll investigate emerging threats, uncover insights from complex datasets, and help shape how we detect and respond to evolving … analysis of cyber threats, malware, and adversary tactics, techniques, and procedures (TTPs).Proactively hunting for emerging threats and identifying new attack trends.Producing high-quality threat intelligence reports, blogs, and research publications.Developing data-driven methodologies to support threat hunting and intelligence production.Presenting research findings internally and externally ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.As … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting.This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits.You will be responsible for:Designing and implementing threat-led detection ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

service-led banking powered by modern technology. Job PurposeThe Cyber Operations & 3rd-Party Security Manager is responsible for the Bank's cyber security operations, threat detection, incident response, vulnerability management and 3rd-party cyber risk management capabilities. The role ensures that cyber threats, vulnerabilities, supplier risks and security events … Bank's cyber security operations capability, including oversight of security monitoring and detection services. Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers. Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure. Coordinate the operational response to cyber ...

Active SC Clearance Required Overview We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams. Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle … with security requirements. Key Responsibilities Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence. Establish and coordinate cross-functional working groups across engineering and security teams. Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact detection … SIEM rulesCollaborative: Work closely with internal teams and an outsourced SOC partnerMission-focused: Protect critical healthcare data that supports precision medicineKey ResponsibilitiesDesign and develop threat-led detections using threat intelligence and threat-hunting outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

flags, validating sources, and making judgment calls about the completeness and accuracy of information (especially during M&A cyber due diligence). Utilize threat intelligence to identify, contextualize and analyse emerging threats, vulnerabilities, and risks to clients. Develop and innovate technologies and solutions that can be used … assess cybersecurity maturity and risks. Conduct external exposure and threat intelligence assessments using a range of subscription and open-source databases and toolsets to identify the attack surface and threat profile of clients. Maintain current knowledge of industry trends, threats, methodologies, and core technologies to assimilate client ...

member of our team. This engineer will assist in the minimization of potential attack surfaces through vulnerability management, cloud configuration assessments, incorporating threat intelligence from public and private sources, and work internally to build, enhance, and automate policies, standards, and processes. They will be working with various technologies … associated countermeasures. Participate in internal meetings to map industry cyber threats to our current attack surface. Review of both internal and open-source threat intelligence sources for recently disclosed vulnerabilities at risk of introduction into the Wellington environment. Work with our Third-Party Risk team to engage third ...

Account Executive – Cybersecurity SaaS (Hybrid, London) Location: London (Hybrid – 2–3 days/week in office) Industry: Cybersecurity/Threat Intelligence About the Company A fast-growing cybersecurity vendor backed by top-tier investors, this company delivers cutting-edge threat intelligence solutions to help organisations stay … exceed revenue targets Requirements 3+ years of experience in SaaS or cybersecurity sales Proven track record of closing complex enterprise deals Strong understanding of threat intelligence or willingness to learn Excellent communication and consultative selling skills Based in London or able to commute to the office ...

DescriptionKey Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during … cyber security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date. Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances. Support cyber threat ...

Analyst. This role focuses on improving SIEM detection and monitoring capabilities. You will develop, test, maintain and improve SIEM monitoring and detection content, using threat intelligence and operational insights to improve detection coverage, accuracy and the identification of cyber threats.You will apply and refine threat-informed detection … agreed standards, providing advice on mitigation, escalation and risk reduction.Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.Support incident response ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

successful candidate will have an incident response background; technical expertise spanning infrastructure, web servers and cloud environments; a deep understanding of current and emerging threat actors; and a genuine interest in developing tooling that improves the delivery of investigations. Please note that this role will require you to work … affecting SaaS platforms and software development environments (e.g. source code repositories and CI/CD pipelines), drawing on an understanding of common development practices. Threat hunting and identification of attacker activity, using EDR and agent-led forensic tooling, to inform the investigation and containment activities Perform live compromise assessments ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...