101 to 125 of 211 Threat Intelligence Jobs in England

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

environmentsOversee third-party security testing, including penetration testing and phishing simulationsPromote a strong cyber security culture through training and awareness initiativesMonitor and report on threat intelligence trends and emerging risksAbout YouYou will be a strategic and influential cyber security leader with a strong track record of operating ...

will contribute to post‐incident reviews by sharing findings and identifying opportunities to improve detection, response, or operational processes. You will also apply threat intelligence provided by the SOC to support alert analysis and investigations. Operational discipline is essential. You will follow defined SOC procedures, documentation standards ...

security alerts raised by Users. Enhancing and creating analytic triggers to enhance alert efficacy. Continuous development of incident handling and readiness processes. Proactive threat hunting based on threat intelligence. Documentation of incidents and investigations. RequirementsAbout your SkillsWe're open-minded when it comes to hiring and we care … Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience with Incident Command and conducting Tabletop ExercisesInterest in Automation. Interest in Threat Intelligence and Analytic Tuning. A high level understanding of mobile, network and operating system security controls. Any experience of programming in Python ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence.The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging cyber ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence.The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging cyber ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

dealing with cyber incidents.Provide written and verbal reports to the wider IR team, senior business partners (internal and external).Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.A team-first, collaborative approach working across all relevant technical teams … requisites for the role: Demonstrably strong incident management and analytical skills. Demonstrably strong written and speaking English skills. Demonstrably strong understanding of Threat Actor TTP’s. Demonstrably strong commercial awareness. Demonstrable ability to work on own projects and within a team. At least 36 months of relevant IT Security ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture.You’ll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities.You’ll support the engineering and continuous improvement of security controls … lifecycle of cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation.You’ll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required.You’ll remediate and/or work with Technology teams and value streams to support the remediation ...

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. You'll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. You'll support the engineering and continuous improvement of security … cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation. You'll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required. You'll remediate and/or work with Technology teams and value streams to support the remediation ...

opportunityWe are seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve … agreements (SLAs)Lead security incident response end to end, from triage and containment through to post-incident review and root cause analysisMonitor the emerging threat landscape and recommend enhancements to our detection and response capabilitiesAutomation, reporting and assuranceAutomate repetitive security processes through scripting and infrastructure-as-codeDeliver operational security ...

cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem-solving ...

working on complex client environments across cloud, on-premises and hybrid infrastructure.This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security, while working alongside experienced engineering and security specialists.The RoleAs a Cyber Security Engineer … network security managementDeveloping and maintaining security policies, standards and proceduresConducting infrastructure security assessments using tools such as CIS BenchmarksSupporting incident detection, response and threat intelligence activitiesContributing to vulnerability management and endpoint securitySupporting security improvements across complex client environmentsWhat We're Looking ForWe're interested in engineers with experience ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

compromise, and policy violations correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity. * Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. * Work with Detection and Automation team … 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/ ...

clients. Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution. Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments. Serve as the escalation point for client concerns and day-to-day operational issues. Conduct regular reviews and contribute to client … lead or supervisory role. Strong understanding of incident detection, escalation, and resolution processes. Experience with tools like SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms. Ability to manage team performance and guide junior staff in their development. Excellent verbal and written communication skills. Strong attention ...

clients. Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution. Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments. Serve as the escalation point for client concerns and day-to-day operational issues. Conduct regular reviews and contribute to client … lead or supervisory role. Strong understanding of incident detection, escalation, and resolution processes. Experience with tools like SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms. Ability to manage team performance and guide junior staff in their development. Excellent verbal and written communication skills. Strong attention ...

security controls, standards, and procedures. Act as the technical lead for cyber security monitoring, vulnerability management, security hardening, and incident response. Monitor security alerts, threat intelligence and emerging cyber risks, coordinating appropriate responses. Analyse security trends and vulnerabilities, recommending and implementing risk-based improvements. Coordinate remediation activities ...

detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously … projects that enhance the capability of our services and ensure we are providing cutting-edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting-edge technology, malware analysis, recommending detections and getting involved in strategic cross-team projects as part of your ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...