126 to 150 of 211 Threat Intelligence Jobs in England

management, and rigorous information assurance remain integral throughout the entire solution lifecycle. You will act as the vital bridge translating complex customer security requirements, threat intelligence, business goals, and technical constraints into coherent, highly secure architectures and control strategies. Your operating environment will span secure information exchange, cross ...

analysis, and support post-incident reviews with a focus on remediation actions. Security Monitoring & Continuous Improvement: Review security events related to vulnerability exploits, correlate threat intelligence data, and support enhancements to SIEM, SOAR, and EDR systems. Contribute to cybersecurity metrics and improvement initiatives. Ideal Candidate Profile Must hold ...

Participate in shift rotations, including nights and weekends if required. Support Growth of our SOC as a Service capabilityStay current on cybersecurity trends and threat intelligence. Required Qualifications: Associate's or Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

while shaping the organisation's approach through the development of security frameworks, policies, standards and best practices. The role provides technical leadership in AI threat modelling, risk assessment and security testing, while monitoring emerging threats, industry developments and evolving technologies. Acting as a trusted advisor to stakeholders … security subject matter knowledge to support risk-informed decision-making and the secure adoption of AI technologies across the FCA Carry out AI threat modelling, security risk assessment and security design activities for AI systems and emerging digital capabilities, providing specialist recommendations on risk treatment, security controls and secure ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps integration ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps integration ...

vulnerability incidents. Issue timely notifications and communications related to security vulnerabilities. Proactive Identification and Mitigation: Stay informed about emerging threats and vulnerabilities from vendors, threat intelligence, and subscriptions. Assess potential impacts and recommend mitigating actions. Implement best practices for vulnerability treatment, including working with our operational teams ...

Head of Cyber Risk (GHCR) in delivering the cyber security strategy and Mid-term Plan (MTP). Lead the gathering and analysis of market intelligence, contributing to the bi-annual CCoE Horizon Scan, the regular cyber market intelligence report, and ad-hoc internal Technical, Cyber Risk and Market … Intelligence reports. Support the team in the development and delivery of cyber technical training. Support the maintenance and production of Realistic Disaster Scenarios (RDS) and broader risk parametrisation relating to the internal accumulation model. Lead the CCoE's assessment and selection of technical tools, explaining the technical landscape ...

Generation (RAG), and Agentic AI architectures . Strong understanding of Cyber Security Operations Centres (SOC) and associated technologies including SIEM, SOAR, EDR/XDR, threat intelligence, and security operations platforms . Extensive experience defining data architectures, API strategies, and integration patterns to enable AI capabilities within complex enterprise ...

operational effectiveness of cybersecurity controls. Understanding of information security principles and control frameworks, such as COBIT and COSO. Knowledge of cybersecurity domains, including: Threat intelligence and vulnerability management. Security testing and security architecture. Infrastructure protection and application security. Identity and access management. Incident investigation and response. Cryptography. Strong ...

identification and triage through to remediation and closure. Work with infrastructure, engineering and technology teams to coordinate and track remediation activities. Review vulnerability data, threat intelligence feeds and security advisories to determine business risk and remediation priorities. Produce reports, dashboards and metrics to demonstrate vulnerability trends, remediation progress ...

monitoring dashboards. Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents. Utilise online resources for researching and collecting threat intelligence to improve the SOC's abilities to detect cyber-attacks. Develop new, or improve existing run books and use cases based on investigations ...

event analysis and triage potential threats, including recognising successful and unsuccessful intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration ...

work in and help develop an increasingly AI-enabled SOC.ResponsibilitiesMonitor, assess, prioritize, and investigate security alerts and incidents using enterprise security telemetry and threat intelligence. Escalate when specialist expertise is required. Investigate confirmed malicious activity across endpoint, identity, network, cloud, and other relevant data sources. Execute or coordinate approved … containment actions. Maintain clear documentation of incident timelines, investigative notes, evidence, decisions, and response actions. Collaborate with peer incident responders, threat intelligence, detection engineering, wider technology and business teams. Participate in post-incident reviews and lessons learned, identifying opportunities to improve detections, playbooks, telemetry, and response processes. ...

Land Registry (HMLR), in partnership with Inspire People, is seeking a Senior Infrastructure Specialist - Red Team with experience in penetration testing, adversary emulation, threat analysis, Infrastructure as Code, DevOps and security operations. This permanent opportunity offers a salary of £49,443 - £60,527, hybrid working with 60% office attendance … relied upon by millions of people every day. Working alongside Security Operations, Security Assurance, infrastructure engineers and technical specialists, you'll emulate real-world threat actors to identify vulnerabilities, test security controls and improve HMLR's security posture. As a Senior Infrastructure Specialist - Red Team, you will: * Conduct ...

will be responsible for the following Drive AI Security Strategy: Champion the definition and deployment of security controls, frameworks, and guardrails for artificial intelligence applications across global operations. Architect Scalable Defense: Lead the architectural design across cloud (AWS/Azure), hybrid, and on-premises environments, aligning controls with frameworks … Technical Engineering & Automation: Guide cross-functional engineering teams in embedding secure-by-design principles across IAM, network defense, endpoint security, and automated pipelines. Incidents & Threat Intelligence: Oversee deep-dive technical root-cause analyses and provide technical direction during critical vulnerability remediations. C-Suite & Stakeholder Advisory: Translate complex technical ...

backlog, building, tuning and retiring detections across Microsoft Sentinel and Defender, mapped to a coverage model such as MITRE ATT&CK. You'll turn threat intelligence into detection logic and hunting activity, and drive our automation and SOAR maturity by building Logic App playbooks that reduce manual effort … technologies and frameworksIt would be great if you also haveExperience in regulated financial servicesExposure to identity centric detection (Entra ID) and cloud native threat detectionGCIH, GCFA or an equivalent hands-on IR or detection certificationLinks to the SOC and detection engineering community, through conferences, speaking or open source detection ...

Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate AI approaches, including Generative AI, LLMs, RAG and agentic AI. Conduct technical feasibility assessments and build ...

/DFIR Consultant to join its specialist security team. You'll investigate and respond to security incidents across customer environments, working alongside experienced SOC, Threat Intelligence and Detection Engineering teams. Key Responsibilities Investigate and respond to incidents across endpoint, identity, network and cloud environments. Conduct digital forensic investigations ...

with a business-focused approach – protecting what is most valuable to our clients. You’ll be assessing risk across business, technology and operations, considering threat intelligence and helping to build the full security view that underpins systems resilience and client confidence.Required qualifications to be successful in this role ...

supplier cyber security policies and standards for assessments.Advise client’s on improving their supplier assurance risk management processes.Understand cyber threats and able to utilise threat intelligence for assessments.Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response ...

security policies and standards for assessments. Advise client's on improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident ...

security technologies in a complex environment. In-depth technical knowledge across areas such as SIEM, DLP, firewalls, cloud security centres, intrusion prevention, cyber threat intelligence and vulnerability scanning. Strong leadership, influencing and supplier management skills, with the judgement to make clear, risk-based recommendations. Excellent analytical skills ...