51 to 75 of 131 Threat Intelligence Jobs in England

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

British Airways is seeking a Cyber Threat Lead to identify and report cyber threats relevant to BA, covering both tactical and strategic requirements. You will act as the technical leader for threat identification across BA and support threat intelligence management to ensure timely, specific information … decision making. In this role, you will engage with IAG, industry peers, and government bodies, manage intelligence requirements, and drive end-to-end intelligence lifecycle. #J-18808-Ljbffr ...

technology teams. Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes. Partner with engineering leadership to ensure risk‐driven supply chain … with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it. Detection, Response & SOC Partnership Own the strategic relationship with our 24/7 outsourced SOC holding them ...

following established playbooks and incident response processes. Manage email security operations across Mimecast and Abnormal, including releases, journal pulls, and reported-phishing investigations. Monitor threat feeds and threat intelligence, applying relevant findings to the environment. Maintain and tune detections, correlation rules, and Cortex XSOAR playbooks to reduce … management across Windows and macOS (Intune, Jamf). Strong knowledge of cloud environments, including Microsoft Azure, AWS, and Microsoft 365. Understanding of layered security, threat hunting, and incident response. Qualifications A degree in a computer-related subject, or equivalent experience in cyber security. Holding, or actively working towards, relevant ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

British Airways is seeking a Cyber Threat Lead to join our security team in the UK. You will report to the Cyber Threat Intelligence Manager and work with IAG and BA business units to identify, understand and respond to cyber threats and emerging vulnerabilities. You will lead … threat identification, support incident response, and collaborate with industry peers and government bodies to deliver end-to-end threat intelligence. Strong analytical and communication skills are essential. #J-18808-Ljbffr ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

Threat and Vulnerability Management Lead Barbican, London | Hybrid Working (One office day a week) | Technology | Fixed-Term Contract till end of 2026 | Full time Competitive Salary available, depending on experience 37.5 hours per week At Nuffield Health, our mission to build a healthier nation is powered by passionate people … make a difference every day. We are seeking an experienced Threat and Vulnerability Management Lead to join our growing Cyber Security team and take ownership of our enterprise-wide Threat and Vulnerability Management function. This is an exciting opportunity to shape and mature our vulnerability management capability, driving ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

Vice President Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Develop and maintain threat models for Mizuho information assets and services. … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

workflows, and knowledge-base content to improve consistency and operational readiness. Provide technical leadership in intrusion analysis, incident response, digital forensics, malware investigations, and threat hunting activities. Lead response efforts during significant security incidents, ensuring effective coordination, decision-making, and ownership through resolution. Stay current on threat actor … tactics, techniques, and procedures (TTPs), leveraging threat intelligence to enhance investigations, detections, and response capabilities. Partner with Engineering, Labs, and Content teams to improve detection quality, reduce false positives, and address recurring investigation gaps. What you will bring Up to 12 years of total work experience. 5+ years ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

excellent opportunity for someone who thrives in leading high-performing cyber security operations teams, driving continuous improvement, and responding to an evolving threat landscape. Candidates with experience gained within financial services, banking, insurance, defence, government or other highly regulated industries are particularly encouraged to apply. The Role … effective use and optimisation of SIEM, EDR/XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering teams to enhance detection capabilities. Manage relationships with third-party security providers and technology vendors. Produce operational ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

Security strategy, maintain a clear cyber roadmap, control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection … response times Cyber Incident Response: Own cyber incident response playbooks and readiness for realistic scenarios including ransomware, data loss, account compromise, supplier failure, insider threat and social engineering. Coordinate technical response, evidence gathering, communications input, lessons learned and remediation tracking Operational Resilience: Work with IT, Risk, Compliance and business ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. The opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with ...

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing technology … teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation ...

Management Lead will have the previous following experience: \n \n Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. \n Establish a robust asset management capability by identifying and cataloguing … prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. \n Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation's defensive ...

integration of new cybersecurity technologies and tools into OT/IC environments in partnership with the global Cybersecurity Architecture & Engineering teams. Work with Threat Intelligence to incorporate IC‐specific threat modeling, improving our ability to proactively identify vulnerabilities and mitigate threats. Awareness & Training: Drive advanced security awareness ...

Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre Strong experience with … client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

include: Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements. Monitor, triage and investigate security alerts/reports. Analyse security event data, including … firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. For more information or to process your application, please apply ...

M365 Consultant/Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud … cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

runbooks and playbooks, maturity assessments and table-top exercises. Cyber Defence (Security Operations). You will advise clients on incident management, vulnerability management and threat intelligence. Work includes designing operating models for threat intelligence teams, building attack surface monitoring at scale, and advising on Frontier … findings into phased recovery and security improvement roadmaps. What they are looking for Across all three roles: A broad understanding of the cyber security threat landscape Strong technical grounding in computers and networks Proven experience of cyber security incidents and the response measures around them Excellent written and verbal ...