26 to 50 of 186 Cyber Threat Jobs in London

powered by modern technology.Job PurposeThe Cyber Operations & 3rd-Party Security Manager is responsible for the Bank's cyber security operations, threat detection, incident response, vulnerability management and 3rd-party cyber risk management capabilities. The role ensures that cyber threats, vulnerabilities, supplier … cyber security operations capability, including oversight of security monitoring and detection services.Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers.Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.Coordinate the operational response to cyber security incidents ...

information assets against cyber threats. You will join a dedicated Cyber Defence team, supporting security alert triage, incident investigation, threat detection and cyber incident response. Key Responsibilities Triage and investigate cyber security alerts and user-reported security incidents. Investigate systems, files … experience with Splunk . Experience with Microsoft 365 security technologies, including: Microsoft Defender Microsoft Sentinel KQL Strong understanding of common cyber threat actor tactics, techniques and procedures (TTPs). Experience analysing alerts, identifying potential threats and assessing the scope and impact of incidents. Strong analytical and problem ...

data against evolving cyber threats. The successful candidates will play a key role in security monitoring, incident response, detection engineering, and threat analysis, working alongside Security Operations, Threat Intelligence, and Incident Response teams. You will act as a cyber security subject matter expert, helping … strengthen defensive capabilities while contributing to the continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network ...

response leadership team.Digital forensics of relevant incident data (disk, volatile memory, network packets, log files).Maintaining a current view of the cyber threat, and being able to advise clients on the threat landscape and attacks which may be relevant to them.Manage the development of KPMG … extraction, eradication, recovery, forensic analysis and investigation.Fluent German speaker and ability to draft reports in German.A broad understanding of the cyber security threat landscape.Strong technical background in computers and networks, and programming skills.Significant and proven experience of dealing with cyber security incidents and associated response ...

team. Digital forensics of relevant incident data (disk, volatile memory, network packets, log files). Maintaining a current view of the cyber threat, and being able to advise clients on the threat landscape and attacks which may be relevant to them. Manage the development of KPMG … recovery, forensic analysis and investigation. Fluent German speaker and ability to draft reports in German. A broad understanding of the cyber security threat landscape. Strong technical background in computers and networks, and programming skills. Significant and proven experience of dealing with cyber security incidents ...

identify risks, strengthen resilience, and navigate emerging cyber threats. You'll gain exposure to cutting-edge topics including Artificial Intelligence (AI), Continuous Threat Exposure Management (CTEM), quantum computing, cyber resilience, and next-generation security technologies.This is an excellent opportunity for individuals who are curious, analytical … cyber threats, vulnerabilities, and emerging risks across technology environments.Contribute to cyber risk assessments, control reviews, and security maturity assessments.Support Continuous Threat Exposure Management (CTEM) activities, including exposure identification, prioritisation, and remediation tracking.Research emerging technologies and their security implications, including Artificial Intelligence, quantum computing, cloud technologies ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency.You will work alongside Accenture's CrowdStrike Business Group … customer capacityMinimum 5 years technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementMinimum 5 years experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure ...

defense posture. Accentureprovidesthe opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business … vendor, partner, or customer capacity Experiencewith at least two of the following: SIEM platforms (Splunk,QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experiencewith enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT/ICS environments ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business … customer capacity Minimum 2 years experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Minimum 2 years experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure ...

platforms (AWS, Azure, or GCP)Security design and assurance expertiseKnowledge of security frameworks and standardsSecurity Operations AnalystKey responsibilities include:Security operations monitoring and analysisCyber threat intelligence assessmentThreat modelling and risk identificationIncident investigation and security event analysisExperience required:Security Operations Centre (SOC) or cyber defence experienceHands-on threat intelligence and analysis capabilityThreat modelling expertiseStrong understanding of cyber security technologies and processesThreat Intelligence AnalystKey responsibilities include:Production of threat intelligence reports and assessmentsAnalysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs)Tracking emerging cyber threats and threat actorsSupporting security architecture ...

Operations.You will own the full incident response lifecycle, run follow-the-sun security operations across AMER, EMEA, and APAC, direct the cyber threat intelligence program, and drive the conversion of that intelligence into the detection coverage and defensive architecture that protect Kyndryl's global enterprise estate. … maintained throughout.Coordinate with the Incident Commander function with clear escalation authorities, runbooks, and cross-functional coordination protocols for cybersecurity incidents.Direct the Cyber Threat Intelligence program and own the intelligence-to-defense loop: convert prioritized adversary intelligence into detection requirements, control coverage decisions, and changes to the defensive ...

Responsibilities Monitor and analyse security alerts from SIEM and security tooling platforms Perform triage and investigation of security events and potential incidents Conduct threat hunting and identify indicators of compromise Escalate and coordinate incident response activities where required Analyse endpoint, network, and cloud security telemetry Develop and improve detection … rules and use cases Produce detailed investigation and incident reports Collaborate with cyber threat intelligence and incident response teams Support continuous improvement of SOC processes and procedures SOC Analyst - Required Skills and Experience Active DV clearance Experience working within a SOC environment (Level 2 or Level ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact detection … SIEM rulesCollaborative: Work closely with internal teams and an outsourced SOC partnerMission-focused: Protect critical healthcare data that supports precision medicineKey ResponsibilitiesDesign and develop threat-led detections using threat intelligence and threat-hunting outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain ...

agendas, and difficulties.o Maintaining a balanced relationship with risk, compliance, legal, human resources, and internal and external audit functions.• Knowledge of technology, security, and threat landscapes:o Staying abreast of emerging technologies, including all security technologies,o Sustaining a deep and in-depth knowledge of the cyber threat landscape,o Maintain and constantly enriching knowledge of information security and cyber risks as they develop,o Being able to propose and explain appropriate cyber risk counter measures clearly and concisely.o Remaining informed and knowledgeable on primary global data protection regulations ...

programs and projects. The role works to make QBE safe, secure and resilient; working to continuously out pace and outsmart cyber threat faced by our business. This intellectually challenging and highly influential role is part of an enterprise wide Cyber Security capability, accountable for safeguarding … Cyber engagement across QBE to ensure issues are identified, self‐reported and notified to key stakeholders. Act with integrity and transparency in threat and risk identification and problem solving. Role model the creation, innovation and negotiation of solutions and risk mitigation strategies; driving fast‐paced and agile ...

incident response capability, strengthen our security operations and contribute to the resilience of our cloud-first banking platform against an evolving cyber threat landscape. What’s the Opportunity? This is an exciting opportunity to join our Information Security team in a role that combines hands-on cyber security expertise with strategic oversight across incident response, threat detection, cloud security and technical assurance. Working across cloud and on-premise environments, you’ll identify and investigate emerging threats, assess technologies and architectures from a security perspective, and continually improve our defensive capabilities. You’ll work closely ...

security tooling, with a focus on removing attacker persistence and restoring trust. Drive patching and vulnerability remediation activities, prioritising actions based on business risk, threat actor behaviour and incident context. Review and redesign network architecture and security controls, including segmentation, firewall rules, and administrative access pathways, to reduce reinfection … process; scoping and triage, containment, evidence preservation and extraction, eradication, recovery, forensic analysis and investigation. A broad understanding of the cyber security threat landscape. Strong technical background in computers and networks, and programming skills. Significant and proven experience of dealing with cyber security incidents ...

digital forensics of relevant incident data (disk, volatile memory, network packets, log files). Maintain a current view of the cyber threat and being able to advise clients on the threat landscape and attacks which may be relevant to them. Liaising with clients on delivery, implementation … process; scoping and triage, containment, evidence preservation and extraction, eradication, recovery, forensic analysis and investigation. A broad understanding of the cyber security threat landscape. Strong technical background in computers and networks, and programming skills. Proven experience of dealing with cyber security incidents and associated response ...

role in strengthening cyber resilience and protecting critical enterprise systems. This is a hands-on operational security role focused on threat detection, incident response and continuous improvement of security monitoring capabilities. The position of Cyber Security Analyst is suited to an experienced security professional … enhance SecOps processes and documentation to enable knowledge sharing Investigate security events, perform vulnerability analysis and support remediation activities Analyse cyber threat intelligence and translate insights into actionable detection improvements Process indicators of compromise and indicators of attack to enhance detection rules Conduct proactive threat hunting ...

leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives.Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing security operations, threat intelligence, vulnerability management, and incident response capabilities.Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats.Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents.Oversee threat ...

## Third Party Cyber Risk LeadApplylocations: UK - London ( St Botolph )time type: Full timeposted on: Posted Todayjob requisition id: 2026-628**Job Title:** Third Party Cyber Risk Lead**Reporting to:** Cyber Governance Manager**Direct Reports:** None**Position Type:** Permanent**Why** **Tokio Marine HCC?**Standing … measurable targets and desired outcomes.* A passion to champion a cyber security culture and continuous learning of latest cyber threat trends.* Strong communication skills with the ability to explain complex security issues to non-technical stakeholders.**Desirable:*** Experience with third party risk management platforms ...

Microsoft Defender Vulnerability Management and Tenable to identify and prioritise vulnerabilities.Translate vulnerability findings into actionable remediation plans with technology stakeholders.Leverage cyber threat intelligence to improve detection capabilities and prioritisation decisions.Track remediation progress and provide meaningful risk reporting to cyber leadership.Stakeholder Management & CollaborationPartner with Group … functions.Experience operating within hybrid cloud and on-premise environments.Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies.Experience with detection engineering, threat detection and security automation.Exposure to vulnerability management platforms such as Tenable or Microsoft Defender Vulnerability Management.Experience managing stakeholder communications during high-severity incidents.Strong understanding ...

## Threat Research AnalystApplylocations: London Office, United Kingdom: Cambridge Officetime type: Full timeposted on: Posted Todayjob requisition id: JR102136Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day. Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect … Raise Our Bar | Move First. Learn Fast **Job D****escription****:**At Darktrace, we're looking for a curious and driven Threat Research Analyst to join our Malware Team. This is an exciting opportunity for someone with a strong technical foundation and a passion for cyber threat ...

Manager, Cyber Security, Identity , TC UKI Location: London Other locations: Primary Location Only Date: 25 Jul 2026 Requisition ID: 1673541 At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your … Practice - is part of a global cyber team of 5,000+ professionals focused on developing and deliveringcutting edgesecurity transformationprogrammes, cyber threat management, identity and access management, security architecture, data protection and privacy, and resilience services. We are part of a wider advisoryorganisationthat collectively comprises ...

throughout the regional businesses.Incident Management and ResilienceProvide leadership during significant cybersecurity incidents affecting international operations.Coordinate with cyber defense center, cyber threat intelligence, technical and business teams during regional cyber events.Ensure regional readiness for cyber incidents and operational disruptions through resilience testing … Regulatory ExpertiseCybersecurity frameworks and controls.Operational resilience and business continuity.Cloud security and emerging technologies.AI security and governance.Data protection and privacy requirements.Identity and access management.Cyber threat intelligence and incident response.Third-party and supply chain risk management.Success MeasuresRegulatory outcomesReduction of material cybersecurity risk across the regional teams.Cyber resilience maturity improvements.Timely remediation ...