1 to 25 of 43 Remote/Hybrid Threat Intelligence Jobs in London

DescriptionAs the Investigative Researcher you will conduct desktop and online investigative research into cyber and online threats, to enrich our Cyber Threat Intelligence (CTI) reporting and support bespoke investigations. This role will primarily involve conducting threat actor and incident-focused research, contributing regular reporting for Control Risks … London (Bank/Monument) office at least three days per week on a hybrid basis.Key ResponsibilitiesResearch and information gatheringConduct regular profiling of cyber threat actors to support on-going incidents and investigations.Demonstrate strong investigation skills relating to specific cyber threat incidents, data breaches and other cyber security incidents.Research ...

into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm. The role would particularly suit an experienced detection engineering, security operations … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell's technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility ...

team! We are looking for an experienced Principal Security Researcher with a Digital Forensics and Incident Response background to join our team to perform threat hunts, assist with investigations, develop threat intelligence, and cultivate effective investigation practices within Microsoft tooling and products. Researchers will support a global … cloud environments. Identifying potential threats, enabling proactive defense before an incident occurs. Presenting technical findings and recommendations to improve customers' cybersecurity posture and transferring threat intelligence knowledge to prepare customers to defend against today's threat landscape. Defining requirements for and assisting in the development of production ...

Malware Researcher to join our Malware Team. This is an exciting opportunity for someone with a strong technical foundation and a passion for cyber threat research and data science. You'll investigate emerging threats, uncover insights from complex datasets, and help shape how we detect and respond to evolving … analysis of cyber threats, malware, and adversary tactics, techniques, and procedures (TTPs).Proactively hunting for emerging threats and identifying new attack trends.Producing high-quality threat intelligence reports, blogs, and research publications.Developing data-driven methodologies to support threat hunting and intelligence production.Presenting research findings internally and externally ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.As … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting.This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits.You will be responsible for:Designing and implementing threat-led detection ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

service-led banking powered by modern technology. Job PurposeThe Cyber Operations & 3rd-Party Security Manager is responsible for the Bank's cyber security operations, threat detection, incident response, vulnerability management and 3rd-party cyber risk management capabilities. The role ensures that cyber threats, vulnerabilities, supplier risks and security events … Bank's cyber security operations capability, including oversight of security monitoring and detection services. Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers. Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure. Coordinate the operational response to cyber ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact detection … SIEM rulesCollaborative: Work closely with internal teams and an outsourced SOC partnerMission-focused: Protect critical healthcare data that supports precision medicineKey ResponsibilitiesDesign and develop threat-led detections using threat intelligence and threat-hunting outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain ...

flags, validating sources, and making judgment calls about the completeness and accuracy of information (especially during M&A cyber due diligence). Utilize threat intelligence to identify, contextualize and analyse emerging threats, vulnerabilities, and risks to clients. Develop and innovate technologies and solutions that can be used … assess cybersecurity maturity and risks. Conduct external exposure and threat intelligence assessments using a range of subscription and open-source databases and toolsets to identify the attack surface and threat profile of clients. Maintain current knowledge of industry trends, threats, methodologies, and core technologies to assimilate client ...

member of our team. This engineer will assist in the minimization of potential attack surfaces through vulnerability management, cloud configuration assessments, incorporating threat intelligence from public and private sources, and work internally to build, enhance, and automate policies, standards, and processes. They will be working with various technologies … associated countermeasures. Participate in internal meetings to map industry cyber threats to our current attack surface. Review of both internal and open-source threat intelligence sources for recently disclosed vulnerabilities at risk of introduction into the Wellington environment. Work with our Third-Party Risk team to engage third ...

Account Executive – Cybersecurity SaaS (Hybrid, London) Location: London (Hybrid – 2–3 days/week in office) Industry: Cybersecurity/Threat Intelligence About the Company A fast-growing cybersecurity vendor backed by top-tier investors, this company delivers cutting-edge threat intelligence solutions to help organisations stay … exceed revenue targets Requirements 3+ years of experience in SaaS or cybersecurity sales Proven track record of closing complex enterprise deals Strong understanding of threat intelligence or willingness to learn Excellent communication and consultative selling skills Based in London or able to commute to the office ...

DescriptionKey Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during … cyber security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date. Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances. Support cyber threat ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

successful candidate will have an incident response background; technical expertise spanning infrastructure, web servers and cloud environments; a deep understanding of current and emerging threat actors; and a genuine interest in developing tooling that improves the delivery of investigations. Please note that this role will require you to work … affecting SaaS platforms and software development environments (e.g. source code repositories and CI/CD pipelines), drawing on an understanding of common development practices. Threat hunting and identification of attacker activity, using EDR and agent-led forensic tooling, to inform the investigation and containment activities Perform live compromise assessments ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership.Key responsibilities:This role will provide you the opportunity to lead key activities to progress your … capability through coaching, review and structured feedback.Represent the area in CSO governance and cross-functional forums.Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership. Key responsibilities: This role will provide you the opportunity to lead key activities to progress … coaching, review and structured feedback. Represent the area in CSO governance and cross-functional forums. Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.Build and run continuous control monitoring ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation. Experience managing outsourced security providers, holding suppliers accountable for service delivery and working ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence … work day may sometimes be needed. Qualifications, Skills, and Experience Relevant experience in an Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking ...

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem-solving ...

Participate in shift rotations, including nights and weekends if required. Support Growth of our SOC as a Service capabilityStay current on cybersecurity trends and threat intelligence. Required Qualifications: Associate's or Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts ...

backlog, building, tuning and retiring detections across Microsoft Sentinel and Defender, mapped to a coverage model such as MITRE ATT&CK. You'll turn threat intelligence into detection logic and hunting activity, and drive our automation and SOAR maturity by building Logic App playbooks that reduce manual effort … technologies and frameworksIt would be great if you also haveExperience in regulated financial servicesExposure to identity centric detection (Entra ID) and cloud native threat detectionGCIH, GCFA or an equivalent hands-on IR or detection certificationLinks to the SOC and detection engineering community, through conferences, speaking or open source detection ...

security technologies in a complex environment. In-depth technical knowledge across areas such as SIEM, DLP, firewalls, cloud security centres, intrusion prevention, cyber threat intelligence and vulnerability scanning. Strong leadership, influencing and supplier management skills, with the judgement to make clear, risk-based recommendations. Excellent analytical skills ...