22 of 22 Threat Intelligence Jobs in the Midlands

network for a clean energy future. Join us and help secure Britain's energy. About the role We're looking for an experienced Threat Intelligence & Hunting Manager to lead our intelligence fusion capability, helping National Gas anticipate, assess and respond to emerging physical, geopolitical and cyber threats. … This role combines strategic intelligence leadership with proactive threat hunting to strengthen the resilience and security of critical national infrastructure. As the UK's energy landscape evolves, so do the threats facing critical national infrastructure. This role is pivotal in ensuring National Gas can identify, understand and mitigate ...

Engineer and play a pivotal role in defending clients against evolving cyber threats. You will leverage your expertise in SIEM platforms, threat detection, and incident response to strengthen security operations center (SOC) capabilities. Collaborating with cross-functional teams, you’ll develop automated playbooks, engineering use cases, and deploying advanced … real-time environment. Core Responsibilities SIEM Engineering & Analytics Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.Normalize and onboard diverse log sources from cloud and on-premises environments for seamless monitoring.Develop and continually refine SIEM rules and queries ...

great opportunity for someone who has moved beyond purely monitoring and alert triage and wants to take genuine ownership of security incidents, investigations, threat analysis and detection improvement. The role supports a 24/7 SOC environment protecting highly sensitive UK environments, so you'll be working on meaningful … tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators of compromise and supporting threat intelligence activity Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity ...

executing advanced queries, and applying behavioural and anomaly-detection techniques.Leveraging commercial and open-source technologies, including AI-enabled tools, to automate repetitive tasks, enhance threat detection, and improve response efficiency.Identifying opportunities to automate SOC processes and improve operational efficiency.Assessing programme strengths and weaknesses and recommending AI solutions to enhance … quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team's technical capabilities.Working ...

organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver … fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled ...

Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments. You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across … remote-access requirements Lead OT/IoT vulnerability identification, assessment, prioritisation and remediation Support incident preparation, investigation, containment, recovery and lessons-learned activities Translate threat intelligence into actionable detection, prevention and mitigation requirements Partner with IT, engineering, site leads, asset owners, suppliers and business stakeholders Assess new projects ...

brainer! Netcom Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course … details Duration: 14 weeks Format: Online, practical workshops Schedule: Mon-Thur 6-9pm What you'll learn Understanding cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security ...

event sources, assess, prioritise, escalate and manage security alerts. Perform analysis of security, network, database and application logs, correlate events and activities to create threat scenarios in order to get ahead of threat actors and reduce exposure. Help the imminent threat/zero-day response function across … environment. Translate threat intelligence into actionable security across tools such as firewalls, IPS and malware detection across multiple security vendor platforms. Support the tracking and resolution of security incidents on occasion, and collaborate with other teams for resolution and suggest areas for improvement. Must have experience building custom ...

performance metrics and service levels, such as MTTD and MTTR, and actively contribute to improving investigation quality and response outcomes. You will apply threat intelligence to investigations and alert triage, maintaining awareness of emerging threats, vulnerabilities, and attacker techniques. Incident learnings and threat insights will … capabilities. You will also contribute to the development and tuning of SOC detection use cases, ensuring alerting remains relevant, effective, and aligned to current threat activity. This includes supporting onboarding of new services, identifying detection gaps, and recommending improvements to tooling, processes, and coverage. Clear and accurate documentation ...

dealing with cyber incidents.Provide written and verbal reports to the wider IR team, senior business partners (internal and external).Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.A team-first, collaborative approach working across all relevant technical teams … requisites for the role: Demonstrably strong incident management and analytical skills. Demonstrably strong written and speaking English skills. Demonstrably strong understanding of Threat Actor TTP’s. Demonstrably strong commercial awareness. Demonstrable ability to work on own projects and within a team. At least 36 months of relevant IT Security ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate ...

incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving threat landscape and recommend improvements. • Provide cyber security guidance to projects, services and operational teams. • Support risk management, assurance, audit and compliance activities. • Develop … will bring: • Experience in incident detection, investigation, response and recovery. • Strong knowledge of security technologies, cloud platforms and security architecture. • Experience in vulnerability management, threat intelligence and security improvement activities. • The ability to assess and communicate cyber risk effectively. • Strong analytical, problem-solving and stakeholder engagement skills. ...

incidents. • Identify, assess and mitigate threats and vulnerabilities. • Manage and optimise security tools and controls, including EDR and vulnerability management platforms. • Monitor the evolving threat landscape and recommend improvements. • Provide cyber security guidance to projects, services and operational teams. • Support risk management, assurance, audit and compliance activities. • Develop … will bring: • Experience in incident detection, investigation, response and recovery. • Strong knowledge of security technologies, cloud platforms and security architecture. • Experience in vulnerability management, threat intelligence and security improvement activities. • The ability to assess and communicate cyber risk effectively. • Strong analytical, problem-solving and stakeholder engagement skills. ...

incidents. Identify, assess and mitigate threats and vulnerabilities. Manage and optimise security tools and controls, including EDR and vulnerability management platforms. Monitor the evolving threat landscape and recommend improvements. Provide cyber security guidance to projects, services and operational teams. Support risk management, assurance, audit and compliance activities. Develop … will bring: Experience in incident detection, investigation, response and recovery. Strong knowledge of security technologies, cloud platforms and security architecture. Experience in vulnerability management, threat intelligence and security improvement activities. The ability to assess and communicate cyber risk effectively. Strong analytical, problem‐solving and stakeholder engagement skills. Please ...

fascinated by cyber threats, digital investigations and how organisations protect themselves from cyber attacks? We’re looking for an ambitious Cyber Threat Detection & Response Apprentice to join our growing team and begin an exciting career in one of the fastest-growing areas of technology. This is an opportunity … more than 100 specialists help businesses stay connected, secure and future-ready through innovative technology solutions. What you’ll be doing: As a Cyber Threat Detection & Response Apprentice at SNO, you’ll work alongside experienced professionals to strengthen our cyber defence capabilities. Your responsibilities will include: Assisting in monitoring ...

with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update incident response documentation and procedures Contributing to threat intelligence reviews and sharing findings with stakeholders Preparing reports and presentations on security incidents and trends Staying up-to-date with emerging cyber ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. This role is based in BT's Birmingbam office & requires 3 days in office. What … Doing Data Ingestion and Enrichment: Configure Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development: Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules ...

investigative methods using the Authority’s environment’s softwaretoolsets to enhance recognition opportunities for specific analysis. Maintain abaseline of system security according to latest threat intelligence andevolving trends. Participatein root cause analysis of incidents in conjunction with analysts and engineersacross the enterprise. ProvideSubject Matter Expertise ...

Indicators (KRIs), Key performance indicators (KPIs) for the CSO, senior management and other relevant stakeholders as requiredWork closely with other interdependent processes such as Threat Intelligence, Incident Management, Site security management, audits, business management network process and BCP/DR processConduct/support educational workshops, training and awareness ...

ensuring IT Security advisories, directives and notifications are actioned and logged. This includes but is not limited to CareCERT, CiSP, vendor and other specialist threat intelligence feeds. Ensure all systems and applications where applicable are kept up to date and are encompassed in the patch management routine ...

areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence or other critical ...

will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments. You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, collaborating with engineering and site teams to embed pragmatic security controls. #J-18808-Ljbffr ...