26 to 44 of 44 Threat Intelligence Jobs in the South East

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. You'll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. You'll support the engineering and continuous improvement of security … cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation. You'll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required. You'll remediate and/or work with Technology teams and value streams to support the remediation ...

management of multiple enterprise cyber security platforms. Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems. Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain … configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies. Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses. Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security ...

security controls, standards, and procedures. Act as the technical lead for cyber security monitoring, vulnerability management, security hardening, and incident response. Monitor security alerts, threat intelligence and emerging cyber risks, coordinating appropriate responses. Analyse security trends and vulnerabilities, recommending and implementing risk-based improvements. Coordinate remediation activities ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps integration ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps integration ...

Head of Cyber Risk (GHCR) in delivering the cyber security strategy and Mid-term Plan (MTP). Lead the gathering and analysis of market intelligence, contributing to the bi-annual CCoE Horizon Scan, the regular cyber market intelligence report, and ad-hoc internal Technical, Cyber Risk and Market … Intelligence reports. Support the team in the development and delivery of cyber technical training. Support the maintenance and production of Realistic Disaster Scenarios (RDS) and broader risk parametrisation relating to the internal accumulation model. Lead the CCoE's assessment and selection of technical tools, explaining the technical landscape ...

operational effectiveness of cybersecurity controls. Understanding of information security principles and control frameworks, such as COBIT and COSO. Knowledge of cybersecurity domains, including: Threat intelligence and vulnerability management. Security testing and security architecture. Infrastructure protection and application security. Identity and access management. Incident investigation and response. Cryptography. Strong ...

identification and triage through to remediation and closure. Work with infrastructure, engineering and technology teams to coordinate and track remediation activities. Review vulnerability data, threat intelligence feeds and security advisories to determine business risk and remediation priorities. Produce reports, dashboards and metrics to demonstrate vulnerability trends, remediation progress ...

work in and help develop an increasingly AI-enabled SOC.ResponsibilitiesMonitor, assess, prioritize, and investigate security alerts and incidents using enterprise security telemetry and threat intelligence. Escalate when specialist expertise is required. Investigate confirmed malicious activity across endpoint, identity, network, cloud, and other relevant data sources. Execute or coordinate approved … containment actions. Maintain clear documentation of incident timelines, investigative notes, evidence, decisions, and response actions. Collaborate with peer incident responders, threat intelligence, detection engineering, wider technology and business teams. Participate in post-incident reviews and lessons learned, identifying opportunities to improve detections, playbooks, telemetry, and response processes. ...

with a business-focused approach – protecting what is most valuable to our clients. You’ll be assessing risk across business, technology and operations, considering threat intelligence and helping to build the full security view that underpins systems resilience and client confidence.Required qualifications to be successful in this role ...

supplier cyber security policies and standards for assessments.Advise client’s on improving their supplier assurance risk management processes.Understand cyber threats and able to utilise threat intelligence for assessments.Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident Response ...

security policies and standards for assessments. Advise client's on improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident ...

appropriate resolver groupsContributes to the development of Red Team services through people, process, and technology where appropriateMaintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedureEssential Skills:Proven experience in both infrastructure and web application security testing utilising proven testing methodologiesDemonstrable experience with open … services we deliver. Our work directly supports the protection of those who serve and defend the UK and its allies.Bringing together expertise across Threat Intelligence, Detection Engineering, Incident Response, Active Defence and Red Teaming, the team continuously evolves its capabilities to stay ahead of emerging threats. ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...

graph databases . Understanding of Security Knowledge Graph concepts. Experience integrating ServiceNow, Dynatrace or comparable ITSM/observability platforms. Understanding of security telemetry and threat intelligence data . Data governance experience. Experience with data quality, lineage and observability. Experience with access control and secure data management. Strong performance ...

integrations. Design, implement and improve security controls, with a focus on Zero Trust, secure-by-design and automation. Lead security architecture reviews and threat modelling for major projects, technologies and high-risk integrations. Own security initiatives from problem identification and business case through to implementation and validation. Provide technical … leadership across Microsoft Sentinel, Defender and wider SecOps , including configuration, tuning, detection engineering and monitoring. Provide oversight across incident response, threat hunting, vulnerability/exposure management and security recovery. Support complex and high-severity incident response with internal teams, SOC providers and specialist partners. Improve vulnerability management using business ...

scale network and telecommunications datasets, including NetFlow and network telemetry. Develop bespoke cyber tooling, automation and analytical capabilities to improve investigations and detection. Produce intelligence reporting and technical assessments to support operational decision-making. Collaborate with cyber specialists, engineers and researchers to solve complex cyber security challenges. Cyber Operations … Analyst - Key Requirements Active UKIC DV Clearance. Extensive hands-on experience within cyber operations, threat hunting, cyber intelligence or network intrusion analysis. Experience analysing large-scale network data and identifying malicious activity. Software development or scripting experience (Python or similar) with a focus on tooling and automation. Strong ...