1 to 25 of 30 Cyber Threat Intelligence Jobs in the Thames Valley

Cyber Threat Intelligence Analyst Location: Reading - Hybrid, 2 days per week onsite Contract: 6 months initially Rate: Competitive/dependent on experience Start Date: ASAP Clearance: SC Clearance desirable, but not essential We are currently recruiting for an experienced Cyber Threat Intelligence Analyst … join a leading organisation on an initial 6-month contract. This is a hands-on, tactical Cyber Threat Intelligence (CTI) role focused on monitoring and analysing cyber threat intelligence, identifying emerging threats and producing actionable intelligence to support cyber defence and risk ...

Cyber Threat Intelligence (CTI) Delivery Lead Reading/Havant (Hybrid) | 6 Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support … major cyber security and resilience programme. Key Responsibilities Lead the delivery of cyber security initiatives across CTI, Monitoring, Detection and Security Operations. Provide cyber security subject matter expertise to support the implementation of key controls across endpoint security, vulnerability management, secure configuration, access management and device compliance. ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex … work closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you’ll be responsible for supporting and improving how we identify, assess ...

Working collaboratively, these services ensure that customers can shop with us efficiently, safely and securely, every single day.A key component of this is the Threat Defence team. A group of Partners who take active responsibility for understanding threats posed to the Partnership, the vulnerabilities that we’re carrying … testing of the security defences we put in place to protect us, and the engineering of key security systems.If you’re passionate about cyber security, if you thrive and perform in fast-paced, high-demand scenarios, and if you want to make a real difference ...

theorganisationstechnology estate toidentifycyber security events, suspicious activity and indicators of compromise using approved monitoring platforms and analytical tools. Independently investigate security alerts and complex cyber security events,determiningtheir significance, potentialimpactandappropriate courseofactions. Correlate information from multiple data sources toestablishattack timelines,identifyaffectedsystemsand support the assessment of cyber security incidents. Analyseindicators … compromise, attackertechniquesand available threat intelligence todeterminethe nature and severity of security events. Escalate indicatorsconfirmed or suspected cyber security incidentsto the Lead SOC Analyst or Incident Responder teamin accordance withestablished operational procedures. Support Incident Responders by providingaccurateanalyticalfindings, supporting evidence,timelinesand technical information throughout incident investigations. Contribute ...

Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities. Responsibilities Monitor the organisation's technology estate to identify cyber security events, suspicious activity and indicators of compromise using approved monitoring platforms and analytical tools. Independently investigate security alerts and complex cyber security … impact and appropriate course of actions. Correlate information from multiple data sources to establish attack timelines, identify affected systems and support the assessment of cyber security incidents. Analyse indicators of compromise, attacker techniques and available threat intelligence to determine the nature and severity of security events. Escalate ...

Harvey Nash Group seeks a Cyber Threat Intelligence Delivery Lead for Reading/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role ...

Cyber Security Manager – London, UK Up to £95,000 Depending on Experience Hybrid working, 2-3 days per week onsite in London Existing Active SC or DV clearance required About The Client Our client is a major organisation delivering cyber security and technology transformation programmes across some … most complex and sensitive environments. They work closely with Defence and Government customers, helping them strengthen security, manage cyber risk and deliver secure transformation. Due to continued growth, they are looking for an experienced Cyber Security Manager to join their team. The Benefits Work on high-impact Defence ...

working 12 hours shifts on a rotating shift pattern. Essential Skills & Experience required: Current DV Level Security Clearance.essential* Experience in the following listed below: Cyber security operations Forensics Incident management, incident investigation and response Information risk assessment and risk management Intrusion detection analysis Protective security Secure operations management Threat intelligence and threat assessment Threat understanding: Practitioner In addition you will possess demonstrable experience working within a SOC or similar cyber security operations environment, together with experience leading security monitoring activities and supervising analysts during live operational service. Strong knowledge of SIEM platforms, log analysis ...

Operational Security Lead & Cyber Vulnerability Manager, Berkshire/Hybrid Market leading company in the financial service sector is looking for an Operational Security Lead & Cyber Vulnerability Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks you will drive the organisations security position across infrastructure, cloud services and third parties. This includes security monitoring, incident response, threat intelligence ...

Operational Security Lead & Cyber Vulnerability Manager, Hyrid working with monthly visit to office in either London or Buckinghamshire. Salary likely to be in the range £ 95000 - 100000 + bonus + benefits. Market leading company in the financial service sector is looking for an Operational Security Lead & Cyber Vulnerability … Manager who will be responsible for leading the organisations operational cyber security capability, ensuring the delivery of security operations, cyber incident management and infrastructure and cloud vulnerability management across the enterprise. Providing operational leadership for the identification, assessment and remediation of cyber security risks you will drive ...

opportunity to play your part - At Centrica, our Global Security Operations Centre (GSOC) is at the forefront of protecting our business from evolving cyber threats. As a Senior Global Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber … supporting the response to significant security incidents. Working across cloud, endpoint, identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement. If you're passionate ...

John Lewis Partnership is seeking a Senior Information Security Analyst to join the Threat Defence team in Bracknell. You will identify, understand and report on cyber threats, coordinate with vulnerability management, and deliver intelligence insights to partners and stakeholders. You will design and run Threat Hunts ...

decisions during live cybersecurity events. Review and quality-assureSOC investigations, confirming findings are accurate, evidence-based and clearly documented. Lead complex and high-priority cyber securityinvestigations before escalation to the IncidentResponse team, as delegated by the Principal SOC Analyst. Deliver clear and effectiveshift handovers, maintaining situational awareness and continuity … across ongoing investigations and incidents. Coordinate with Incident Responders during cyber security incidents,clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence. Collaborate with SOC Engineers to improve monitoringcoverage, alert quality and operational effectiveness. Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

cybersecurity events and incidents, supporting the delivery of an effective round-the-clock cyberdefence capability. Key responsibilities Monitor the organisation's technology estate for cyber events, suspicious activity and indicators of compromise. Independently investigate security alerts and complex cyber events. Assess the significance, potential impact and appropriate response … identified threats. Correlate information from multiple technical sources to establish attack timelines and identify affected systems. Analyse indicators of compromise, attacker techniques and threat intelligence. Escalate confirmed or suspected incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical ...

innovatorsto tackle humanity’s greatest challenges in four transformative areas: Health, Medical Science & Generative Biology Food Security & Sustainable Agriculture Climate Change & Managing CO2 Artificial Intelligence & Robotics This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join … demonstrable experience to help protect our people, platforms, and world‐class research. This is a hands‐on, impactful role at the centre of our cyber‐security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture. You will work closely with IT, research computing, governance ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: • Serve … email security technologies. • Design, deploy, configure, and maintain Proofpoint solutions, including: o Proofpoint Email Protection (PEP) o Proofpoint Targeted Attack Protection (TAP) o Proofpoint Threat Response Auto-Pull (TRAP) o Proofpoint Email Fraud Defense (EFD) o Proofpoint Information Protection/DLP • Manage email security policies, spam filtering, malware protection ...

Senior SOC Analysts. Review and quality-assure investigations, ensuring findings are accurate, evidence-based and fully documented. Make technical and operational decisions during live cyber events. Coordinate with Incident Responders, providing timelines, indicators of compromise and supporting evidence. Maintain effective handovers and continuity between shifts. Work with SOC Engineers … supervising analysts within a live operational service. Strong knowledge of SIEM platforms, log analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next‐gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

Patching, Asset Management, Certificates, WebApps.* Experienced building & operating AM/VM/PC/PM programs, workflows, key metrics, best practices* Experienced in Cyber-Risk frameworks, Prioritization/Remediation + Scanning/Reporting strategies.* Breadth and depth of knowledge on the cybersecurity general threat landscape and attack techniques … strategies, security scanning & tooling.* Container Security – Experienced in Docker frameworks, CI/CD, Orchestration, Scanning and Reporting* SOC – Experienced in Security Ops, Incident Response, Threat Hunting, Malware/Forensic Analysis* WebApps – Experienced in WebApp DevSecOps best practices, WebApp scanning for OWASP top 10.* Good understanding of GRC strategies ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies - including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...