1 to 25 of 41 Cyber Kill Chain Jobs in the UK

Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Monitor the threat landscape and synthesize and disseminate critical insights to stakeholders Conduct tactical and operational threat analysis supporting ongoing campaigns Identify new TTPs and vulnerabilities for analysis and detection opportunities Assist leadership … mitigation, and containment Draft analytical assessments and provide team briefings Provide editorial guidance to more junior analysts Requirements Experience working in a SOC or cyber operations environment Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs) Knowledge of a Cyber Threat Intelligence ...

acquired by bp in 2024. What you'll do (the role) Summary We are seeking a dynamic, hands-on Senior Cybersecurity Analyst to monitor cyber risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally. You will be responsible for threat detection, investigation … will proactively hunt for security issues, assess emerging threats, and partner with infrastructure and support teams to strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs ...

Responsibilities Provide technical expertise and consultative solutions in Digital Forensics, Incident Response, Cyber Security and eDiscovery Serve law firms, Fortune 500 multinationals and government/law-enforcement clients Preserve digital data and conduct forensic analysis of digital evidence Prepare reporting for regional and international Discovery & Data Insights teams Collaborate … with Cyber Response, Crisis Management and Investigations teams Support experienced professionals in investigating data breaches and security incidents Collect and preserve digital data using industry-standard tools and techniques Assist with forensic analysis and cyber security services Support Investigation teams across all regions Deliver high-quality client deliverables ...

Title: Senior Cyber Threat Intelligence AnalystLocation: Any of our main UK locations + Hybrid Working ArrangementsCompensation: Competitive + BenefitsRole Type: Full time/PermanentRole ID: SF75112At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play your part … Senior Cyber Threat Intelligence Analyst at any of our main UK locations.The roleAs a Senior Cyber Threat Intelligence Analyst, you’ll be responsible for identifying, analysing and reporting cyber threats that could impact Babcock’s people, information, systems, programmes and customers. You will transform complex threat data ...

Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence sharing partners. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence ...

Title Cyber Threat Intelligence Analyst The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such as industry peers … intelligence sharing partners. The Role Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs ...

TitleCyber Threat Intelligence AnalystThe RoleThe Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence sharing partners.In … this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sourcesActively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholdersConduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs and vulnerabilities for analysis ...

TitleCyber Threat Intelligence AnalystThe RoleThe Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence sharing partners.In … this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sourcesActively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholdersConduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs and vulnerabilities for analysis ...

integral to the wider EMEA practice, and in turn part of a global practice offering and influencing the direction of our forensic investigation and cyber incident response capability. The Discovery & Data Insights is the hub of all technical consulting. As part of the team you will be able … Senior Consultant you will be expected to work closely with teams across regions and to develop positive and constructive relationships with Control Risks’ dedicated Cyber Response practice as well as the wider Discovery & Data Insights team. Your behaviour and positive decision making will inspire confidence and maintain integrity ...

integral to the wider EMEA practice, and in turn part of a global practice offering and influencing the direction of our forensic investigation and cyber incident response capability. The Discovery & Data Insights is the hub of all technical consulting. As part of the team you will be able … Senior Consultant you will be expected to work closely with teams across regions and to develop positive and constructive relationships with Control Risks’ dedicated Cyber Response practice as well as the wider Discovery & Data Insights team. Your behaviour and positive decision making will inspire confidence and maintain integrity ...

with threat intelligence teams to enhance detection logic.Threat Modelling & Use Case DevelopmentLead threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain.Translate threat models into actionable detection use cases and SIEM rules.Prioritise detection engineering based on business risk and impact.Reporting & CollaborationProduce reports … SIEM query languages such as KQL, SPL, AQL.Scripting experience with Python or PowerShell for automation.Deep understanding of threat detection, incident response, and the cyber kill chain.Familiarity with frameworks including MITRE ATT&CK, NIST, and CIS.Strong communication, analytical, and presentation skills.Solid understanding of network traffic flows, vulnerability management ...

intelligence teams to enhance detection logic. Threat Modelling & Use Case Development Lead threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain. Translate threat models into actionable detection use cases and SIEM rules. Prioritise detection engineering based on business risk and impact. Reporting … query languages such as KQL, SPL, AQL. Scripting experience with Python or PowerShell for automation. Deep understanding of threat detection, incident response, and the cyber kill chain. Familiarity with frameworks including MITRE ATT&CK, NIST, and CIS. Strong communication, analytical, and presentation skills. Solid understanding of network traffic ...

recommendations. Monitor, investigate and respond to security events across Microsoft 365, Azure, AWS and hybrid environments. Support compliance activities relating to ISO 27001 and Cyber Essentials, maintaining technical documentation, runbooks and standard operating procedures. Provide technical leadership, mentoring and knowledge transfer to Security Analysts and Service Desk teams. What … Client Is Looking For Significant experience within a Security Operations Centre (SOC), Cyber Security Operations or Security Engineering function, including at a senior technical level. Strong hands-on experience administering and engineering Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon and associated security technologies. Proven experience in incident response, threat ...

occur as part of an incident response team. Implementmetrics and dashboards to give visibility of the Enterprise infrastructure. Assistwith the leadership of a composite cyber response team during incidents andinvestigations Use of theSOAR platform to assist with playbook automation and case managementcapabilities to streamline team processes and tools. Produce … develop theAuthority’s environment. Assist inidentifying, prioritising, and coordinating the protection of critical cyberdefence infrastructure and key resources. Build,install, configure, and test dedicated cyber defence hardware. SupportLevel 1 Analysts to manage Authority’s environment’s systems. Skills/Experience: Previousexperience of Enterprise ICS/network architectures and technologies ...

Analys t to join their 24/7 Security Operations Centre (SOC) You'll play a key role in monitoring, detecting and responding to cyber security threats across complex enterprise environments, working with industry-leading technologies includin g Elast ic an d Splu nk. This is an excellent opportunity … improvement of SOC processes, tooling and operational procedures Skills & Experience Experience working withi n a 24/7 Security Operations Centre ( SOC) or equivalent cyber security environment Strong hands-on experience us ing Ela stic and/or Sp lunk for security monitoring and investigations Good understanding of SIEM ...

Cybersecurity Operations organization is central to that mission. Within it, the Detection and Response team serves as the front line of the firm's cyber defense, operating a global "follow-the-sun" model that delivers 24/7 monitoring, detection, and response across regions. The London … partner centers worldwide to ensure continuous, uninterrupted protection.Role OverviewThis is a hands-on detection and response role at the core of the firm's cyber defense operations. The analyst will primarily triage security alerts and investigate cases end-to-end, while contributing to threat hunting, detection engineering ...

Cybersecurity Operations organization is central to that mission. Within it, the Detection and Response team serves as the front line of the firm's cyber defense, operating a global \"follow-the-sun\" model that delivers 24/7 monitoring, detection, and response across regions. The London … worldwide to ensure continuous, uninterrupted protection. Role Overview This is a hands-on detection and response role at the core of the firm's cyber defense operations. The analyst will primarily triage security alerts and investigate cases end-to-end, while contributing to threat hunting, detection engineering ...

Inside IR35 Clearance Required: SC clearance - candidates must have valid clearance We're looking for an experienced SOC Analyst Consultant to support a busy cyber security team within a large enterprise environment. Key Requirements: 2-3+ years' SOC experience Strong hands-on experience with IBM QRadar SIEM Experience … Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing ...

join us in London. As the Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. You will be expected … cases for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams. As the Consultant you will also support the business development effort ...

join us in London. As the Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. You will be expected … cases for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams. As the Consultant you will also support the business development effort ...

join us in London. As an Associate Consultant you will provide technical expertise and consultative solutions in the field of Digital Forensics, Incident Response, Cyber Security and eDiscovery for our clients. Our clients include Law Firms, Fortune 500 multi-nationals, and Government/Law Enforcement. You will be responsible … reporting for our regional and international Discovery & Data Insights teams (DFIR/Legal Technologies/Data Analytics) as well as working closely with our Cyber Response and Crisis Management divisions as well as our Investigations teams.As an Associate Consultant you will play a crucial role in supporting our team ...

team. This role is essential to safeguarding EA's cloud and production environments will directly impact our ability to detect, respond to, and prevent cyber threats at scale. As a senior individual contributor reporting to the Director of Threat Intelligence and Detections, you will play a central role … developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience with cloud security platforms (e.g., Wiz) and integrating their outputs into detection pipelines. Background ...

/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ATT&CK) to real-world scenarios, and you collaborate effectively with engineering colleagues, leveraging extensive expertise across infrastructure and technologies (Public ...

someone who enjoys solving complex technical problems while making a direct impact on our products.What You'll Do: Research and analyse emerging malware and cyber threats to understand how they impact our customers.Investigate malware across the full attack lifecycle (adversary kill chain) to ensure Falcon detects … structured programming principles.Deep knowledge of at least one major operating system and its internals to support behaviour-based analysis.Strong understanding of the adversary kill chain and attacker behaviour, with experience applying red team methodologies to validate defensive coverage. Certifications such as Offensive Security Certified Professional (OSCP) are desirable.Experience ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity programme supporting critical business and technology operations. This … security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity team, you will provide actionable threat intelligence, support security architecture initiatives, and contribute ...