76 to 100 of 168 Cyber Threat Intelligence Jobs in the UK

Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure … management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. Owned or materially ...

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing … remediation teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen ...

Cyber Security Operations Specialist Rate - £500 - £550 Inside IR35 Duration - 6 months Location - Bristol - twice a week on site A major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection … security alerts, investigations, tickets and operational queues while helping improve the effectiveness of the security tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes ...

enable the timely and effective response to, and management of, incidents, alarms, notifications, calls, and other activities related to the RSO and new cyber threats. Lead the vulnerability management process to ensure that vulnerabilities are detected, escalated, and remediated for both the customer and corporate environments. Lead the Threat Intelligence process, document and report out to key stakeholders. Work with Engineering, DevSecOps, Software and IT teams in relation to identifying and patching vulnerabilities. Develop processes, procedures and playbooks to improve the operational effectiveness and efficiency of the vulnerability management process. Analyse lessons learned and produce thorough documentation ...

expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build-vs-buy decisions … Leadership: Own the full incident response lifecycle — detection, triage, containment, eradication, recovery, post-incident review. Author and maintain IR playbooks, runbooks and escalation procedures. Threat Intelligence: Investigate security events, perform root cause analysis, and apply threat intelligence to improve defensive posture. Understand attacker TTPs and operationalise ...

internal teams and vendors to ensure reliable, high-quality telemetry Detection Engineering Design and implement detection use cases aligned to MITRE ATT&CK and threat intelligence Build and tune correlation rules, anomaly detections, dashboards, and alerting workflows Continuously refine detections to reduce false positives and improve effectiveness … LogRhythm, or Exabeam Strong understanding of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, Kafka, Event Hubs, agents) Experience in detection engineering, threat modelling, and attacker behaviour analysis Proven ability to build and tune correlation rules, dashboards, and alerts Familiarity with SOAR tools and automation workflows Security ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts. You’ll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous … growth. Our SOC culture is built by engineers who’ve progressed through roles in security operations, threat intelligence, and engineering. You’ll benefit from cyber ranges, training labs, and the freedom to shape your development path. As part of a leading MSSP, you'll gain exposure ...

## Vice President, Global Cyber Exposure Management & Cyber Engineering and ArchitectureApplyremote type: Hybrid (8 days/month)locations: GBR - Kingston: FRA - Paris, Rue des Archives: NLD - Alphen Aan Den Rijn: ESP - Madrid, Castellana: ESP - Barcelonatime type: Full timeposted on: Posted Todayjob requisition id: R0056768**Summary**We are seeking … strategic and highly technical Vice President to lead our global Cyber Exposure Management/Cyber Engineering & Architecture organization within a complex, multinational enterprise. This executive will drive modernization of the Company’s cyber defense capabilities, shape long-term security architecture strategy, and lead large-scale transformation initiatives ...

Professor in Cyber Security - Golden Valley Summary Location: Location: PARK CAMPUS Job Type: Closing Date: Closing Date: 08/23/2026 Date Posted: Date Posted: 07/23/2026 Reference: Reference: A1565 Description Professor of Cyber Security (Golden Valley) University of Gloucestershire 0.2 FTE | Cheltenham/… Golden Valley Development | Professor Grade Help shape the future of cyber security in one of the UK's most exciting innovation ecosystems. The University of Gloucestershire is seeking inspirational individuals for a Professor of Cyber Security to play a leading role in the development of Golden Valley ...

latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle. You Are Passionate about security, you love what you do and have … assessments (BVAs) that articulate clear value outcomes and benefits. The Work We are expanding our team in search of experienced professionals to grow our Cyber Defense and Resilience practice, helping our clients modernize to an AI-powered defense posture. Accenture provides the opportunity to support world-class cybersecurity programs ...

Group in Manchester is seeking a Head of Threat & Vulnerability Management to lead the cyber security function and protect our members, colleagues, and customers from evolving threats. You will shape threat intelligence and vulnerability management, guiding decisions at senior levels and driving improvements across the organisation. ...

summary Are you an experienced cyber security professional who wants to use your skills to support NHS services? NTW Solutions is looking for a Senior Cyber Security Analyst to join our Digital Services Cyber Security team. This is an important role helping to protect the systems, information … Foundation Trust and NTW Solutions. We are looking for someone who can combine strong technical knowledge with clear communication. You will help turn complex cyber security information into practical advice, reports, evidence and improvement actions. You will also support incident response, vulnerability management, assurance activity and the development ...

seeking someone to join the global Threat Hunt and Cyber Detection (THCD) team as a Detection Engineer. The THCD mission is to seek out attacks against the Morgan Stanley network, to engineer detection strategies, and to reduce risk to Morgan Stanley assets. As a new Threat Hunt … will be tasked with developing and maintaining detections, triage cases and alerts and enhance our bespoke tools used to defend Morgan Stanley Network. The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. What you’ll be doing Data Ingestion and Enrichment Collaborate with Security analysts and application teams … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize ...

proactively with cross-functional teams to influence project outcomes and enhance solution quality. Experience & Skills Advanced proficiency in Cybersecurity is required. Advanced proficiency in Cyber Threat Intelligence is suggested. Advanced proficiency in Threat Modeling is suggested. ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including ...

solutions are designed and deployed with security by design from the outset. Stay current with AI security risks and emerging attack vectors, translating threat intelligence into practical controls. Security Engineering & Standards Embed security into CI/CD pipelines and DevOps workflows, championing shift‐left practices across engineering teams. … guidelines for use across platform and product delivery. Participate in architecture and design reviews, providing security input as part of the delivery lifecycle. Threat Intelligence & External Partnerships Act as the internal interface for Arctic Wolf, the organisation's outsourced MDR provider, triaging escalations and feeding intelligence back ...

Cyber Security Engineer/Specialist Permanent | Up to £80,000 (+ Benefits) Hybrid Working (2–3 days per week Onsite) | Surrey Protect Critical Services. Strengthen Cyber Resilience. Make a Tangible Impact. Exalto Consulting is pleased to be supporting a well-established international organisation in the search … opportunity to work at the heart of that effort, helping to protect critical systems, safeguard sensitive information and strengthen defences against an evolving threat landscape. This position would suit a cybersecurity professional who combines strong technical expertise with a practical, collaborative approach and a genuine interest in continuous improvement. ...

functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics Required qualifications, capabilities, and skills 5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing ...

functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm … assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics Required qualifications, capabilities, and skills 5+ years of experience in conducting manual penetration tests against a wide variety of applications and technologies including web, mobile and thick clients, internal and external facing ...

office, reducing to a minimum of 2–3 days per week. Opportunity to work for a highly respected organisation. Collaborative and supportive Cyber Security team. Monday to Friday | 9:00am – 5:30pm Full-time, Monday to Friday (37.5 hours per week). Hybrid working with a minimum … should expect to be in the office around 3 days per week to support training and integration with the team. Are you an experienced Cyber Security professional with hands-on experience of the KnowBe4 Security Awareness Platform Our client, a leading UK organisation, is seeking a Cyber Security ...

organisation seeking an experienced Incident Response Manager to lead and mature its Incident Response capability across a complex enterprise environment. Responsibilities Own and manage cyber incidents from detection through to resolution. Review, enhance, and develop Incident Response frameworks, runbooks, and playbooks. Ensure alerts from SIEM … services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement of the Incident Response service. Support both BAU incidents and strategic capability development. Manage incidents relating to both ...

GSMA seeks a Platform Software Engineer for T-ISAC to build and evolve the secure backbone for threat intelligence sharing within the mobile industry. You will design and maintain scalable workflows and collaboration tools, enabling efficient intelligence exchange across members and partners. Ideal candidates bring telecom-security … experience and a track record of delivering core platforms that support reliable software delivery in intelligence, cybersecurity, or data analytics contexts. #J-18808-Ljbffr ...