1 to 25 of 43 Insider Threat Jobs in the UK

Cyber Fusion Centre leadership to enhance detection capabilities, case intake and reporting, use case development, and other aspects relevant to Insider Threat prevention, detection, and response. This role is responsible for managing and improving predictive and detection analytics models, DLP controls, real-time monitoring tools, building dashboards … PowerShell, or equivalent technologies to automate analytical and investigative workflows. Relevant cybersecurity or insider risk certifications preferred, including CERT Insider Threat Program Manager (ITPM) Certificate, Global Counter-Insider Threat Professional (GCITP), Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH ...

Head of Digital Operations, the role leads the proactive identification, disruption, and mitigation of cyber threats across the enterprise. The role leads proactive threat detection, hunting, and disruption, ensuring cyber threats are identified, contained, and mitigated in line with organisational risk appetite and regulatory obligations. It provides assurance that … metrics, and alignment to recognised frameworks. The Active Cyber Defence Lead drives integration across the Security Operations Centre (SOC), Incident Response, Insider Threat, and Digital Forensics to deliver a cohesive, intelligence-led cyber defence posture. **Key Accountabilities:** * Active Cyber Defence Strategy and Governance: Accountable for defining, implementing ...

seeking a Senior Threat Analyst tojoin our rapidly growing Information Security team. This is a unique opportunity for a seasoned cyber security professional to be at the forefront of our cyber defence strategy, protecting our brand from existing and emerging threats. You will combine the expertise of a Threat Hunter and Cyber Threat Intelligence Analyst, and have the autonomy to help define our threat intelligence and hunting capabilities as our organisation continues to scale. You'll have a major input on what new tooling and services we use and the backing to implement this. ...

within Cards and Payments to provide coverage of architectural domains and meet project demand. You will be assigned projects- Resilience and Insider Threat and you will own these projects and you will work with Business Analysts to produce solution designs. The work will be varied, involving some … integration, cloud and on-premise, and associated security best practise, at enterprise-scale. Experience in one or more of the following domains: Physical Security Threat Intelligence Insider Threat Cyber Forensics Resilience Strong technical leadership and communication. Stakeholder management to CxO-level. Some other highly valued skills ...

Head of Digital Operations, the role leads the proactive identification, disruption, and mitigation of cyber threats across the enterprise. The role also leads proactive threat detection, hunting, and disruption, ensuring cyber threats are identified, contained, and mitigated in line with organisational risk appetite and regulatory obligations. It provides assurance … governing the enterprise Active Cyber Defence strategy, ensuring alignment to direction from Chief Information Security Officer (CISO), organisational risk appetite, and regulatory requirements. Threat and Risk Identification: Accountable for the continuous identification, assessment, and prioritisation of cyber threats, vulnerabilities, attack paths, and insider risks. Detection and Monitoring ...

themselves. Job Description The Cybersecurity Analyst supports day-to-day Security Operations and Incident Response by monitoring and investigating threats, coordinating incident response, conducting threat intelligence and threat hunting, managing operational vulnerability workflows, and maintaining accurate cases and security metrics. Security Engineering owns security-platform engineering and vulnerability … data-protection technologies. Validate, enrich, classify, and prioritize security events and investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events. Execute approved containment actions within assigned permissions and coordinate infrastructure-level or production changes with Technology Operations. Collect and preserve ...

brand domain portfolio (Cloudflare, MarkMonitor, and others); lead DNS migrations, audits, and consolidation as brands come in Respond to phishing campaigns, insider threat signals, and anomalous domain activity with speed and precision Compliance & Legal Support Lead legal hold management, eDiscovery queries, and data productions across email, Slack … Security & Access Control Design and maintain DLP rules, group access controls, and data access policies across collaboration platforms and entities Lead insider threat reduction initiatives, access revocation, high-risk extension management, public channel governance, during and after integrations, when risk is highest Own platform-level incident response ...

thinking, defining, and applying playbook responses Applying root cause analysis and lessons learned to improve security posture and processes Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response Strong collaboration with … cybersecurity related disciplines, not limited to: e.g. vulnerability research, network traffic analysis, static and dynamic malware analysis, digital forensics, memory analysis, web-security and threat hunting. Preferred Experience: Experience in creating queries and alerts in a SIEM, preferably in SPL. Experience with Windows/Unix OS forensics. Experience with ...

evaluation through data onboarding, detection parity, SOAR automation, cutover, and day-two operations. The pod's core responsibilities includes but not limited to threat hunting, insider threat, incident response, managing security events, purple teaming, phishing and email threat assessment across a remote-first, AWS-native … sampling of tier-one work, and QBRs. Make the handoff between 24x7 partner coverage and internal 24x5 response seamless and measurable.Build and run the threat hunting and detection engineering program. Lead hypothesis-driven hunts mapped to MITRE ATT&CK, own the detection lifecycle and coverage gap analysis, integrate threat ...

consumer apps Experience delivering an MVP from a prototype Desired Criteria Agile development experience with a senior engineering team Security background: SOC analyst, threat hunting, insider risk, or security product management Familiarity with MITRE ATT&CK, Purview/Varonis-class tooling, insider-threat investigation ...

technical consulting or big‐data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

technical consulting or big-data analytics, featuring recent experience in technical design and architecture. Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance. Proven experience acting as a technical leader, mentor, or subject matter ...

committed to on-going self-development and education and possess strong technical acumen and customer service skills. Responsibilities Ensure data is protected from insider threats, cyber-attacks, and policy violations Onboard Customers to Varonis platforms and deliver on-going value and support Ensure Customer success through frequent proactive ...

Lead and manage the end-to-end client engagement process for high-stakes, complex matters, including cyber investigations, data breaches, and insider threat cases. Client relationship management: Serve as the primary point of contact for high-impact clients, fostering and maintaining strong, long-term relationships with ...

Cyber Security Specialist (Internal Threat) & Cyber Defense Project Detailed description of work task to be carried out A) Documented assessment to be conducted on usage of existing Cyber Security tools utilization related to internal threat prevention, protection and detection capabilities. B) Recommended adjustments prioritised and implemented. The work … Bank office location. Must-have knowledge and experience The person must have documented experience working in large scale Cyber Security Insider Threat Program in a Subject Matter Expert role, hands-on experience working with various Cyber Security tools having senior technical & risk skills. The consultant must have ...

investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact and root cause. Working alongside threat intelligence, detection engineering and force stakeholders, you will provide technical advice to support incident response, recovery and organisational decision-making. This is a split … Police Digital Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate ...

including several of the following: Email security, SMTP, DNS, SPF, DKIM, and DMARC Microsoft 365 and Exchange Data Loss Prevention and Insider Threat Management Identity, SSO, authentication, and directory services Cloud, hybrid, and on-premises architectures APIs, integrations, JSON, and authentication mechanisms SIEM/SOAR and wider ...

including several of the following: Email security, SMTP, DNS, SPF, DKIM, and DMARC Microsoft 365 and Exchange Data Loss Prevention and Insider Threat Management Identity, SSO, authentication, and directory services Cloud, hybrid, and on-premises architectures APIs, integrations, JSON, and authentication mechanisms SIEM/SOAR and wider ...

side PostgreSQL with JSONB; in-process caching with invalidation Security telemetry: Windows event logs, Active Directory, M365/Graph API, NetFlow Insider threat/UEBA/SIEM product experience Porting or re-platforming an existing system against a live reference implementation Comfortable reading C# well enough ...

experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and security assurance within enterprise environments. #J-18808-Ljbffr ...

capabilities firm wide. Securing that footprint and the platforms that underpin them is the job. Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls to operate ...