16 of 16 Remote/Hybrid Insider Threat Jobs in the UK

seeking a Senior Threat Analyst tojoin our rapidly growing Information Security team. This is a unique opportunity for a seasoned cyber security professional to be at the forefront of our cyber defence strategy, protecting our brand from existing and emerging threats. You will combine the expertise of a Threat Hunter and Cyber Threat Intelligence Analyst, and have the autonomy to help define our threat intelligence and hunting capabilities as our organisation continues to scale. You'll have a major input on what new tooling and services we use and the backing to implement this. ...

themselves. Job Description The Cybersecurity Analyst supports day-to-day Security Operations and Incident Response by monitoring and investigating threats, coordinating incident response, conducting threat intelligence and threat hunting, managing operational vulnerability workflows, and maintaining accurate cases and security metrics. Security Engineering owns security-platform engineering and vulnerability … data-protection technologies. Validate, enrich, classify, and prioritize security events and investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events. Execute approved containment actions within assigned permissions and coordinate infrastructure-level or production changes with Technology Operations. Collect and preserve ...

evaluation through data onboarding, detection parity, SOAR automation, cutover, and day-two operations. The pod's core responsibilities includes but not limited to threat hunting, insider threat, incident response, managing security events, purple teaming, phishing and email threat assessment across a remote-first, AWS-native … sampling of tier-one work, and QBRs. Make the handoff between 24x7 partner coverage and internal 24x5 response seamless and measurable.Build and run the threat hunting and detection engineering program. Lead hypothesis-driven hunts mapped to MITRE ATT&CK, own the detection lifecycle and coverage gap analysis, integrate threat ...

consumer apps Experience delivering an MVP from a prototype Desired Criteria Agile development experience with a senior engineering team Security background: SOC analyst, threat hunting, insider risk, or security product management Familiarity with MITRE ATT&CK, Purview/Varonis-class tooling, insider-threat investigation ...

investigate incidents across cloud, endpoint, network and identity platforms, analysing security telemetry and attacker activity to determine scope, impact and root cause. Working alongside threat intelligence, detection engineering and force stakeholders, you will provide technical advice to support incident response, recovery and organisational decision-making. This is a split … Police Digital Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate ...

side PostgreSQL with JSONB; in-process caching with invalidation Security telemetry: Windows event logs, Active Directory, M365/Graph API, NetFlow Insider threat/UEBA/SIEM product experience Porting or re-platforming an existing system against a live reference implementation Comfortable reading C# well enough ...

experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and security assurance within enterprise environments. #J-18808-Ljbffr ...

capabilities firm wide. Securing that footprint and the platforms that underpin them is the job. Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls to operate ...

agentic AI capabilities firm wide. Securing that footprint and the platforms that underpin them is the job.Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls ...

Atomic Weapons Establishment is seeking an Active Cyber Defence Lead to drive the organisation's threat detection, hunting and disruption initiatives. You will report to the Head of Digital Operations and oversee integration across SOC, Incident Response, Insider Threat and Digital Forensics to maintain an intelligence ...

across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials/API keys Control‐plane, workload, container, and Kubernetes threat detection Cross‐cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi‐cloud environments. Automation, Agentic … Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. Qualifications What you’ll bring: Required Skills ...

help protect data across public and private cloud, SaaS applications and Microsoft 365 against cyber-attacks, corruption, malicious encryption, human error and insider threats. Clean-room options support safe system recovery. We integrate with existing solutions, operate customers' backup infrastructure, or design and deliver new backup and data ...

Customer Engagement: Serve as an advisor to UK public sector CISOs and security leaders, providing practitioner-level guidance on strategic planning initiatives, the current threat landscape, and proactive initiatives to stay ahead of adversaries Establish and maintain active relationships with key customers and decision-makers across UK central government … events, including CyberUK, government cyber forums, defence and security conferences, and public sector technology events Host customer roundtables and advisory sessions, sharing industry strategies, threat intelligence, and facilitating feedback opportunities for product enhancements relevant to UK government requirements Produce high-quality written content including blog posts, articles, white papers ...

design and delivery. Influence security standards, architectural patterns and technology roadmaps that support long-term business and cybersecurity objectives. Lead security architecture reviews and threat modelling activities that help identify and mitigate risks before they become issues. Drive the adoption of modern security practices, reusable design patterns and emerging … Management (IAM) principles, controls and technologies. Experience working with a broad range of cybersecurity capabilities, such as endpoint protection, data loss prevention, device hardening, threat detection, key and certificate management, and data classification. The ability to act as a trusted cybersecurity adviser, explaining technical concepts, risks and recommendations clearly ...

technical teams and key stakeholders. Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms and network activity. Perform proactive threat hunting and identify attacker techniques, tactics and indicators of compromise. Enhance detection capabilities through alert tuning, threat intelligence and continuous improvement of monitoring … stakeholders. A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love ...

ensuring that SPEN has the cyber skills required today and into the future. The successful candidate will also possess a strong understanding of Insider Risk Management and will support the development of targeted awareness, behavioural and educational activities designed to reduce insider-related threats and vulnerabilities. … behaviour change programmes through defined metrics, reporting and outcome-based assessments. Identify emerging threats and develop targeted awareness interventions to address specific risks. Insider Risk Management Develop an understanding of insider risk threats within the SPEN operating environment. Collaborate with cyber security, HR, legal, physical security ...