26 to 43 of 43 Insider Threat Jobs in the UK

agentic AI capabilities firm wide. Securing that footprint and the platforms that underpin them is the job.Securing AI agents that can behave like insider threats. Frontier models can harvest credentials, escape sandboxes, and adapt when they detect monitoring. We're designing the containment architectures and runtime controls ...

management; cloud security (AWS, Azure, or GCP); email and collaboration security (O365/M365, Google Workspace); application and API security. Solid understanding of the threat landscape facing financial institutions, including phishing/BEC, insider threats, and data exfiltration risks tied to confidential deal information. Practical experience with ...

Atomic Weapons Establishment is seeking an Active Cyber Defence Lead to drive the organisation's threat detection, hunting and disruption initiatives. You will report to the Head of Digital Operations and oversee integration across SOC, Incident Response, Insider Threat and Digital Forensics to maintain an intelligence ...

across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials/API keys Control‐plane, workload, container, and Kubernetes threat detection Cross‐cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi‐cloud environments. Automation, Agentic … Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. Qualifications What you’ll bring: Required Skills ...

infrastructure, including several of the following:Email security, SMTP, DNS, SPF, DKIM, and DMARCMicrosoft 365 and ExchangeData Loss Prevention and Insider Threat ManagementIdentity, SSO, authentication, and directory servicesCloud, hybrid, and on-premises architecturesAPIs, integrations, JSON, and authentication mechanismsSIEM/SOAR and wider security ecosystem integrationsHTTP, TLS, proxies ...

# Senior Associate, Incident Response*Kroll***United Kingdom**Senior · Full-time### The RoleYou lead investigations into ransomware, data breaches, insider threats and business email compromise, overseeing containment, recovery and reporting. You analyse forensic evidence across endpoints, networks, cloud and enterprise systems, then translate findings into clear remediation guidance ...

help protect data across public and private cloud, SaaS applications and Microsoft 365 against cyber-attacks, corruption, malicious encryption, human error and insider threats. Clean-room options support safe system recovery. We integrate with existing solutions, operate customers' backup infrastructure, or design and deliver new backup and data ...

Customer Engagement: Serve as an advisor to UK public sector CISOs and security leaders, providing practitioner-level guidance on strategic planning initiatives, the current threat landscape, and proactive initiatives to stay ahead of adversaries Establish and maintain active relationships with key customers and decision-makers across UK central government … events, including CyberUK, government cyber forums, defence and security conferences, and public sector technology events Host customer roundtables and advisory sessions, sharing industry strategies, threat intelligence, and facilitating feedback opportunities for product enhancements relevant to UK government requirements Produce high-quality written content including blog posts, articles, white papers ...

Ultipro seeks a database engineer to design and maintain data feeds, ETL processes, and dashboards to support insider threat analytics in a secure environment. You will integrate system feeds, normalize data, and implement identity management across multiple identifiers. Candidates must have 3+ years in database development/ ...

design and delivery. Influence security standards, architectural patterns and technology roadmaps that support long-term business and cybersecurity objectives. Lead security architecture reviews and threat modelling activities that help identify and mitigate risks before they become issues. Drive the adoption of modern security practices, reusable design patterns and emerging … Management (IAM) principles, controls and technologies. Experience working with a broad range of cybersecurity capabilities, such as endpoint protection, data loss prevention, device hardening, threat detection, key and certificate management, and data classification. The ability to act as a trusted cybersecurity adviser, explaining technical concepts, risks and recommendations clearly ...

Load (ETL) processes to enable automated data capture and storage Ensure integration of system feeds or other like capability into other insider threat capabilities Ensure predictive analysis, data normalization, and identity management systems are able to manage and track personnel by multiple administrative or operational identifiers included ...

technical teams and key stakeholders. Carry out digital forensic investigations, preserving and analysing evidence from endpoints, servers, cloud platforms and network activity. Perform proactive threat hunting and identify attacker techniques, tactics and indicators of compromise. Enhance detection capabilities through alert tuning, threat intelligence and continuous improvement of monitoring … stakeholders. A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love ...

ensuring that SPEN has the cyber skills required today and into the future. The successful candidate will also possess a strong understanding of Insider Risk Management and will support the development of targeted awareness, behavioural and educational activities designed to reduce insider-related threats and vulnerabilities. … behaviour change programmes through defined metrics, reporting and outcome-based assessments. Identify emerging threats and develop targeted awareness interventions to address specific risks. Insider Risk Management Develop an understanding of insider risk threats within the SPEN operating environment. Collaborate with cyber security, HR, legal, physical security ...

learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Threat Intelligence Analyst to join our growing Game Security team. This role will be responsible for identifying and analyzing potential threats to Rockstar’s Live Service titles … scale investigative workflows. Develop and maintain reporting to measure program effectiveness and inform decision-making. Stay current on emerging technologies, investigative techniques, and threat landscapes. REQUIREMENTS 5+ years professional experience in threat intelligence, investigations, or similar roles. Strong expertise in intelligence gathering, monitoring, and investigative reporting. Experience conducting ...

written and verbal communication skills in English (mandatory); additional languages are a significant advantage. Nice to Have: Familiarity with digital marketing, mobile and cyber threat ecosystems, or AdTech (strong advantage). Strong trend analysis capabilities and a sharp ability to identify evolving methodologies of online threat actors. … collection and surface leads. Working knowledge of how technical underground campaigns operate, methods, TTPs, and the terminology of technical underground activity understood from the threat actor's side, not only the analyst's About Alice Alice is a trust, safety, and security company built for the AI era. ...

This cybersecurity startup is building AI-powered threat detection that actually works. While legacy security tools drown analysts in false positives, their platform uses machine learning to identify real threats with precision — from insider threats to zero-day exploits to nation-state attacks. Their customers include FTSE … attackers are using it, and the defenders need to as well. You'll work on anomaly detection, behavioural analysis, natural language processing for threat intelligence, and building interfaces that help analysts respond faster. The problems are adversarial, the data is noisy, and the stakes are real. Responsibilities Build analyst ...

doing Map our detection coverage against attacker tradecraft and the real estate, and find where we are blind. Turn coverage gaps, incidents, threat research, and recurring escalations into clear detection ideas, and work with our AI agents to build them. Assess and tune the detection ideas and rule logic … operational technology or building management systems, both of which we currently cannot see. About You 5+ years in detection engineering, incident response, security operations, threat hunting, security engineering, or related roles. Detection judgement. You can read a rule and say what it catches, what it misses, and how noisy ...

highly motivated Intelligence Operations Analyst to join our team in London. You will conduct advanced investigations, analyze digital ecosystems, monitor cyber and insider threats, and transform raw intelligence into actionable insights. Key responsibilities include deep-dive research on online threats, generating intelligence reports, leading workflows from data collection ...