101 to 125 of 498 Threat Intelligence Jobs in the UK

tasks and mentor junior consultants as needed. About the job In this role, you will use your deep understanding of both existing and emerging threat actors, experience identifying rapidly changing tools, tactics and procedures of attackers, and strong computer forensics response knowledge and skills. You must be able … have the ability to lead, train, and mentor other consultants. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique ...

foundation, cyber risk at our core. We don't just use AI, we shape it. Built on AI from day one. Artificial intelligence has been part of our strategy since the beginning, blended with deep cybersecurity and insurance expertise and backed by rigorous testing. Trusted by more than … challenge themselves, push boundaries, and do the best work of their careers. The Impact You Will Make Work in a team of cyber threat analysts, economists, data scientists, actuaries and risk modelers to develop insights, scores, and features for a suite of products delivering cyber risk analytics ...

Control Risks' Embedded Consulting team is hiring a Regional Threat Intelligence Specialist to support a global tech client in producing reports and other threat-related products. This role will support threat, vulnerability, and risk assessments, as well as some other analytical content for the EMEA region. … research and analysis on specific locations within EMEAassessing threats from natural hazards, infrastructure, terrorism, and political instability, among others. Produce clear, concise, and actionable intelligence reports tailored to stakeholders, including threat summaries, trending topics, and vulnerability assessments. Monitor and research emerging trends and topics related to data centers ...

Intact Insurance is the transformed name for RSA in the UK, Ireland, and across Europe. The Senior Threat Intelligence Analyst will shape cyber defence strategy by producing actionable intelligence that informs threat hunting, SOC priorities and improvement programmes, helping the business understand emerging risks to Intact … customers and services. The role requires deep knowledge of threat actor behaviour, intrusion techniques, and evolving attack trends, with the ability to translate #J-18808-Ljbffr ...

Lead complex investigations into security alerts, incidents and emerging threats, driving effective containment, eradication and recovery activities. Analyse security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. Undertake threat hunting, forensic investigations and proactive cyber defence activities to identify previously unknown … chance to make a real difference, together. What you’ll need Strong experience investigating cyber security incidents within a Security Operations Centre, Cyber Defence, Threat Hunting, Incident Response or similar environment. Expertise in analysing attacker behaviour, security events and threat intelligence to support effective detection and response ...

JPMorganChase in London seeks a Cyber Intelligence Direct within the EMEA Threat Intelligence team to identify and analyze external cyber threats to protect the firm’s interests. You will collaborate with teams across North America and APAC, prioritise intelligence streams and allocate resources for maximum impact … enabling secure business initiatives and stronger threat detection. This role shapes cybersecurity policy and frameworks, driving our strategy in a collaborative, innovative #J-18808-Ljbffr ...

Responsibilities: Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers. Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked. Act as Incident Coordinator during cyber … security incidents, supporting incident management, communications, action tracking and post-incident activities. Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date. Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances. Support cyber threat ...

triaging alerts, you'll engineer the systems that make Security Operations smarter, faster and more scalable. You'll work across Detection Engineering, Security Automation, Threat Hunting and Incident Response, building detection logic, automating repetitive workflows and partnering closely with Product Engineering to improve security telemetry across the CloudBees platform. … cloud, endpoint, SaaS and application environments. Own the full detection lifecycle from hypothesis through deployment and continuous tuning. Create high-fidelity detections using operational threat intelligence, incident learnings and purple team findings. Measure and improve detection coverage using the MITRE ATT&CK framework. Continuously reduce false positives while ...

great opportunity for someone who has moved beyond purely monitoring and alert triage and wants to take genuine ownership of security incidents, investigations, threat analysis and detection improvement. The role supports a 24/7 SOC environment protecting highly sensitive UK environments, so you'll be working on meaningful … tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators of compromise and supporting threat intelligence activity Improving detection rules, correlation logic and SOC playbooks Investigating recurring alerts and reducing false positives Supporting vulnerability management and remediation activity ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security best … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...

Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security best practice across … throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation. Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact. Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting. Conduct ...

Barclays is seeking an Insider Threat Intelligence Analyst to uncover insider risks and translate complex data into actionable intelligence for security decisions. You will work across intelligence, security and cross-functional teams to strengthen defences and provide timely insights for leadership. Ideal candidates demonstrate strong analytical … capabilities, experience delivering defensible intelligence judgments, and the ability to communicate complex findings to both technical and #J-18808-Ljbffr ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

from Cheltenham. This is a rare opportunity to combine technical cyber expertise with leadership responsibility. You'll lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities. … make a meaningful impact every day. What You'll Do As CSOC Lead, you will: Lead, mentor and develop a team of cyber threat analysts, providing direction, coaching and day-to-day operational oversight. Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation ...

keep the Internet moving forward, you’ll fit right in. Available Locations: London, United Kingdom About the Department Cloudforce One is Cloudflare’s threat operations and research team, responsible for identifying and disrupting cyber threats ranging from sophisticated cyber criminal activity to nation-state sponsored advanced persistent threats (APTs … . Cloudforce One works in close partnership with external organizations and internal Cloudflare teams, continuously developing operational tradecraft and expanding ever-growing sources of threat intelligence to enable expedited threat hunting and remediation. Members of Cloudforce One are at the helm of leveraging an incredibly vast ...

Cybersecurity SaaS · Business Email Intelligence · New Business Location Edinburgh, UK Department Reports to Managing Director Experience 5+ years preferred Compensation Competitive base + uncapped commission Type Full time We've built the technology. Now we want more businesses using it. This is one of ourfirst dedicated sales roles … will not be inheritingsomebody else's sales machine. You will be helping us create it. About Sender Registry Sender Registry is a business email intelligence network. We help businesses spotsuspicious senders, impersonation and fraud before anyone clicks, replies or pays. Sender Registry started with one simple problem: watching family ...

Cybersecurity SaaS · Business Email Intelligence · New Business Location Manchester, UK Department Reports to Managing Director Experience 5+ years preferred Compensation Competitive base + uncapped commission Type Full time We've built the technology. Now we want more businesses using it. This is one of ourfirst dedicated sales roles … will not be inheritingsomebody else's sales machine. You will be helping us create it. About Sender Registry Sender Registry is a business email intelligence network. We help businesses spotsuspicious senders, impersonation and fraud before anyone clicks, replies or pays. Sender Registry started with one simple problem: watching family ...

core of the firm’s cyber defense operations. The analyst will primarily triage security alerts and investigate cases end-to-end, while contributing to threat hunting, detection engineering, and the adoption of AI-assisted tooling to improve investigative efficiency and accuracy. The position suits a technically strong practitioner … severity, risk, and business impact. Investigate security incidents and cases end-to-end, from initial detection through containment, eradication, and documented resolution. Conduct proactive threat hunting across endpoints, networks, cloud, and identity telemetry to identify undetected threats and emerging adversary behavior. Contribute to detection engineering: develop, tune, and refine ...

Control Risks in London seeks a Regional Threat Intelligence Specialist to produce reports and other threat-related products for a global tech client. You will support threat, vulnerability, and risk assessments for the EMEA region. The role involves researching threats across locations, delivering concise intelligence ...

would also depend on your ability to adhere to the UK Security Clearance check criteria. iProov is looking for a biometric incident responder and threat analyst. This specialised role will combine data analytics and threat intelligence methods and will include daily monitoring coverage of internally raised alerts … active threat hunting of novel attack methodologies. We are looking for someone with experience in incident triage, an interest in biometrics and expanding their skill set. How you can make an impact Monitor biometric imagery from production traffic to detect patterns of fraudulent behaviour. Escalate validated and confirmed imagery ...

skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands..Hiring and how we workWe use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first … valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled ...

experienced SOC and Incident Response Lead at ASOS, you will provide hands-on technical leadership across security monitoring, detection, engineering, incident response, and threat-led investigations. You will lead the SOC and Incident Response team, ensure security incidents are investigated and resolved effectively, and maintain a strong operating relationship … complex security incidents. Own and improve the SOC detection lifecycle, including reviewing detection coverage, tuning noisy or low-value alerts, creating new detections from threat intelligence and incident learnings, and mapping coverage against relevant attack techniques and critical business assets. Establish and maintain incident response processes, procedures ...

would also depend on your ability to adhere to the UK Security Clearance check criteria. iProov is looking for a biometric incident responder and threat analyst. This specialised role will combine data analytics and threat intelligence methods and will include daily monitoring coverage of internally raised alerts … active threat hunting of novel attack methodologies. We are looking for someone with experience in incident triage, an interest in biometrics and expanding their skill set. How you can make an impact Monitor biometric imagery from production traffic to detect patterns of fraudulent behaviour. Escalate validated and confirmed imagery ...

previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/or On-Prem). Technical … privilege, encryption). Networking: OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, ACLs, and VLANs. Cybersecurity Fundamentals: Threat mitigation, risk assessment, vulnerability management, threat intelligence, and TTPs (Tactics, Techniques, and Procedures). Systems Administration: Endpoint security/EDR, user access ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...