126 to 150 of 498 Threat Intelligence Jobs in the UK

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

Labs is seeking a Senior Cyber Threat Intelligence Analyst to conduct time-sensitive blockchain analysis and investigations, collaborating with blockchain intelligence experts, engineers, and data scientists to deliver high-confidence analytical support. You will produce finished intelligence, lead complex investigations, and connect technical findings to financial ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing … security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats. Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents. Oversee threat intelligence programmes, identifying ...

Creating and optimising detection logic using KQL and other query languages. Developing detection use cases aligned with the MITRE ATT&CK framework and current threat techniques. Assessing customer telemetry and identifying opportunities to improve visibility and detection coverage. Building SOAR automations, integrations and response workflows to reduce manual effort. … Developing incident response playbooks that support effective Security Operations Centre (SOC) processes. Applying threat intelligence to continuously improve detections and response capabilities. Promoting a Detection-as-Code approach, ensuring detection content is scalable, version controlled and repeatable. Producing clear technical documentation, detection strategies and coverage assessments for customers. ...

frameworks including NIST, ISO 27001, CIS or CAF Experience within areas such as security architecture, cyber risk, vulnerability management, incident response, security monitoring or threat intelligence Strong stakeholder management and client-facing communication skills Understanding of network security, encryption, authentication and access controls Experience with threat … Manager, Cyber Security, Information Security, Security Architecture, Cyber Risk, NIST, ISO 27001, CIS, CAF, Defence, Government, Security Clearance, SC, DV, Incident Response, Vulnerability Management, Threat Intelligence, NSD #J-18808-Ljbffr ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams click apply for full job details ...

people who are technical at heart and understand what analysts need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part … Senior and Lead Analysts with appropriate context. Review vulnerability management output and provide basic prioritisation insight. Hunt and improve Take part in directed threat hunting activities. Suggest improvements to detections, dashboards and runbooks. Support testing of new use cases and detection logic. Collaborate and communicate Provide clear written updates ...

Harvey Nash Group seeks a Cyber Threat Intelligence Delivery Lead for Reading/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires ...

Harvey Nash Group seeks a Cyber Threat Intelligence Delivery Lead for Reading/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires ...

Control Risks’ Embedded Consulting team is seeking a Regional Threat Intelligence Specialist to support a global tech client in producing reports and other threat-related products for the EMEA region. The role focuses on threat, vulnerability, and risk assessments, with on-ground analysis of local risks … site datacenter visits. The ideal candidate has 3-5 years in risk analysis or intelligence gathering, strong OSINT, and excellent report-writing skills. #J-18808-Ljbffr ...

Labs is seeking a Staff Cyber Threat Intelligence Analyst to conduct high-complexity investigations, support time-sensitive blockchain analysis, and shape analytical workflows. You will collaborate with blockchain intelligence experts, engineers, and data scientists to raise analytical quality and operational relevance across TRM’s cyber threat ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies - including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

compliance, vulnerability reporting readiness, and regulatory response activities. Key Responsibilities Vulnerability Assessment & Triage: Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact. PSIRT Case Management: Manage the end-to-end lifecycle of vulnerability … Compliance: Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness exercises. Threat Intelligence Monitoring: Monitor global vulnerability databases, threat feeds, and third-party notifications to proactively assess emerging risks impacting Lenovo products. Metrics & Continuous Improvement: Develop ...

tracking, build leadership dashboards, and escalat Conference & Travel Security. Produce location-specific security briefings and short-form audio content for major conferences, drawing on threat intelligence inputs and distributing through our events coordination channels. New Hire Security Onboarding. Deliver monthly live onboarding sessions, create interactive exercises and follow … assessments, maintain on-demand recordings, and manage automated follow-up communications. Threat Briefings. Coordinate quarterly security briefings for high-profile researchers and secure recurring slots at leadership forums to deliver concise threat updates. Internal Security Portal. Maintain and expand the clients security resource hub with a library ...

SIEM use cases, alerting strategies, and telemetry pipelinesBuild and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistencyPartner with Threat Intelligence to contextualize threats and improve detection coverageConduct root cause analysis (RCA) and lead post-incident reviews to drive continuous improvement and risk … GitLab in a security or engineering contextHands-on experience with SIEM, EDR, and/or detection engineeringExperience with cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience ...

Babcock International in the United Kingdom is seeking a Senior Cyber Threat Intelligence Analyst to identify, analyse and report threats that could impact people, information, systems and customers. You will transform complex data into actionable intelligence to support proactive cyber defence, incident response, vulnerability management and risk ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence – how feeds are sourced, what constitutes actionable information ...

London Market insurer to join its cyber team in a hybrid role based in City of London. The position offers exposure to cyber risk, threat intelligence, and cyber insurance at scale. You will work with senior risk stakeholders on threat landscape monitoring, risk appetite, incident scenario modelling … market intelligence, while developing reports and training materials for diverse audiences. #J-18808-Ljbffr ...

contact details are readily available on our website). Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

Overview: The Head of Security Operations and Engineering is responsible for protecting the organization through the design, build, and operation of scalable, resilient, and intelligence‐driven security capabilities. This role leads the teams that detect, respond to, and prevent security threats while also engineering the platforms, tools, and automation … strategy and execution, the role ensures that security operations are not only effective in responding to incidents, but continuously improving through engineering excellence, threat intelligence, and data‐driven decision‐making. It combines real‐time defense (e.g., monitoring, detection, incident response) with long‐term capability building (e.g., tooling, automation ...

identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations Deliver detection as code pipelines, including structured use case development and versioning approaches Produce clear … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

About the CompanyTata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of CommunicationsJob InformationJob TitleCyber Security SME: Security Solution ArchitectLocation: United Kingdom … medium and large cybersecurity transformation programmes. Cyber Security DomainsThe candidate should have a broad understanding of enterprise cybersecurity technologies, including: Security OperationsSIEM, SOAR, UEBA, Threat Intelligence, Threat Hunting, Incident Response, XDR, MDRNetwork SecurityNext Generation Firewalls, WAF, SASE, DNS Security, DDoS, NDREndpoint & Identity SecurityEDR, Endpoint Protection ...

Perform regular vulnerability scans and across applications and infrastructure. Validate and prioritise remediation of vulnerabilities from the firm's security tooling. Monitor security advisories, threat intelligence services and vendor notifications for vulnerability remediation. Skills and experience: Expert experience of working with enterprise vulnerability management platforms. Working experience with … threat intelligence, attack surface mgmt. and exposure mgmt. platforms. Expert understanding of vulnerability scoring, including CWE, CVSS and MITRE ATT&CK.Foundational knowledge of windows, Linux and networking. Ability to assess security risks and prioritise remediation works at enterprise scale. Experience in the creation and development of Vulnerability dashboards ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...