201 to 225 of 502 Threat Intelligence Jobs in the UK

Drive performance and operational excellence across Shared Service’s Cyber Services function Act as a technical escalation point and line manager Support threat analysis, incident response, and security assurance activities Foster a proactive culture of cyber hygiene and continuous improvement Collaborate across departments to strengthen Shared Service's security … threats and investigative escalations Ensure complex or unresolved cybersecurity issues are escalated appropriately Line manage Cyber Analysts, set objectives, and support development plans Share threat intelligence and cyber knowledge with junior colleagues Provide training and coaching on cyber operations tooling and security practices Contribute to root cause analysis ...

Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across ...

Management System (ISMS), policies, standards and governance processes. Lead compliance with NIS Regulations, GDPR and DB Group security requirements. Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management. Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities. Provide governance across ...

Microsoft Defender security policies across endpoint, identity, cloud and email platforms. Contribute to the continuous improvement of cloud security posture across global operations. Threat & Vulnerability ManagementSupport and enhance the vulnerability management programme across infrastructure, cloud and endpoint environments. Work with tools such as Microsoft Defender Vulnerability Management and Tenable … identify and prioritise vulnerabilities. Translate vulnerability findings into actionable remediation plans with technology stakeholders. Leverage cyber threat intelligence to improve detection capabilities and prioritisation decisions. Track remediation progress and provide meaningful risk reporting to cyber leadership. Stakeholder Management & CollaborationPartner with Group IT, Regional IT and wider technology teams ...

scalable, and resilient. Splunk Engineering & Security Monitoring Develop and maintain security monitoring capabilities using Splunk. Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility. Support log ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve ...

scalable, and resilient. Splunk Engineering & Security Monitoring Develop and maintain security monitoring capabilities using Splunk. Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility. Support log ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve ...

other NCSC guidelines Good knowledge of networking (switching, routing, firewalls) In-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A good understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Experience working with security ...

other NCSC guidelinesGood knowledge of networking (switching, routing, firewalls)In-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A good understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Experience working with security standards such ...

compromise, and policy violations correlating network, cloud, endpoint, and log‐based activity to identify attacks, unauthorised use, and suspicious activity Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. Collaborate with stakeholders to investigate … years in Security Operations/SOC or Incident Response, including in a 24×7 or global environment Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis Previous experience acting as incident lead or commander during high‐severity security events preferred Ability ...

innovatorsto tackle humanity’s greatest challenges in four transformative areas: Health, Medical Science & Generative Biology Food Security & Sustainable Agriculture Climate Change & Managing CO2 Artificial Intelligence & Robotics This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join … incidents, supporting containment, eradication, and recovery. Produce clear incident documentation, including reports and root‐cause analysis. Develop and refine detection rules, automation workflows, and threat‐based use cases. Apply threat intelligence to improve detection coverage in complex research environments. Support vulnerability scanning, prioritisation, and remediation tracking. Collaborate ...

residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response … migrating from third-party EDR, SIEM or outsourced SOC services, including platforms such as CrowdStrike. Strong understanding of SOC operations, detection engineering, incident response, threat hunting and managed security service operating models. Broad enterprise security architecture capability across Azure and Microsoft 365, identity, network, endpoint, data protection and hybrid ...

event sources, assess, prioritise, elevate and manage security alerts. Perform analysis of security, network, database and application logs, correlate events and activities to create threat scenarios in order to get ahead of threat actors and reduce exposure. Help the imminent threat/zero-day response function across … environment. Translate threat intelligence into actionable security across tools such as firewalls, IPS and malware detection across multiple security vendor platforms. Support the tracking and resolution of security incidents on occasion, and collaborate with other teams for resolution and suggest areas for improvement. Must have experience building custom ...

event sources, assess, prioritise, escalate and manage security alerts. Perform analysis of security, network, database and application logs, correlate events and activities to create threat scenarios in order to get ahead of threat actors and reduce exposure. Help the imminent threat/zero-day response function across … environment. Translate threat intelligence into actionable security across tools such as firewalls, IPS and malware detection across multiple security vendor platforms. Support the tracking and resolution of security incidents on occasion, and collaborate with other teams for resolution and suggest areas for improvement. Must have experience building custom ...

identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat‐detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures, automated response workflows … used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such as Microsoft Defender for Endpoint and CrowdStrike Falcon. Threat intelligence, detection engineering, investigation and incident response technologies. Cloud security monitoring across Microsoft Azure, AWS and GCP environments. What you can expect Work ...

supply chain security risk management. Lead audit engagements and regulatory inspections related to cybersecurity. 3. Security Operations & Incident Response Oversee security operations including SOC, threat detection, and vulnerability management. Develop and maintain incident response and crisis management plans. Lead response to major security incidents and coordinate with regulators … Technical Expertise Security frameworks: ISO 27001, NIST CSF, COBIT Cloud security (AWS, Azure, GCP) Identity & Access Management (IAM) SIEM, SOAR, EDR/XDR platforms Threat intelligence and vulnerability management Data protection technologies Secure SDLC and DevSecOps practices Strategic thinker with strong commercial awareness Excellent communication and stakeholder management ...

identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement. If you're passionate about cyber security, enjoy solving complexchallenges, and want to make a real … full lifecycle, coordinating containment, remediation, recovery and post-incident reviews while balancing cyber risk and business priorities.* Proactively hunt for threats and partner with Threat Intelligence and Detection Engineering teams to identify emerging risks, improve detections and strengthen security visibility.* Develop and enhance detection rules, analytics, use cases ...

identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement. If you're passionate about cyber security, enjoy solving complex challenges, and want to make … full lifecycle, coordinating containment, remediation, recovery and post-incident reviews while balancing cyber risk and business priorities. Proactively hunt for threats and partner with Threat Intelligence and Detection Engineering teams to identify emerging risks, improve detections and strengthen security visibility. Develop and enhance detection rules, analytics, use cases ...

providers. Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities. Support vulnerability management activities, including remediation tracking and reporting. Assist with threat intelligence gathering and analysis. Governance, Risk & Compliance Support the maintenance and continual improvement of the Information Security Management System (ISMS). Conduct security … client assurance reviews. Ensure security policies, standards, and procedures are reviewed and updated. AI Security & Governance Support the secure adoption and use of Artificial Intelligence (AI) technologies across the organisation. Conduct security and privacy risk assessments for AI platforms, tools, and third‐party AI service providers. Evaluate AI solutions ...

hardening for Windows, Linux, and network devices,including vulnerability remediation. Hands-on experience with cyber security operations and technologies,including security monitoring, logging, alerting, threat detection, incident investigation, EDR, anti-malware/antivirus platforms, vulnerability management,encryption, cryptographic controls, and threat intelligence tools. Proven ability to automate ...

practices Lead real-time response to security incidents Oversee SIEM/SOAR integration, alerting, and playbooks Conduct investigations using log analysis, forensic techniques, and threat intelligence Client-Facing Security Services Provide advisory and managed security support to a portfolio of insurance clients Deliver security reviews, maturity assessments … experience across Azure and Microsoft security stack Scripting/automation capability (PowerShell, Python, Bash) Strong grounding in MITRE ATT&CK, OWASP, and modern threat vectors (Background in insurance, financial services, or regulated environments is highly beneficial). If you are looking for: End-to-end ownership of InfoSec across ...

incidents, analyze threats, and contribute to strengthening the security posture of our customers. If you have a strong understanding of cybersecurity principles, networking, and threat detection, and you thrive in a fast-paced, collaborative environment, this role is an excellent opportunity to grow your career in cyber security. What … bring Experience in cybersecurity principles, attack detection, incident response, and security frameworks. Understanding of networking fundamentals, including TCP/IP, VPNs, firewalls, and threat intelligence models. Strong analytical and problem-solving skills, with the ability to make sound decisions under pressure. Demonstrable experience in conveying complex security concepts ...

Overview CLS helps clients navigate the changing FX marketplace – reducing risk and creating efficiencies. Our extensive network and deep market intelligence enable CLS specialists to lead the development of standardized solutions to real market problems. Our innovative, forward-looking products make the trading process faster, easier, safer and more … equipped with appropriate industry best of breed tools and solutions Operational Operate and maintain CLS Security controls related to SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, Endpoint Protection, Network Protection, etc. Review and help refine CLS Security procedures to ensure compliance with cyber resilience requirements Be responsible when ...

cyber risk register, ensuring risks are clearly documented, appropriately owned and kept audit ready. Develop and maintain the cyber risk taxonomy, including risk categories, threat sources and impact domains aligned to critical business functions. Define and maintain risk scoring methodologies, appetite thresholds and escalation criteria in collaboration with senior … risk management across the organisation. Collaborate with Security Operations, Digital and wider business teams to understand emerging threats and assess their potential impact. Support threat modelling, business impact assessments and wider cyber resilience activities. Promote a proactive and risk-informed culture across the organisation. Knowledge & Skills: Thorough understanding ...

capability within the SOC. The SOC plays a central role across the full breadth of security, maintaining strong expertise in security standards, solution architecture, threat assessment, and vulnerability management. This expertise underpins effective collaboration with Proact’s Service Operations teams and enables the delivery of cohesive, secure services … experience investigating, managing, and responding to security incidents within an operational environment. Strong understanding of Security Operations Centre processes, incident lifecycle management, alert triage, threat detection, and incident response. Hands-on experience working with Security Information and Event Management (SIEM) platforms, preferably Microsoft Sentinel. Working with Microsoft security technologies ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack paths ...