13 of 13 Threat Analysis Jobs in the UK excluding London

great opportunity for someone who has moved beyond purely monitoring and alert triage and wants to take genuine ownership of security incidents, investigations, threat analysis and detection improvement. The role supports a 24/7 SOC environment protecting highly sensitive UK environments, so you'll be working … more complex security events. You'll be involved across areas including: Investigating and responding to medium and high-severity security incidents Performing detailed analysis of alerts, logs and suspicious activity Working with SIEM, EDR and wider security tooling Escalating and coordinating containment and remediation activity Acting as a technical ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary … prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant boundary configurations and security baselines Incident Management & Threat Response Lead boundary security ...

standards and regulations, including the Cyber Resilience Act (CRA).**Your Responsibilities*** Specify, design, review, and evolve system software security architectures and implementations.* Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.* Define security requirements and establish traceability from security … product lifecycle.* Support secure development lifecycle (SDL) activities, including architecture reviews, security assessments, and security verification.* Analyze security vulnerabilities and defects, perform root cause analysis, and define appropriate mitigations and countermeasures.* Define and review security mechanisms such as secure boot, secure update, cryptographic services, key management, device identity ...

high-severity security incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting … incident response simulations What we're looking for We're particularly interested in candidates with: 510 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...

across technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs. • Strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation. • Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001. ...

across technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs. • Strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation. • Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001. ...

Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. Act as an in-house SME, providing credible, up-to-date guidance on cyber operations … threats. Ensure training content aligns with MOD and industry standards. Training Design & Development Develop tailored cyber training content based on specialist tools, environments and threat profiles. Produce accessible and engaging learning materials including presentations, workbooks, labs, and simulations. Create realistic scenario-based exercises that mirror real operational incidents. Support ...

Delivery & Subject Matter Expertise Deliver high-quality cyber security and incident response training to learners with varying experience levels. Translate real-world cyber operations, threat analysis, and incident handling into clear, practical instruction. Act as an in-house SME, providing credible, up-to-date guidance on cyber operations … threats. Ensure training content aligns with MOD and industry standards. Training Design & Development Develop tailored cyber training content based on specialist tools, environments and threat profiles. Produce accessible and engaging learning materials including presentations, workbooks, labs, and simulations. Create realistic scenario-based exercises that mirror real operational incidents. Support ...

across technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs. • Strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation. • Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001. ...

Investigating and responding to medium and high-severity security incidents Supporting incident containment, remediation and recovery Mentoring, teaching and upskilling junior SOC Analysts Supporting threat hunting, detection improvement and incident response activities What were looking for 6+ years experience across SOC, Incident Response or Threat Analysis Previous … experience leading SOC teams and mentoring/developing junior analysts Strong security incident investigation and response experience Experience across areas such as threat hunting and incident response Good knowledge of SIEM/EDR tooling no specific SIEM platform is required Ability to confidently take ownership of escalations ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets. Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection. Manage boundary service P&L and resource allocation across multiple customer accounts. Establish and maintain boundary service quality standards and operational procedures. Boundary … prevention and DDoS protection. Architect boundary security solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies, shape … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable recommendations ...

/SAE 21434 cybersecurity lifecycle across company products. In this role, you will drive cybersecurity activities from Item Definition and Threat Analysis & Risk Assessment (TARA) through Cybersecurity Goals, Cybersecurity Concepts, and the derivation of system and software cybersecurity requirements. Acting as the technical authority for cybersecurity, you will ...