1 to 25 of 49 Remote/Hybrid Threat Intelligence Jobs in the UK excluding London

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

multi-year roadmap, translating business risk, regulatory requirements, and technical challenges into scalable engineering solutions.Establish a forward-looking capability across vulnerability management, incident response, threat intelligence, and research. An ambition to constantly learn new skills and develop knowledge, with a specific focus onmonitoring developments in frontier AI cyber … customer facing.Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations.Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms.Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning.About ...

behaviour into effective detection and response.You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm.The role would particularly suit an experienced detection engineering, security operations, red-team … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile.Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility gaps ...

into effective detection and response. You'll work across Cyber Defence Operations, Technology and our Managed Security Service Provider (MSSP), bringing people, technology and intelligence together to reduce the potential for customer, operational, financial and regulatory harm. The role would particularly suit an experienced detection engineering, security operations … continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell's technology estate and threat profile. Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address genuine visibility ...

Active SC Clearance Required Overview We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams. Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle … with security requirements. Key Responsibilities Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence. Establish and coordinate cross-functional working groups across engineering and security teams. Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security ...

client is the digital and intelligence arm of a major defence company. Location(s): UK, Europe & Africa : UK : Frimley UK, Europe & Africa : UK : Gloucester UK, Europe & Africa : UK : Guildford UK, Europe & Africa : UK : Leeds UK, Europe & Africa : UK : London UK, Europe & Africa : UK : Manchester Our client is home … digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security Testing Consultant Penetration Tester Location: UK Wide (Occasional office ...

Account Executive – Cybersecurity SaaS (Hybrid, London) Location: London (Hybrid – 2–3 days/week in office) Industry: Cybersecurity/Threat Intelligence About the Company A fast-growing cybersecurity vendor backed by top-tier investors, this company delivers cutting-edge threat intelligence solutions to help organisations stay … exceed revenue targets Requirements 3+ years of experience in SaaS or cybersecurity sales Proven track record of closing complex enterprise deals Strong understanding of threat intelligence or willingness to learn Excellent communication and consultative selling skills Based in London or able to commute to the office ...

Analyst. This role focuses on improving SIEM detection and monitoring capabilities. You will develop, test, maintain and improve SIEM monitoring and detection content, using threat intelligence and operational insights to improve detection coverage, accuracy and the identification of cyber threats.You will apply and refine threat-informed detection … agreed standards, providing advice on mitigation, escalation and risk reduction.Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.Support incident response ...

risks introduced by AI systems that can reason, retrieve data, call tools and take action.You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight.Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions.Advise on secure patterns for AI application development ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security reports. … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience ...

full contact details are readily available on our website).Keywords: Senior Security Researcher/Cybersecurity Researcher/Security Researcher/AI Security Researcher/Threat Researcher/Security Engineer/Cyber Security Engineer/Security Analyst/SOC Analyst/Threat Intelligence Analyst/AI Security Engineer … Specialist/Generative AI/Agentic AI/Network Security/Linux/Kubernetes/Cloud Security/Endpoint Security/Security Tools/Threat Intelligence/Prompt Injection/Adversarial AI/CCNA/Linux Essentials/SOC/Machine Learning/Artificial Intelligence/Computer ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team. What We Offer: Hybrid working | Permanent | Full-time, part-time or job share. Flexible ...

identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures, automated response workflows … used for enrichment, triage and response orchestration. Endpoint Detection and Response (EDR/XDR) platforms, such as Microsoft Defender for Endpoint and CrowdStrike Falcon. Threat intelligence, detection engineering, investigation and incident response technologies. Cloud security monitoring across Microsoft Azure, AWS and GCP environments. What you can expect ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

premises infrastructure and hybrid architectures. The role provides exposure to security tooling covering areas such as security monitoring, incident detection, incident response and threat intelligence. The Cyber Security Engineer will play a hands-on role in strengthening security across client environments, combining engineering expertise with an understanding of emerging ...

dealing with cyber incidents.Provide written and verbal reports to the wider IR team, senior business partners (internal and external).Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.A team-first, collaborative approach working across all relevant technical teams … requisites for the role: Demonstrably strong incident management and analytical skills. Demonstrably strong written and speaking English skills. Demonstrably strong understanding of Threat Actor TTP’s. Demonstrably strong commercial awareness. Demonstrable ability to work on own projects and within a team. At least 36 months of relevant IT Security ...

escalating confirmed incidents through the appropriate response processes.You’ll also support incident response activity, including investigation and evidence gathering, alongside Vulnerability Management and Cyber Threat Intelligence initiatives. Accurate documentation will be important, helping support assurance, audit requirements and post-incident reviews.Continuous improvement is another key part … incidents and escalation processes, preferably with practical familiarity of SIEM or security monitoring tools such as QRadar. A good understanding of common attack techniques, threat actors and indicators of compromise will also be important.Strong analytical and problem-solving skills are essential. You’ll need to manage multiple alerts ...

maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture.You’ll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities.You’ll support the engineering and continuous improvement of security controls … lifecycle of cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation.You’ll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required.You’ll remediate and/or work with Technology teams and value streams to support the remediation ...