1 to 25 of 36 Remote/Hybrid Threat Intelligence Jobs in the UK excluding London

Outside IR35 Contract Length: 6 months initially Location: Hybrid/Liverpool UK I'm supporting a large enterprise organisation seeking an experienced Cyber Threat Intelligence Lead to support and enhance its Threat Intelligence capability within a complex enterprise environment. Key Responsibilities Deliver actionable cyber threat intelligence to support security operations and risk reduction. Leverage Threat Intelligence platforms to identify emerging threats, threat actors, and vulnerabilities. Produce strategic and operational intelligence reporting for technical and senior stakeholders. Work closely with Security Operations, Incident Response, Threat Hunting, and Risk teams. ...

Join Police Digital Service an NMC Cyber Threat Intelligence Specialist. Permanent FT. Hybrid/Wigan. Starting salary £45,000 per annum. About Police Digital Service This is an opportunity to play your part and protect our company, our customers and our communities from cyber attack. Be part … National Management Centre provide visibility and control of information risks for Policing. It supports the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology estate ...

Threat Hunting & Detection Engineering Analyst Location: UK (Hybrid) Salary: Competitive + Excellent Benefits Threat Hunting & Detection Engineering Analyst A leading global technology consultancy is looking to hire a Threat Hunting & Detection Engineering Analyst to join its growing Cyber Security practice. This is an exciting opportunity to work … forefront of cyber defence, helping enterprise clients improve their detection capabilities through advanced threat hunting, detection engineering and SOC content development. Working alongside Threat Intelligence teams, Security Operations Centres and client stakeholders, you'll play a key role in strengthening organisations' ability to identify and respond ...

strengthen security operations, improve cyber resilience and influence security awareness across a large and complex organisation. If you enjoy combining technical security expertise with threat intelligence, incident response and user engagement, this contract offers the opportunity to make a visible impact from day one. What's on Offer … enterprise-scale Microsoft security technologies. Opportunity to work alongside experienced cyber security professionals within a mature security function. Broad, varied role covering Security Operations, Threat Intelligence, Security Awareness and Incident Response. A high-profile enterprise environment that will strengthen your CV. Immediate start with the potential for contract ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … SIEM applications with Vulnerability Management, and Asset and Configuration Management systems to enrich efficacy of the solution. Integration of SIEM application with Cyber Threat Intelligence and Case Management solutions. Design, implement and manage log collection and onboarding activities to SIEM. Identify initial set of use cases & playbooks ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact … closely with internal teams and an outsourced SOC partner Mission-focused : Protect critical healthcare data that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with ...

Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

Location(s): UK, Europe & Africa : UK : Manchester BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage … customer is committed to development of this improved SOC to be a benchmark of best practice and excellence in reflection of the significant threat that the protected systems are subject to. The SOC will be staffed by a blend of customer and BAE Systems staff, based in multiple locations ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment ...

human risk management company specializing in unmasking threats before they escalation. We are a trusted advisor who operates as an extension of security, intelligence, legal, and human resource teams to protect their people and business. Our intelligence-led solutions help enterprises make critical decisions, manage human risk … high-visibility role: you’ll work cross-functionally to understand distinct personas and problem spaces across Human Digital Risk—including Executive Protection, Insider Threat, and digital risk monitoring—and turn that understanding into clear, intuitive product experiences. You’ll lead both 0→1 concepts and the evolution of existing ...

from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement of the Incident Response service. Support both BAU incidents and strategic capability development. Manage incidents … reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested in the role please ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … release or change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with deep knowledge of cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Core Duties Knowledge and experience of design, build, deployment ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. The opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre solutions. Good ...

hybrid cloud and on premises environment, triaging and investigating alerts, and supporting coordinated incident response activities. You will operate our vulnerability management processes, translate threat intelligence into actionable defences, and contribute to the improvement of detection content and security controls. You will also work closely with IT colleagues ...

recommended actions. Who You’ll Work With You’ll lead a close-knit team of DFIR analysts within a 24x7 on‐call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity ...