126 to 150 of 229 Threat Intelligence Jobs in the UK excluding London

industry-leading frameworks, cutting-edge tooling and experienced security professionals – building skills and credibility that will serve you throughout your career. Key responsibilities:Reviewing threat intelligence feeds and penetration test findings to identify and prioritise use cases for Breach and Attack Simulation (BAS), ensuring our testing reflects … real-world threat landscape.Supporting penetration testing engagements by validating that scope is appropriate and that reports meet AXA's standards, giving you a front-row seat to a wide variety of technical assessments.Reviewing remediation plans arising from penetration testing activity, ensuring that proposed fixes will genuinely address identified issues ...

industry-leading frameworks, cutting-edge tooling and experienced security professionals – building skills and credibility that will serve you throughout your career. Key responsibilities: Reviewing threat intelligence feeds and penetration test findings to identify and prioritise use cases for Breach and Attack Simulation (BAS), ensuring our testing reflects … real-world threat landscape. Supporting penetration testing engagements by validating that scope is appropriate and that reports meet AXA's standards, giving you a front-row seat to a wide variety of technical assessments. Reviewing remediation plans arising from penetration testing activity, ensuring that proposed fixes will genuinely address ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

security and implementing security within cloud environments Knowledge of security technologies including endpoint, data and mobile security Understanding of SIEM, SOC, vulnerability management and threat intelligence capabilities Strong communication skills with the ability to explain security risks to technical and non technical stakeholders CISSP, CISM ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … teams, you’ll influence how security is designed, embedded and continuously improved.You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways of working ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good understanding ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Responsibilities Security Monitoring Monitor security alerts and system activity. Identify unusual behaviour and escalate potential threats. Assist with the investigation of security incidents. Threat Detection Review logs and security reports. Help identify vulnerabilities and potential risks. Support security testing and compliance activities. Security Operations Maintain incident records and documentation. … business. Assist in implementing security controls and best practices. What Success Looks Like After joining the team, you'll be developing skills in: Threat Detection Security Monitoring Incident Response Cyber Risk Management Security Compliance Network Security Fundamentals Ideal Candidate Profile We're looking for someone who: Has a genuine ...

Consultant, you'll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you'll operate at the intersection of threat intelligence, incident response and supplier risk. You'll use data, tooling and insight … influence how security is designed, embedded and continuously improved. You'll play a key role in strengthening our approach to supply chain threat management-supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you'll operate within agile ways of working ...

detection capabilities . Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build SOAR playbooks, automated response workflows and security integrations . Integrate SIEM, SOAR, EDR/XDR, IAM, vulnerability management and cloud … security tools . Support incident response, threat hunting and security investigations . Develop dashboards, reporting and metrics to improve SOC performance. Lead AI-driven security initiatives , including AI agents and agentic workflows for alert triage, investigation and response. Work closely with Security, Infrastructure, Cloud and Application teams. About ...

experience within our team. We are looking for a AWS Cloud Security Engineer to join our team in Manchester. You will own vulnerability and threat management for an environment where the stakes are real; the software you help protect supports law enforcement and emergency services across … across cloud infrastructure, networks, and applications, prioritizing findings by risk, and tracking remediation through to closure. Researched emerging threats relevant to our environment, turning threat intelligence into clear, actionable guidance on what to patch, watch, or harden next. Led the response to a security alert: triaging it, containing ...

segmentation, remote access arrangements and physical protection systems. Identify opportunities to improve the integration of cyber and physical security measures. Review and communicate relevant threat intelligence to stakeholders. Contribute to security awareness projects across the business. Support supplier and contractor security assessments and oversee third-party access assurance. ...

Security Consultant (Supply Chain) to help identify, understand and respond to cyber risk across its third-party ecosystem. You will work in the Threat Lab, combining threat intelligence, incident response and supplier risk to deliver actionable advice to business and technology stakeholders. The role is hybrid, with ...

Specialist to join our team in Manchester. You will be the security decision-maker on the ground in our Manchester office, owning vulnerability and threat management for an environment where the stakes are real. The software we build supports first responders, so the systems you protect help keep communities … safe. The unique challenge of this role is breadth with depth: you will run a serious vulnerability and threat program while being the trusted, on-site presence who keeps the office and its people running, often making the call on your own and coordinating with a wider Cybersecurity team ...

think enterprise grade and demonstrates ambition in problem solving. Matrixed Collaboration & Stakeholder Management Cross-Functional Orchestration: Act as the central nexus between Cyber (threat intelligence and architecture), CTO/CIO (engineering, platform, and infrastructure delivery), and CRO (regulatory compliance and operational risk). Influence Without Authority: Navigate … Stack Mastery: Proven track record of scaling modern AppSec tooling, API security gateways, cloud-native application protection platforms (CNAPP), and automated vulnerability orchestration pipelines. Threat Modeling Expertise: Strong command of threat modeling methodologies (e.g., STRIDE, PASTA) tailored for complex, interconnected banking applications. Functional & Cultural Leadership Matrix Leadership ...

Head of Cyber Risk (GHCR) in delivering the cyber security strategy and Mid-term Plan (MTP). Lead the gathering and analysis of market intelligence, contributing to the bi-annual CCoE Horizon Scan, the regular cyber market intelligence report, and ad-hoc internal Technical, Cyber Risk and Market … Intelligence reports. Support the team in the development and delivery of cyber technical training. Support the maintenance and production of Realistic Disaster Scenarios (RDS) and broader risk parametrisation relating to the internal accumulation model. Lead the CCoE's assessment and selection of technical tools, explaining the technical landscape ...