26 to 50 of 66 Threat Intelligence Jobs in the UK excluding London

evolving cyber threats by supporting and enhancing the External Attack Surface Management (EASM) capability across people, process, and technology. You will contribute to an intelligence-led approach to cyber operations, ensuring external assets are identified, assessed, and continuously tested. The role supports detection assurance by identifying shadow … real-world risk, attacker relevance, and exploitability Monitor changes in external exposure, identifying new assets, regressions, and emerging risks across the estate Collaborate with Threat Intelligence and Cyber Operations to align exposure findings with attacker activity and remediation priorities Produce clear, actionable reporting on external exposures, trends ...

assessing and mitigating cyber threats across enterprise systems while helping to shape and improve the organisation’s overall security posture. Key Responsibilities Cybersecurity Operations & Threat Management Conduct ongoing threat assessments across operational systems and infrastructure Identify vulnerabilities, threat vectors and areas of security risk Design and implement … security mitigations and remediation strategies Monitor emerging cyber threats and recommend appropriate defensive measures Support automated threat monitoring, incident detection and response capabilities Develop and maintain cybersecurity playbooks and incident response procedures Coordinate with third-party security providers during security incidents and testing activities Security Governance & Risk Management Support ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … release or change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with deep knowledge of cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Core Duties Knowledge and experience of design, build, deployment ...

play a key role in protecting critical systems and services, working alongside security, infrastructure, and cloud teams to enhance security monitoring, incident response, threat detection, and operational resilience. The successful candidate will bring a strong background in cyber security operations, ideally gained within Defence, Government, or other highly regulated … cyber security monitoring and incident response capabilities. Investigate and manage cyber security incidents, ensuring appropriate containment, remediation, and reporting. Analyse security alerts, events, and threat intelligence to identify potential risks and vulnerabilities. Develop and refine detection use cases, correlation rules, and security monitoring processes. Work closely with cloud ...

high-performing Cyber Security Operations Centre supporting critical national security environments. This is an opportunity to work at the forefront of cyber defence, leading threat detection, incident response, vulnerability management, and continuous improvement of security monitoring capabilities. As a Senior SOC Analyst, you will play a key role … protecting complex enterprise environments through the management and optimisation of security tooling, threat detection, incident response, and forensic investigations. You will work closely with internal and external stakeholders to enhance SOC capabilities, improve security visibility, and strengthen cyber resilience. Key Responsibilities Maintain and optimise SOC Protect, Detect and Respond ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong Scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, Firewalls, and proxies. Experience within ...

containment, and coordination of security incidents, working closely with Tier 1 analysts, internal IT teams, and external stakeholders. Taking ownership of complex alerts, support threat hunting and intelligence efforts, and contribute to the refinement of detection rules, playbooks, and response procedures. You will be involved in – • Incident Detection … Response • Threat Intelligence and Analysis • Security Monitoring and Detection Engineering • Compliance, Reporting and Documentation • Vulnerability Management • Collaboration and knowledge sharing This would suit an experienced security analyst who has proved experience working in a busy security department, working in security operations. Strong alert triage, incident response, security monitoring ...

security knowledge. The Security Manager will work closely with Network Engineering, Systems, NOC, Infrastructure, Field Operations and third-party security providers to ensure effective threat detection, incident response, vulnerability management and continuous security improvement Responsibilities Cyber Security Strategy & Governance Define, implement, and maintain Airband’s cyber and information security … organisation. Maintain ownership of the cyber security risk register, ensuring risks are identified, assessed, tracked and mitigated appropriately. Conduct regular security risk assessments, threat modelling and security posture reviews. Ensure compliance with relevant standards, frameworks and legislation including ISO 27001, NIST, GDPR, and the UK Data Protection Act. Support ...

annum. About Police Digital Service We are looking for an experienced and resourceful Cyber Vulnerability Specialist to develop and strengthen the NMC Cyber Threat Team. You will help to design and build our vulnerability management offering to policing, then transition into running the operational aspect. You will help policing … translating vulnerability findings into operational risk Support force patching schedules, helping prioritise remediation based on risk and operational constraints Maintain awareness of the current threat landscape and newly disclosed vulnerabilities to provide timely reports Identify trends, recurring vulnerabilities, and systemic issues across force estates and provide strategic recommendations Supporting ...

endpoint detection systems. Identify and escalate potential security threats or vulnerabilities in real-time. Continuously optimize SOC workflows, tools, and processes for greater efficiency. Threat Intelligence and Analysis: Proactively research and assess emerging threats, vulnerabilities, and attack vectors. Develop strategies to mitigate risks based on threat intelligence. … Technology, or a related field. Equivalent work experience may be considered. Experience: 4+ years of experience in cybersecurity, preferably in SOC, incident response, or threat analysis roles. Certifications: Relevant certifications such as CISSP, CEH, GCIH, GCIA, or CISM are highly desirable. Cybersecurity Engineer - Technical Skills: Knowledge of firewalls ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale The opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure … Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents, communicating clearly across teams and escalating where needed. EDR - day-to-day interaction with ...

Strong understanding and practical application of ISO 27001 and related governance, risk, and compliance frameworks. Experience with security monitoring, incident response, vulnerability management, and threat management processes. Proven stakeholder management skills with the ability to engage effectively at all levels of the organisation. Experience managing third-party suppliers, managed … performance management Cloud networking and hybrid environments IDS/IPS technologies Secure network architecture principles Knowledge of SIEM, SOAR, endpoint security, vulnerability management, and threat intelligence platforms. Understanding of modern cyber threats, attack techniques, and defensive security controls. Desirable Qualifications ISO 27001 Lead Implementer or Lead Auditor CISSP ...

Strong understanding and practical application of ISO 27001 and related governance, risk, and compliance frameworks. Experience with security monitoring, incident response, vulnerability management, and threat management processes. Proven stakeholder management skills with the ability to engage effectively at all levels of the organisation. Experience managing third-party suppliers, managed … performance management Cloud networking and hybrid environments IDS/IPS technologies Secure network architecture principles Knowledge of SIEM, SOAR, endpoint security, vulnerability management, and threat intelligence platforms. Understanding of modern cyber threats, attack techniques, and defensive security controls. Desirable Qualifications ISO 27001 Lead Implementer or Lead Auditor CISSP ...

critical role in strengthening and maturing Reapit’s cloud security posture. Your work will span hands on security engineering, deep incident response, proactive threat detection, and collaboration with global teams. Design, implement, and enhance secure Cloud infrastructure, services, and applications in collaboration with DevOps teams. Conduct ongoing security assessments … high quality documentation. Work in a self managing, proactive manner — anticipating security needs, identifying gaps, and driving improvements without close supervision. Incident Response & Threat Detection Respond to SOC alerts. Working with our outsourced SOC, Lead and participate in global incident response activities, including investigation, containment, eradication, and recovery. Perform ...

party security testing, including penetration testing and phishing simulations Promote a strong cyber security culture through training and awareness initiatives Monitor and report on threat intelligence trends and emerging risks About You You will be a strategic and influential cyber security leader with a strong track record ...

member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Job Title: Senior Threat Detection Analyst Job Location: Preston, Filton or Frimley - Hybrid-2 banks of shifts Shifts: 4 on 4 off 7am - 7pm. We offer a range of hybrid … us. Role Description: In this role you will build, test, and deploy new detection capabilities across the environment in line with threat intelligence. Ensure services are operated in line with agreed service definitions and measures. Contribute to the development of the services through process, people and technology where appropriate. ...

build the next generation of AI-specific security operations capabilities. Working within the SOC, you will collaborate closely with Cyber Defence, Security Engineering, Threat Intelligence, and AI Governance teams to develop detection capabilities, improve incident response, and protect the organisation against emerging AI-related threats. Key Responsibilities Monitor … abuse Abnormal AI usage patterns Conduct daily security log analysis and audit reviews across AI-enabled services. Produce weekly operational metrics, dashboards, and threat reporting. Support AI-focused incident response exercises, simulations, and tabletop scenarios. Develop and maintain SOC playbooks and operational runbooks for AI security incidents. Work with ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

tooling is optimised and actively protecting client environments. Collaborate with teams to assess risks and design effective security controls. Support senior engineers across SIEM, threat intelligence and malware platforms. Apply updates, manage changes and follow robust operational processes. Stay ahead of emerging threats and drive continuous improvement. What ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre solutions. Good ...

cyber attacks to understand attack vectors and consequences, and devising strategies to mitigate future risks. Maintaining an up-to-date understanding of cyber threat intelligence to anticipate potential security breaches and vulnerabilities. Collaborating with IT staff to ensure all IT initiatives are aligned with the firm's security ...

current DV Clearance. What youll be doing: Lead the design and implementation of platform-wide security architectures and strategies. Drive secure SDLC practices including threat modelling, misuse cases, and risk analysis. Oversee security operations including vulnerability scanning, penetration testing, and assessments. Manage and optimise security tooling (Firewalls, VPNs … compliance teams to embed security-by-design. What youll bring : Strong background in network security, SIEM, IDAM, endpoint protection, and cloud security. Knowledge of threat intelligence, IOC analysis, and detection engineering. Experience in secure SDLC, code review, and threat modelling (incl. misuse cases). Understanding of encryption ...

managed clients to both technical and non-technical audiences, Collaborate on improving detection rules and use cases aligned with Mitre Att&ck and threat-informed defense. Participate in a team effort to guarantee that corporate data and technology platform components are shielded from known threats. Collaborate with team members … maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies. Aid the development and use of threat intelligence throughout the service. Ability to work shifts from our office in Farnborough. What you’ll bring: Experience demonstrated in Security Operations Centre. Experience using Microsoft ...

recommended actions. Who You’ll Work With You’ll lead a close-knit team of DFIR analysts within a 24x7 on‐call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity ...

threats quickly and efficiently. Install, configure and maintain security monitoring tools Ensure SOC tooling is optimised and operating effectively Support SIEM platforms and threat intelligence tooling Work with teams to assess risk and design security controls Apply updates, patches and follow change processes Stay current with emerging threats … your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...