26 to 50 of 136 Threat Intelligence Jobs in the UK excluding London

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group … partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group … vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT/ ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

legal requirements, and best-practice security standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence to identify emerging risks, suspicious activity, and weaknesses in DVSA's security posture. Manage post … acting as a bridge between the technical and the non-technical, providing updates and recommendations in a clear and comprehensive manner. Experience in interpreting threat intelligence and building in rulesets into IDS/IPS toolsets to the threat risks. Good working knowledge of security concepts (Physical, Personal ...

that the team members have every opportunity to grow and learn with the organisation.As part of our Blue Team, you’ll use the latest intelligence and tooling to analyse information systems to ensure effective incident detection and response.Job DescriptionIf you are looking to make your mark on a rapidly … ideal candidate will be a self-starter with an inquisitive nature and a keen interest when it comes to technical cybersecurity topics such as threat hunting, attacker tactics and techniques, monitoring and alerting, threat intelligence, and incident readiness and response. Key responsibilities of the role are summarised ...

property industry. Job DescriptionSupport security operations, incident investigations and response activities.Collaborate with the Security Operations Centre (SOC) to analyse threats and security alerts.Conduct threat intelligence research and identify emerging cyber risks, adversary tactics and indicators of compromise.Utilise Microsoft Defender XDR and associated Microsoft Defender products to support investigations … simulation campaigns.Strong knowledge of user engagement initiatives, targeted training and compliance reporting.Solid understanding of recognised security frameworks and standards, particularly Cyber Essentials.Knowledge of cyber threat intelligence concepts, including IOCs, TTPs and threat analysis.Experience working with SOC teams, managed security service providers or security operations functions.Hands-on experience ...

directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and proof of concepts.You’ll be part of a high-performing team that values hands-on expertise, technical leadership, and continuous growth. … culture is built by engineers who’ve progressed through roles in security operations, threat intelligence, and engineering. You’ll benefit from cyber ranges, training labs, and the freedom to shape your development path.As part of a leading MSSP, you'll gain exposure to a wide range of industries ...

Incident Response Manager, you will ensure the organisation is prepared to detect, analyse and respond to cyber threats by bringing together incident response, threat intelligence and detection engineering into a cohesive and proactive operational strategy.What You’ll Be DoingIn this highly influential role, you will lead the full … cyber incident lifecycle, from readiness and threat detection through investigation, containment, eradication, recovery and post-incident improvement. You will ensure that threat intelligence directly informs detection capabilities and response decisions, while lessons learned from incidents are translated into stronger controls, enhanced detection logic, improved playbooks and wider ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber controls ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

people who are technical at heart and understand what analysts need to succeed. Career development is a core focus, with clear pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response for those who want to specialise. You’ll be part … complex cases to Senior and Lead Analysts with appropriate context.Review vulnerability management output and provide basic prioritisation insight. Hunt and improveTake part in directed threat hunting activities.Suggest improvements to detections, dashboards and runbooks.Support testing of new use cases and detection logic.Collaborate and communicateProvide clear written updates for customers ...

role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends … Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving ...

training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement – You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive … Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence – how feeds are sourced, what constitutes actionable information ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness ...

across Tesco’s technology landscape. Apply secure, test-driven development principles to build resilient, maintainable, and scalable security solutions. Leverage automation and Applied Artificial Intelligence (AI) to enhance detection accuracy, reduce false positives, and optimise response workflows. Contribute to the hardening of cloud and enterprise environments through innovative detection … prevention mechanisms. Work closely with Security Operations Centre (SOC), Threat Intelligence, and platform engineering teams to deliver integrated, customer-first security outcomes. Actively learn from incidents, research emerging threats, and translate insights into improved detection coverage and engineering practices, fostering an inclusive and innovative team culture.You will need ...

reduce cyber risk. The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world … gateway, private access, zero trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure ...

currently recruiting for SOC Manager (SC) with background experience in leading and managing a SOC, delivering threat intelligence and assessment and effective security monitoring, to join a great project for 6+months, that is ran by a UK GOV Client. The best thing about this opportunity is that … experience as a SOC Manag er, Effective in deploying resources In-depth knowledge of incident management processes Can deliver an effective security monitoring capability, threat intelligence and assessment Managing relationships (external vendors, managed security service providers, technology partners) SC Clearance - Candidates holding active SC will benefit ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team.You will be asked to demonstrate this live as part of the interview process ...

Tesco’s Innovation Engineering team, you will build and lead a new engineering capability that accelerates Tesco’s cyber defence through applied Artificial Intelligence (AI), automation, and modern engineering practices. You will help protect a retail ecosystem serving millions of customers, ensuring innovation is delivered safely, responsibly … without compromising trust, resilience, or responsible AI principles. In the immediate term, you and your team will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams. This team operates as an innovation incubator for Cyber Defence capabilities, rapidly exploring ideas, validating them through prototypes ...

ecosystem serving millions of customers. You will combine deep engineering expertise with an innovation mindset to build production-grade solutions that leverage applied Artificial Intelligence (AI), automation, and modern development practices to strengthen Tesco’s cyber defence. This role sits at the point where ideas become real: you will … across diverse security and technology teams with a customer-first focus. In the immediate term, you will focus on the needs of our Cyber Threat Intelligence and Detection Engineering teams. This team operates as an innovation incubator for cyber defence capabilities: rapidly exploring ideas, validating them through prototypes ...