51 to 75 of 136 Threat Intelligence Jobs in the UK excluding London

from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology, and Business teams. Drive continual improvement of the Incident Response service. Support both BAU incidents and strategic capability development. Manage incidents … reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested in the role please ...

Access Management (PAM) capabilitiesLead identity governance and administration initiativesDevelop secure authentication and authorisation frameworksEnsure access management aligns with Zero Trust and least privilege principlesCyber Threat & Risk ManagementAssess cyber threat landscapes and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDevelop cyber resilience and business continuity frameworksCloud & Security SolutionsDesign cloud security architectures across Azure, AWS and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre ...

Lead identity governance and administration initiatives Develop secure authentication and authorisation frameworks Ensure access management aligns with Zero Trust and least privilege principles Cyber Threat & Risk Management Assess cyber threat landscapes and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Develop cyber resilience and business continuity frameworks Cloud & Security Solutions Design cloud security architectures across Azure, AWS and hybrid environments Architect endpoint protection, DLP and advanced threat protection solutions Design application security ...

funded Cyber Security course (NCFE Certificate in Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you ll gain hands-on experience that prepares you for today s fast … with, helping you start your career protecting businesses, data and digital systems. What you ll learn Principles: Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond ...

funded Cyber Security course (NCFE Certificate in Principles of Cyber Security, Level 2) equips you with the practical skills employers are actively seeking. From threat intelligence and security testing to incident response and ethical compliance, you’ll gain hands-on experience that prepares you for today’s fast … with, helping you start your career protecting businesses, data and digital systems. What you’ll learn Principles: Understand cyber security principles and core frameworks Threat Intelligence: Develop expertise to identify risks Testing: Conduct cyber security testing, identify vulnerabilities and implement controls Incident Response: Prepare for and respond ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat intelligence and cyber defence capabilitiesArchitect security monitoring, detection and response solutionsDesign business continuity and cyber resilience frameworksCompliance & Standards ImplementationEnsure security architectures comply with MOD security requirements and ITAR regulationsDesign security solutions supporting Information Security Management System (ISMS) complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

Role: Senior Security Specialist - Threat Hunting Location: Cardiff (hybrid) Salary: Band 7 Pension : 20% The Opportunity: Digital Health and Care Wales vision is to provide world leading digital services, empowering people to live healthier lives, and transforming health and care for everyone in Wales. It is a multi-award … Place to Work in IT. Job Summary Support Digital Health and Care Wales in protecting critical systems, applications and sensitive data by leading proactive threat hunting, improving detection capabilities, and providing expert cyber security guidance. The role is a senior technical position within the Cyber Security Operations Centre (CSOC ...

following established playbooks and incident response processes. Manage email security operations across Mimecast and Abnormal, including releases, journal pulls, and reported-phishing investigations. Monitor threat feeds and threat intelligence, applying relevant findings to the environment. Maintain and tune detections, correlation rules, and Cortex XSOAR playbooks to reduce … management across Windows and macOS (Intune, Jamf). Strong knowledge of cloud environments, including Microsoft Azure, AWS, and Microsoft 365. Understanding of layered security, threat hunting, and incident response. Qualifications A degree in a computer-related subject, or equivalent experience in cyber security. Holding, or actively working towards, relevant ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms (Azure … identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/ ...

help protect systems that matter. Apply today and take your cyber security career to the next level. If you're passionate about threat detection, incident response, and staying one step ahead of attackers, we'd love to hear from you. Office based: Farnborough. Clearance: You do need … support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What You'll Bring: Proven experience working ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

success in technical consulting or big-data analytics, featuring recent experience in technical design and architecture.Understanding of core cybersecurity domains, including security operations, forensics, threat hunting, insider threats, threat intelligence, risk management, vulnerability management, and compliance.Proven experience acting as a technical leader, mentor, or subject matter expert ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

strengthen monitoring, detection, and response capabilities.• Leading and evolving our vulnerability management programme, ensuring risks are identified, assessed, prioritised, and remediated effectively.• Conducting proactive threat intelligence and open-source threat analysis to identify emerging risks relevant to the business.• Supporting the development of security detections, playbooks … operational processes that improve efficiency and reduce risk.• Providing actionable threat and incident insights, translating technical findings into meaningful business impact and recommendations.• Leading security incidents through to resolution when required, coordinating stakeholders and driving timely outcomes.• Participating in the cyber security on-call rota, supporting critical incidents outside ...