InsiderThreat Investigations Lead Salary - 110,000 + Discretionary Bonus Hybrid working - x2 day's per week in office (London) Spencer Rose are partnered with a leading financial services organisation who are currently on the look out for an InsiderThreat Investigations Lead. Within this role the InsiderThreat Investigations Lead … will be responsible for the identification, prevention, and response to risks posed by individuals with authorized access to their organizational assets. The InsiderThreat Investigations Lead will have the following responsibilities - Drive the execution of their insiderthreat program, which will include the development of tools, standards, procedures and processes with the aim to … detect and prevent insider threats. Manage investigations of suspected insiderthreat incidents Work collaboratively with the intelligence team to develop threat modelling deliverables The InsiderThreat Investigations Lead will need to have the following skills/experience - 7+ years of experience in information security, preferably within Investigations or similar ie Security More ❯
Yeovil, Somerset, United Kingdom Hybrid / WFH Options
Leonardo UK Ltd
Tool Optimisation: Oversee the enhancement of security tools to maintain a proactive security posture. Incident Response: Provide expert guidance during security incident investigations and response efforts. InsiderThreat: Manage and investigate InsiderThreat cases as required. Threat Hunting: Lead scheduled threat hunts to ensure thorough detection of advanced threats. External Collaboration: Work … e.g., GIAC GMON, GCIA, GCIH, or equivalent). Hands-on experience with SIEM tools (LogRhythm, Splunk) and IDS (Snort). Solid background in network and host security. Expertise in threat intelligence and threat hunting. Experience mentoring and coaching others. Current DV clearance. Security Clearance This role is subject to pre-employment screening in line with the UK Government More ❯
Walton-On-Thames, Surrey, South East, United Kingdom Hybrid / WFH Options
La Fosse
I'm working with a global tech led FS organisation to find an Insider Risk Technical Analyst to strengthen their insiderthreat capability and help safeguard sensitive data from internal threats. They're looking for a technically skilled analyst who can take ownership of insider risk monitoring, investigate sensitive incidents, and fine-tune … DLP policies using enterprise tools. Ideal for someone who enjoys being hands-on while influencing data protection strategy! Looking for candidates with experience in: Microsoft Purview (Insider Risk Management, DLP) Symantec or McAfee DLP platforms ServiceNow or Microsoft Sentinel for incident tracking and analysis Analysing user behaviour and data movement to detect risk Working across security, compliance, and More ❯
Mc Lean, Virginia, United States Hybrid / WFH Options
Gridiron IT Solutions
and professional demeanor required Must remain on the client site during Program core hours of Desired: Direct experience with Terraform Infrastructure as Code -IaC Experience with InsiderThreat programs Experience with managing and using Dev Ops concepts Clearance Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to More ❯
Sunbury-On-Thames, London, United Kingdom Hybrid / WFH Options
BP Energy
our future! You will work with This team is responsible for safeguarding the company's digital assets and ensuring robust cyber resilience. They cover various aspects of cybersecurity, including threat and exposure management, security engineering, cyber incident response, security DevOps, and insider threat. Each team has specific responsibilities and areas of focus, collaborating closely with other digital … and comprehensive approach to cybersecurity. Let me tell you about the role This role is responsible for setting the strategic and technical direction for cyber security across the Cyber Threat and Engineering (CTE) portfolio. This includes defining and maintaining portfolio-wide security strategies, technical requirements, and reference architectures that guide the secure design and operation of CTE platforms, products … and services. The team also leads horizon-scanning and innovation efforts to identify new technologies and approaches that can improve bps cyber resilience. What you will deliver The cyber threat insights that will drive actions to: Identify and remediate weaknesses in bp's security controls (people, process, and technology). Improve our overall monitoring detection and response capabilities. Generate More ❯
guildford, south east england, united kingdom Hybrid / WFH Options
BP Energy
our future! You will work with This team is responsible for safeguarding the company's digital assets and ensuring robust cyber resilience. They cover various aspects of cybersecurity, including threat and exposure management, security engineering, cyber incident response, security DevOps, and insider threat. Each team has specific responsibilities and areas of focus, collaborating closely with other digital … and comprehensive approach to cybersecurity. Let me tell you about the role This role is responsible for setting the strategic and technical direction for cyber security across the Cyber Threat and Engineering (CTE) portfolio. This includes defining and maintaining portfolio-wide security strategies, technical requirements, and reference architectures that guide the secure design and operation of CTE platforms, products … and services. The team also leads horizon-scanning and innovation efforts to identify new technologies and approaches that can improve bps cyber resilience. What you will deliver The cyber threat insights that will drive actions to: Identify and remediate weaknesses in bp's security controls (people, process, and technology). Improve our overall monitoring detection and response capabilities. Generate More ❯
sunbury, south east england, united kingdom Hybrid / WFH Options
BP Energy
our future! You will work with This team is responsible for safeguarding the company's digital assets and ensuring robust cyber resilience. They cover various aspects of cybersecurity, including threat and exposure management, security engineering, cyber incident response, security DevOps, and insider threat. Each team has specific responsibilities and areas of focus, collaborating closely with other digital … and comprehensive approach to cybersecurity. Let me tell you about the role This role is responsible for setting the strategic and technical direction for cyber security across the Cyber Threat and Engineering (CTE) portfolio. This includes defining and maintaining portfolio-wide security strategies, technical requirements, and reference architectures that guide the secure design and operation of CTE platforms, products … and services. The team also leads horizon-scanning and innovation efforts to identify new technologies and approaches that can improve bps cyber resilience. What you will deliver The cyber threat insights that will drive actions to: Identify and remediate weaknesses in bp's security controls (people, process, and technology). Improve our overall monitoring detection and response capabilities. Generate More ❯
West Malling, Kent, United Kingdom Hybrid / WFH Options
Lumina Energy
threats are evolving, and our team is at the heart of protecting critical infrastructure and data. As a Cyber Security Engineer, you'll help lead our proactive efforts in threat detection, response, and mitigation. This role is vital to safeguarding the confidentiality, integrity, and availability of systems and services. What you'll be doing Act on security alerts, incidents … ensure timely responses. Diagnose and investigate security incidents following agreed procedures. Escalate and document unresolved incidents and support recovery efforts. Operate within our enterprise-level SOC and collaborate on threat intelligence. Utilise tools like Microsoft E5, Sentinel, and Darktrace to monitor and prevent threats. Analyse malware and respond to high-priority incidents. Support vulnerability management and threat analysis … Proficiency with Microsoft Security Suite (including Sentinel) and Darktrace or similar. Must have an understanding of cyber threats including malware, ransomware, DDoS, insider threats. Strong knowledge of threat modelling, security monitoring, and cloud environments. Familiarity with GDPR, data protection, and privacy impact assessments. Excellent communication and collaboration skills with a proactive mindset. Industry certifications (e.g., CISSP, CEH More ❯
Technology Risk Adversarial & Cyber Resilience Testing Director, you will have responsibility for designing and executing red team operations and cyber resilience testing against Starling Bank. Operations will emulate real threat actors and target cutting edge technology in Starling Bank's platform as well as ranging across the endpoint estate. You will use emerging threat intelligence to inform and … and improve defensive measures by collaborating with the SOC team to enhance detection capabilities Assist in translating red team tactics into actionable intelligence for blue team operations Assist developing threat models and 'worst case scenario' playbooks based on emerging global risks, including APTs, insiderthreats and supply chain compromise and simulate real-world scenario to evaluate system … are desirable: Experience in Ai/Ml Systems Security, Including LLMs, transformers and model interpretability Certification such as OSCE, CCT, OSEP, OSMR or similar Prior experience in incident response, threat intelligence, or ethical hacking at an enterprise level Background in regulatory environments (e.g. ISO 27001, SOCII, GDPR or AI Act compliance) Software engineering expertise (Java, Kotlin, Go ) or reverse More ❯