4 of 4 Remote/Hybrid Threat Intelligence Jobs in Yorkshire

Analyst. This role focuses on improving SIEM detection and monitoring capabilities. You will develop, test, maintain and improve SIEM monitoring and detection content, using threat intelligence and operational insights to improve detection coverage, accuracy and the identification of cyber threats.You will apply and refine threat-informed detection … agreed standards, providing advice on mitigation, escalation and risk reduction.Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.Support incident response ...

leading response across detection, triage, containment, eradication and recovery, then driving lessons learnedRun daily operations - investigate alerts, guide vulnerability remediation, keep on top of threat intelligence, and make sure real risks get acted onAdvise, not police - be the pragmatic, trusted security voice for IT, engineering and business teams … judge when to trust the result and when not to. You might use these skills to accelerate log analysis, draft incident communications, summarise threat intelligence, or build repeatable AI-assisted workflows for the team. What We Offer: Hybrid working | Permanent | Full-time, part-time or job share. Flexible ...

compromise, and policy violations correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity. * Participate in continuous threat hunting activities, leveraging threat intelligence, and proactive analysis to identify suspicious activity, emerging threats, and attack trends. * Work with Detection and Automation team … 5+ years in Security Operations/SOC or Incident Response, including in a 247 or global environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/ ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability ...