51 to 75 of 106 Remote/Hybrid Threat Intelligence Jobs

Role: Senior Security Specialist - Threat Hunting Location: Cardiff (hybrid) Salary: Band 7 Pension : 20% The Opportunity: Digital Health and Care Wales vision is to provide world leading digital services, empowering people to live healthier lives, and transforming health and care for everyone in Wales. It is a multi-award … Place to Work in IT. Job Summary Support Digital Health and Care Wales in protecting critical systems, applications and sensitive data by leading proactive threat hunting, improving detection capabilities, and providing expert cyber security guidance. The role is a senior technical position within the Cyber Security Operations Centre (CSOC ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

unauthorised access events.Monitor, analyse, and respond to alerts from client security platforms (MDR/XDR, SentinelOne, Huntress, Fortinet, Mimecast, Avanan, Defender) to ensure rapid threat mitigation.Conduct vulnerability assessments, risk analyses and security audits across client environments, providing actionable recommendations and remediation guidance.Implement and maintain security hardening across infrastructure, cloud … alignment with best practices and frameworks such as ISO27001, NIST, and Cyber Essentials Plus.Lead and coordinate incident response efforts, including root cause analysis, threat containment and post-incident reporting for clients.Collaborate with the Project and Service Desk teams to embed security into deployments, migrations, upgrades, and automation workflows, ensuring ...

tools such as Microsoft Defender Vulnerability Management and Tenable to identify and prioritise vulnerabilities.Translate vulnerability findings into actionable remediation plans with technology stakeholders.Leverage cyber threat intelligence to improve detection capabilities and prioritisation decisions.Track remediation progress and provide meaningful risk reporting to cyber leadership.Stakeholder Management & CollaborationPartner with Group … functions.Experience operating within hybrid cloud and on-premise environments.Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies.Experience with detection engineering, threat detection and security automation.Exposure to vulnerability management platforms such as Tenable or Microsoft Defender Vulnerability Management.Experience managing stakeholder communications during high-severity incidents.Strong understanding ...

security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health … Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within ...

Platform , delivering targeted security awareness training, running phishing simulations and producing compliance reporting. The remaining time will involve supporting the Infrastructure Team by managing threat intelligence, responding to security incidents and reviewing alerts received from the Managed Security Operations Centre (SOC). This role offers hybrid working , with … report on phishing simulation campaigns. Produce compliance and security awareness reporting for stakeholders. Monitor training completion and recommend improvements. Support the Infrastructure Team with threat and risk intelligence from the Managed SOC. Investigate and respond to security alerts and incidents. Support vulnerability management and security remediation activities. Assist ...

working within Defensive Cyber Operations with an in-depth knowledge of at least one specialisation (security monitoring, network operations, Incident Response/Management, Threat Intelligence, Vulnerability Management or Cyber Operations).Experience working in or with Government organisations, including the handling of assets subject to the Government Security Classification … Policy.Experience of threat and risk modelling.Strong understanding of network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

Cloud, and Product teams to reduce risk and embed security effectively across the organisation.You operate across incident response, detection engineering, security tooling, vulnerability management, threat intelligence, telemetry, and automation - turning operational insight into stronger controls and better engineering outcomes.ResponsibilitiesSecurity Operations & Incident Response• Lead end-to-end investigation … measure retire).• Use version control and detection-as-code where possible.• Reduce false positives and improve detection quality and coverage.• Map detections to threat behaviours (e.g. MITRE ATT&CK).• Validate detections through testing, incidents, and simulations.Log & Telemetry Management• Onboard and maintain log sources across cloud, identity, endpoint ...

trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these via the appropriate channels and track through to remediation. Monitoring and gathering Threat intelligence and coordinating subsequent Threat Hunting. Assess security threats from multiple sources and plan mitigation/remediation. Gather relevant data, analyse ...

procedures.The Successful ApplicantPrevious experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.Experience investigating security incidents and coordinating … technologies.Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.Experience securing cloud-based and enterprise collaboration environments.Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.Strong analytical and problem-solving skills with the ability to assess security risks effectively.A proactive approach ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands..Hiring and how we workWe use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first … valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

understood, tracked and reported. Contribute to security governance, compliance activities and external assessments, including alignment with frameworks such as ISO 27001 and NIST. Use threat intelligence, testing outcomes and assurance data to help shape priorities, improve resilience and inform senior stakeholders. Support incident preparedness, including investigations and exercises … that test our ability to respond effectively. Help shape our security strategy, monitor emerging threats and intelligence, identifying opportunities to strengthen our approach through security automation. This position has been classified as a hybrid role, requiring the selected candidate to typically spend 40-60% of their time collaborating ...

Gurugram, New Delhi, Berlin, Paris and LuxembourgABOUT THE ROLE:The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & ResponseProduct Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design … reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead ...

Experience of line managing, supervising, supporting, coaching or providing technical direction to cyber security or technical staff. Experience of SIEM, Managed Detection and Response, threat intelligence, supplier assurance or third-party cyber security activities. Skills and Knowledge Essential Good understanding of cyber security principles and enterprise security controls ...

tools: Microsoft Sentinel, SentinelOne, NetSkope, Flashpoint, Wiz or similar tooling.Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines.Working knowledge of DLP and threat intelligence monitoring.Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation.Understanding of AI security risks and frameworks ...

incident response.Participate in shift rotations, including nights and weekends if required.Support Growth of our SOC as a Service capabilityStay current on cybersecurity trends and threat intelligence.Required Qualifications:Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts ...

27001.The Technology & Data Risk Manager also helps the organisation anticipate and respond to emerging risks and opportunities, including developments in artificial intelligence, evolving cyber threats, and third-party dependencies. Through effective stakeholder engagement, assurance activity and risk reporting, the role contributes to maintaining a resilient, compliant, and well-controlled … assurance. Knowledge of AI risk, data ethics or emerging technology governance. Working knowledge of UK GDPR and the Data Protection Act 2018. Knowledge of threat intelligence, vulnerability disclosure, and security testing approaches. Relevant professional certifications (e.g. CISM, CISSP, ISO 27001 LI/LA, CRISC, ITIL). ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.Sophos offers industry … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

improvement of OT cyber monitoring, detection, and alerting capabilities across operational environments.Develop and influence OT security strategies, roadmaps, and capability plans, aligning operational risks, threat intelligence, regulatory requirements, and engineering priorities.Provide expert OT cyber security guidance and risk-based recommendations to engineering, operational, cyber security, and supplier stakeholders.Act … teams, ensuring OT-specific risks and operational considerations are reflected in security processes.Apply specialist knowledge of OT monitoring technologies, industrial control systems, and cyber threat detection to improve visibility and resilience across critical assets.Drive the development of detection use cases, alert tuning, monitoring enhancements, reporting, and performance metrics ...

lead and manage a team * In-depth knowledge of incident management processes * Proven experience delivering an effective security monitoring capability * Proven experience delivering threat intelligence and assessment * Proven experience operating cyber security solutions and tools * Demonstrated experience in managing relationships with external vendors, managed security service providers (MSSPs ...

hybrid cloud and on premises environment, triaging and investigating alerts, and supporting coordinated incident response activities. You will operate our vulnerability management processes, translate threat intelligence into actionable defences, and contribute to the improvement of detection content and security controls. You will also work closely with IT colleagues ...