76 to 100 of 170 Remote/Hybrid Threat Intelligence Jobs

identified threats. Correlate information from multiple technical sources to establish attack timelines and identify affected systems. Analyse indicators of compromise, attacker techniques and threat intelligence. Escalate confirmed or suspected incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical … alerts using enterprise monitoring technologies. Good knowledge of SIEM platforms, security-monitoring tools and log-analysis techniques. Understanding of cyberattack methodologies, indicators of compromise, threat intelligence and common attacker techniques. Experience analysing data from multiple technical sources to investigate security events. Experience supporting cyber incident-response activities. Knowledge ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next‐gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing Data … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate ...

analysis, monitoring technologies and security event investigation. Experience investigating complex cyber events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation and response, intrusion detection, forensics, protective security and secure operations. Ability to make timely decisions ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

responsibilities include: Leading investigations into security alerts, incidents and emerging threats, ensuring effective containment, eradication and recovery activities. Analysing security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. Conducting threat hunting, forensic investigations and proactive cyber defence activities to identify previously … resilience of one of the UK's largest organisations. What you'll need Strong experience within a Security Operations Centre, Cyber Defence, Incident Response, Threat Hunting or a related cyber security environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding ...

Banking sector. This is an excellent opportunity for a cyber security professional looking to further develop their expertise in incident response, digital forensics, threat containment, and enterprise-scale cyber operations . You will work alongside experienced professionals across Threat Intelligence, Detection Engineering, Security Operations, and Incident Management … fast-paced environment. Key Responsibilities Investigate and respond to cyber security incidents across the enterprise environment. Perform host-based investigations, forensic analysis, and threat containment activities. Monitor and support critical information security technologies operating within a 24/7 environment. Work closely with internal and external stakeholders to support ...

skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands..Hiring and how we workWe use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first … valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled ...

improvement while driving lessons learned activities Demonstrated integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities Talent management of direct reports with empathy and patience, while developing them … Information Security Professional Information System Administration/Engineering 5+ years’ collective experience between the following roles: Security Operations Center (SOC) Analyst/Manager Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions Attack & Penetration Testing (Active Defense) eDiscovery or related role performing forensic functions 3+ years ...

Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

client is the digital and intelligence arm of a major defence company. Location(s):UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley Our client is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

improvement while driving lessons learned activities Demonstrate integrity and judgment within a professional environment Inquisitive approach to analysis and peer review Application of emotional intelligence and calm under pressure Ability to appropriately balance work/personal priorities To qualify for the role, you must have Education: Bachelor … years’ experience in at least two of the following roles: Security Operations Center (SOC) Analyst/Manager (3 years minimum) Cybersecurity Incident Coordinator Cybersecurity Threat Intelligence Cybersecurity Detection Engineering Other relevant Cyber Defense functions eDiscovery or related role performing forensic functions Deep understanding of security threats, vulnerabilities ...

Supply Chain) to help Lloyds Banking Group identify, understand and respond to cyber risk across its third-party ecosystem. The role sits in the Threat Lab, intersecting threat intelligence, incident response and supplier risk. You’ll detect and analyse threats, inform business and technology decisions, and work ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape. The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape. Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection as code pipelines, including structured use case development and versioning approachesProduce clear technical … normalisation to support detection use casesNetwork Detection and Response technologies such as Vectra AI, Corelight or similarCloud security and telemetry, particularly within Azure environmentsThreat intelligence integration and enrichment to support detection and responseDevelopment of customer playbooks and response workflows aligned to SOC operationsGeneral awareness of emerging technologies, including ...

security and implementing security within cloud environments Knowledge of security technologies including endpoint, data and mobile security Understanding of SIEM, SOC, vulnerability management and threat intelligence capabilities Strong communication skills with the ability to explain security risks to technical and non technical stakeholders CISSP, CISM ...

skills, including clear documentation and reporting. Good planning and organisational skills with attention to detail. Technical experience and skills Understanding of cybersecurity domains, including Threat Intelligence, Vulnerability Management, Security Testing, Security Architecture, Infrastructure Protection, Application Security, Identity and Access Management, Incident Investigation & Response, and Cryptography. Familiarity with information ...

shift rotations, including nights and weekends if required. Support Growth of our SOC as a Service capability Stay current on cybersecurity trends and threat intelligence. Required Qualifications: Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience). Basic understanding of networking concepts ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with ...

looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/ ...

Consultant, you’ll help shape how Lloyds Banking Group identifies, understands and responds to cyber risk across its third-party ecosystem. Sitting within the Threat Lab, you’ll operate at the intersection of threat intelligence, incident response and supplier risk. You’ll use data, tooling and insight … teams, you’ll influence how security is designed, embedded and continuously improved.You’ll play a key role in strengthening our approach to supply chain threat management—supporting incident response, informing risk decisions, and driving more proactive, intelligence-led controls. Alongside this, you’ll operate within agile ways ...