151 to 175 of 276 Threat Intelligence Jobs

global delivery network. The role requires extensive understanding of how enterprise cyber organizations operate, including information security, cyber risk, compliance, security engineering, threat detection, vulnerability management, and operational resilience.This individual will work across member firm teams, deal teams, technical leads, and delivery centers to ensure solution designs are commercially … have• Extensive experience designing cyber managed services including MDR, penetration testing, vulnerability scanning, attack surface management, and threat exposure management.• Experience leading or architecting large scale, multi region cyber programs across enterprises of varying sizes and maturity.• Knowledge of SIEM, SOAR, EDR, ASM, VM, and cloud native security stacks ...

Team): This is far more than a traditional penetration testing role. As part of a newly formed Red Team, you'll emulate real-world threat actors, conduct adversary simulations, assess security controls and provide intelligence-led recommendations that improve HMLR's security posture. You'll help define methodologies … Design and execute realistic attack simulations against HMLR systems and services. Perform penetration testing across networks, applications and infrastructure. Conduct adversary emulation exercises using threat intelligence and attacker methodologies. Identify vulnerabilities, attack paths and security weaknesses. Assess the effectiveness of existing security controls and detection capabilities. Produce actionable ...

incident repose lead for cyber security incidents where required, ensuring timely resolution and effective communication with technical and non-technical stakeholders.• Conduct threat hunting activities to proactively identify emerging threats, suspicious behaviours, and potential security weaknesses across the environment(s).• Develop and maintain security use cases, detection rules … playbooks, and operational procedures to provide continual improvement for security monitoring and response capabilities.• Integrate threat intelligence into security operations processes, ensuring threat indicators, adversary behaviours, and emerging risks are translated into effective monitoring use cases, detection rules, and response actions.• Act as a technical mentor ...

days a fortnight in Liverpool Duration: Initial 6 months Responsibilities: Take ownership of the Vulnerability Management function across IT and OT, driving a mature, intelligence led approach to identifying, prioritising and reducing cyber risk across critical business services. Establish a robust asset management capability by identifying and cataloguing technology … teams to prioritise risk, facilitate weekly governance meetings, track remediation progress and deliver meaningful KPI reporting to senior stakeholders. Deliver timely and actionable cyber threat intelligence by monitoring the evolving threat landscape, identifying emerging risks, and translating intelligence into practical actions that strengthen the organisation ...

Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre Strong experience with … client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

include: Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements. Monitor, triage and investigate security alerts/reports. Analyse security event data, including … firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls. Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices. For more information or to process your application, please apply ...

Cloud, and Product teams to reduce risk and embed security effectively across the organisation.You operate across incident response, detection engineering, security tooling, vulnerability management, threat intelligence, telemetry, and automation - turning operational insight into stronger controls and better engineering outcomes.ResponsibilitiesSecurity Operations & Incident Response• Lead end-to-end investigation … measure retire).• Use version control and detection-as-code where possible.• Reduce false positives and improve detection quality and coverage.• Map detections to threat behaviours (e.g. MITRE ATT&CK).• Validate detections through testing, incidents, and simulations.Log & Telemetry Management• Onboard and maintain log sources across cloud, identity, endpoint ...

trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these via the appropriate channels and track through to remediation. Monitoring and gathering Threat intelligence and coordinating subsequent Threat Hunting. Assess security threats from multiple sources and plan mitigation/remediation. Gather relevant data, analyse ...

procedures.The Successful ApplicantPrevious experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.Experience investigating security incidents and coordinating … technologies.Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.Experience securing cloud-based and enterprise collaboration environments.Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.Strong analytical and problem-solving skills with the ability to assess security risks effectively.A proactive approach ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents ...

ready to build the future of secure artificial intelligence — not just design it, but actually construct it? The AWS AWS GenAI Innovation and Delivery Center stands at the forefront of the AI revolution, where we're not just advising on technology — we're in the trenches, writing code, architecting … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- 7+ years of security, compliance and risk management experiencePreferred qualification - AWS Professional level certification- Experience ...

discipline around cloud computing is critical, as is a high level of ownership and accountability.Key job responsibilities- Application security reviews- Secure architecture design- Threat modeling- Projects and research work as needed- Security training and outreach to internal development teams- Automating and enhancing security review processes using AI agents, LLMs … HTTP, DNS and TCP/IP- Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language- Experience applying threat modeling or other risk identification techniques or equivalent- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure ...

successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions.Key job responsibilities- Creating, updating, and maintaining threat models for a wide variety of software projects.- Manual and Automated Secure Code Review- Development of security automation tools- Adversarial security analysis using tools … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development ...

skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands..Hiring and how we workWe use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first … valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled ...

. The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated workflows, and help shape the future direction … technologies. Scripting and automation expertise (Python, Go, APIs). Experience with cloud platforms such as Azure, AWS or GCP. Knowledge of vulnerability management and threat intelligence integrations. Strong communication, analytical and problem-solving skills. Eligibility for UK security clearance desirable. What's on Offer 2 Days ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance ...

Security Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence.DevSecOps - Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles.AI - Drive … configuration management.Experience managing and supporting enterprise security platforms.Understanding of security operations processes, including alert triage, investigation, and incident response.Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval-Augmented Generation (RAG) concepts.Strong knowledge of system ...

outcomes and operational support procedures. Deliver knowledge transfer sessions and operational handovers to SOC Analysts, Security Engineers and Detection Engineering teams. Work closely with Threat Intelligence, Security Operations, Incident Response and Security Architecture teams to improve detection coverage and threat visibility. Support incident investigations through detection enhancement … detection engineering best practices. Experience tuning SIEM detections and reducing false positives within enterprise environments. Understanding of attack methodologies, adversary behaviours and modern threat actor techniques. Familiarity with Sentinel Content Hub solutions, Data Connectors and SOAR integrations. Experience with Logic Apps and security automation is advantageous. ...

understood, tracked and reported. Contribute to security governance, compliance activities and external assessments, including alignment with frameworks such as ISO 27001 and NIST. Use threat intelligence, testing outcomes and assurance data to help shape priorities, improve resilience and inform senior stakeholders. Support incident preparedness, including investigations and exercises … that test our ability to respond effectively. Help shape our security strategy, monitor emerging threats and intelligence, identifying opportunities to strengthen our approach through security automation. This position has been classified as a hybrid role, requiring the selected candidate to typically spend 40-60% of their time collaborating ...

Gurugram, New Delhi, Berlin, Paris and LuxembourgABOUT THE ROLE:The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & ResponseProduct Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design … reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead ...

Experience of line managing, supervising, supporting, coaching or providing technical direction to cyber security or technical staff. Experience of SIEM, Managed Detection and Response, threat intelligence, supplier assurance or third-party cyber security activities. Skills and Knowledge Essential Good understanding of cyber security principles and enterprise security controls ...

tools: Microsoft Sentinel, SentinelOne, NetSkope, Flashpoint, Wiz or similar tooling.Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines.Working knowledge of DLP and threat intelligence monitoring.Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation.Understanding of AI security risks and frameworks ...

responsible for the following areas: Cyber Support and Engineering, Security Operations Centre covering pen tests, red and blue teams, Cyber and Risk Change portfolio, Threat Intelligence and Vulnerability Management for the Group and Identity and Access Management.NUMBER OF DIRECT REPORTS2MAIN PURPOSE OF THE ROLE Responsible for providing strategic ...

practice within Cloud platforms (AWS and/or Microsoft Azure)In-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A good understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Experience working with security standards ...