76 to 100 of 118 Threat Intelligence Jobs

build the next generation of AI-specific security operations capabilities. Working within the SOC, you will collaborate closely with Cyber Defence, Security Engineering, Threat Intelligence, and AI Governance teams to develop detection capabilities, improve incident response, and protect the organisation against emerging AI-related threats. Key Responsibilities Monitor … abuse Abnormal AI usage patterns Conduct daily security log analysis and audit reviews across AI-enabled services. Produce weekly operational metrics, dashboards, and threat reporting. Support AI-focused incident response exercises, simulations, and tabletop scenarios. Develop and maintain SOC playbooks and operational runbooks for AI security incidents. Work with ...

from a 3rd party MSSP, investigating and responding to the most complex incidents whilst building out IR Playbooks and Processes and developing the internal Threat Hunting capability. A key aspect of the role will be building out the detection-as-code capability, identifying areas to automate where possible … building out the Threat Hunting capability. This is an incredible opportunity for an experienced Senior SecOps Analyst/Engineer to join a growing yet established firm at a crucial point as they completely build out their Information and Cyber Security capability. Whilst they have the fundamentals in place, this ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and Process, Technology ...

tooling is optimised and actively protecting client environments. Collaborate with teams to assess risks and design effective security controls. Support senior engineers across SIEM, threat intelligence and malware platforms. Apply updates, manage changes and follow robust operational processes. Stay ahead of emerging threats and drive continuous improvement. What ...

business community. Please do not contact the recruiter directly. Location(s): UK, Europe & Africa : UK : Guildford || UK, Europe & Africa : UK : Frimley BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data … Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre solutions. Good ...

cyber attacks to understand attack vectors and consequences, and devising strategies to mitigate future risks. Maintaining an up-to-date understanding of cyber threat intelligence to anticipate potential security breaches and vulnerabilities. Collaborating with IT staff to ensure all IT initiatives are aligned with the firm's security ...

current DV Clearance. What youll be doing: Lead the design and implementation of platform-wide security architectures and strategies. Drive secure SDLC practices including threat modelling, misuse cases, and risk analysis. Oversee security operations including vulnerability scanning, penetration testing, and assessments. Manage and optimise security tooling (Firewalls, VPNs … compliance teams to embed security-by-design. What youll bring : Strong background in network security, SIEM, IDAM, endpoint protection, and cloud security. Knowledge of threat intelligence, IOC analysis, and detection engineering. Experience in secure SDLC, code review, and threat modelling (incl. misuse cases). Understanding of encryption ...

managed clients to both technical and non-technical audiences, Collaborate on improving detection rules and use cases aligned with Mitre Att&ck and threat-informed defense. Participate in a team effort to guarantee that corporate data and technology platform components are shielded from known threats. Collaborate with team members … maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies. Aid the development and use of threat intelligence throughout the service. Ability to work shifts from our office in Farnborough. What you’ll bring: Experience demonstrated in Security Operations Centre. Experience using Microsoft ...

life cycle. Key Responsibilities Produce High-Level Design (HLD) documentation for enterprise security solutions. Design secure architectures, integrations, and network/data flows. Conduct threat modelling and security risk assessments, applying Secure by Design principles. Evaluate security technologies and recommend solutions that meet business and security requirements. Provide architectural … have experience designing enterprise security solutions and strong knowledge across a range of security and infrastructure technologies, including: SIEM, IAM/PAM, Cyber Threat Intelligence, Cryptography, Data and Application Security. Network Security, Firewalls, IDS/IPS, VPNs, Secure File Transfer and Remote Access. Cloud Security, Containers, Automation ...

standardization. Cyber Exposure Management Leadership Lead enterprise‐wide exposure management capabilities including vulnerability management and attack surface management. Mature risk‐based prioritization models leveraging threat intelligence and exploitability. Drive continuous reduction of enterprise attack surface. Build integrated exposure management capabilities across security and infrastructure teams. Establish executive‐level ...

standardization.**Cyber Exposure Management Leadership*** Lead enterprise-wide exposure management capabilities including vulnerability management and attack surface management.* Mature risk-based prioritization models leveraging threat intelligence and exploitability.* Drive continuous reduction of enterprise attack surface.* Build integrated exposure management capabilities across security and infrastructure teams.* Establish executive-level ...

standardization.**Cyber Exposure Management Leadership*** Lead enterprise-wide exposure management capabilities including vulnerability management and attack surface management.* Mature risk-based prioritization models leveraging threat intelligence and exploitability.* Drive continuous reduction of enterprise attack surface.* Build integrated exposure management capabilities across security and infrastructure teams.* Establish executive-level ...

recommended actions. Who You’ll Work With You’ll lead a close-knit team of DFIR analysts within a 24x7 on‐call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity ...

threats quickly and efficiently. Install, configure and maintain security monitoring tools Ensure SOC tooling is optimised and operating effectively Support SIEM platforms and threat intelligence tooling Work with teams to assess risk and design security controls Apply updates, patches and follow change processes Stay current with emerging threats … your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...

multiple AWS security services deliver centralized visibility, consistent policy enforcement, and streamlined operations Security Strategy Demonstrate deep knowledge of the AWS Security portfolio spanning Threat Detection, Data Protection, Governance, and Network and Application Protection Articulate competitive advantage over third-party security alternatives and position AWS-native security … Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing - Experience in technology sales selling enterprise software, networking, infrastructure, managed hosting services, or cloud computing services - Experience selling cybersecurity ...

Science, Engineering, Data Science, a related field, or equivalent practical experience. 2 years of experience within a national laboratory, government defense organization, military intelligence unit, or specialized research institution. Preferred Qualifications Experience communicating deeply complex, high‐consequence technical CBRNe risks into clear, actionable insights for business leaders, corporate governance … radiological, nuclear, and explosives (CBRNe) domains. In this critical role, you will be the operational linchpin responsible for building out, maturing, and maintaining the threat models that evaluate and support the mitigation of dual‐use risks of Google DeepMind’s most advanced AI models. Your work will contribute directly ...

workloads, managing RBAC, network policies, and secrets management - is highly desirable, as is a background in security operations or incident response and familiarity with threat intelligence and TTP frameworks. My client offers a highly competitive compensation package, including significant increases on current base salary and market-leading bonuses ...

Group Digital Assets where appropriate to ensure a complete product and service offering is available to AIB UK customers. Stay current with cyber threat intelligence and market trends, proactively liaising with Group Cyber teams in regular Forums & Committees Promote a culture of cyber awareness, working with Group Cyber ...

where applicable, receiving escalated SIEM alerts while also monitoring and operating endpoint, vulnerability, and simulation tooling directly. You have direct access for investigation and threat hunting purposes. You bring experience beyond security tooling, with the ability to navigate the infrastructure and application technologies within the client's hybrid … Cyber, AttackIQ) to an agreed schedule, identifying and acting on findings Reduce detection gaps by contributing to detection rule tuning, false-positive reduction, and threat hunting activities Share insights that improve SOC response times, detection accuracy, and coverage Maintain high standards of documentation, communication, and compliance to audit standards ...

security policies and standards for assessments. Advise client’s on improving their supplier assurance risk management processes. Understand cyber threats and able to utilise threat intelligence for assessments. Participate in supplier security incident response, with a focus on assessment of impact and working in concert with the Incident ...

technical escalation point for junior engineers. You will work directly with customers and partners during high-impact incidents, collaborate closely with Engineering, Product, and Threat Intelligence to feed insight back into the platform, and drive the documentation, runbooks, and operational improvements that raise the bar for the whole ...

with a business-focused approach - protecting what is most valuable to our clients. You'll be assessing risk across business, technology and operations, considering threat intelligence and helping to build the full security view that underpins systems resilience and client confidence. Required qualifications to be successful in this ...

large, complex environments. Design, implement and maintain data pipelines, including log ingestion, enrichment and schema standardisation. Develop and tune security detection content, translating threat intelligence and TTPs aligned to MITRE ATT&CK into actionable, high-value alerts. Manage the full detection content lifecycle: design, test, deploy, monitor, tune ...

class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from ...

application monitoring across a heavily AWS and GCP environment. The role sits within the security function and focuses on incident response, GRC automation, and threat intelligence as they spin up new CTI infrastructure. This is hands-on work across the security tooling stack (MDR, EDR, IDS/… secure web gateway and AWS native tools), automating GRC evidence gathering into a centralised environment, and contributing to threat modelling and architectural design reviews. It's effectively an L3 role, so strong incident response experience is key, alongside Kubernetes security and a DevSecOps or security engineering background ...