244 jobs for “Threat Intelligence Analyst”
Darktrace London
Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics. The role combines technical delivery with architecture, security, compliance and service management responsibilities.
Darktrace Cambridge
Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics, while balancing project delivery with operational support.
CrowdStrike Ireland
Serve on the technical team of front-page incident response engagements for Fortune 100 organisations, hunting adversaries across large data sets and conducting intrusion investigations under project leadership and outside counsel. Perform host and network forensics across Windows, Mac and Linux, and produce written and verbal findings for customers, regulators and legal counsel.
CrowdStrike Reading
A customer-facing technical role supporting the Value Selling sales play through TDDs, POVs, RFIs and RFPs, architecting and demonstrating complex security solutions. The position also involves competitive research, internal enablement sessions, technical documentation, and mentoring junior Sales Engineers, with a focus on the Falcon platform and incident response, forensics or security analytics.
Darktrace London
Deploy, integrate and optimise AI-driven cybersecurity across network, cloud, OT and email environments for post-sales customers. Handle deployment projects to SLOs, resolve support tickets and act as a trusted advisor on security infrastructure design, liaising with sales, customer success and operations.
Darktrace Cambridge
Owns the end-to-end roadmap for Darktrace's Network Detection and Response product, deciding what gets built and in what order. Works directly with customers running zero-trust, cloud-connected and segmented estates, partners with R&D on prioritisation and testing, and supports Product Marketing on launches and go-to-market. Acts as internal subject matter expert for the NDR portfolio.
Darktrace London
Owns the end-to-end roadmap for Darktrace's Network Detection and Response product, deciding what gets built and in what order. Works directly with customers running complex zero-trust, cloud-connected and segmented estates, translating their needs into product decisions alongside R&D and Product Marketing. Acts as the internal subject matter expert for the NDR portfolio, with a hybrid working pattern based in London.
Darktrace Cambridge
Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.
Darktrace Cambridge
Backend engineering role focused primarily on TypeScript, prototyping and building new features for AI-driven cybersecurity products. You'll work with a cross-functional team of engineers, designers and strategists, using Docker and cloud environments, with opportunities to specialise across languages like Python, Rust and C++. Hybrid, requiring at least two days a week in the Cambridge office.
Darktrace Cambridge
Contributes to security research projects spanning rapid prototyping and open-ended initiatives, with a focus on generative AI systems. Investigates attacker tradecraft such as prompt injection, poisoning and extraction attacks, and provides feedback to product, development and machine learning teams. Hybrid role requiring two days a week in the London or Cambridge office.
Darktrace London
Contributes to projects spanning rapid prototyping and open-ended research into generative AI security, investigating attacker tradecraft such as prompt injection, poisoning and extraction attacks. Acts as a domain expert, feeding insights back to product, development and machine learning teams, with coverage in network, endpoint, cloud or Kubernetes.
Darktrace Cambridge
Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.
Darktrace Cambridge
Owns prototyping and development of new ideas to improve Darktrace's cybersecurity services, balancing creativity with time constraints. Collaborates with a cross-functional team of engineers, designers and technical strategists on rapid prototyping and structured platform development, advancing methods for defending against unknown cyber-attacks. Requires production-quality Python coding, with Docker and containerisation experience and an interest in malware forensics.
CrowdStrike Pune, India
Supports integrations for Falcon modules, primarily NG-SIEM and Onum, partnering with a Product Manager, engineering, and business development across a team of ~30 engineers and 300+ growing integrations. Drives scheduling, scoping, and end-to-end execution of large-scale engineering projects, coordinating cross-functional teams across Europe, the UK, and the US.
CrowdStrike London
Owns the global product vision and multi-year strategy for CrowdStrike's Falcon Next-Gen SIEM platform, prioritising third-party data connectors and integration pipelines based on market research and customer demand. Works across engineering, data services, sales ops and partners to define ingestion SLOs, mentor product managers and expand the SIEM ecosystem.
