244 jobs for “Threat Intelligence Analyst”
CrowdStrike Spain
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows using SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.
CrowdStrike United Kingdom
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python and Logscale, partnering with product and engineering teams to turn raw security data into actionable insights and KPIs.
Sophos United Kingdom
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
Sophos United Kingdom
Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.
Experis London £500 pd
Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.
NCC Group Manchester
Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.
Commercial Ltd Kings Hill £54,500 – £55,000 pa
Monitor, triage and investigate security alerts, incidents and requests, managing records through to closure and coordinating recovery. Use tools such as Tenable and Darktrace across cloud and wider IT infrastructure, supporting vulnerability management, threat intelligence and malware analysis, with on-call backup for emergency response.
Michael Page Liverpool £60,000 – £65,000 pa
Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.
DCV Technologies Royal Leamington Spa £550 – £650 pd
Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.
Barclays Knutsford
Ten-week summer internship in Barclays' Chief Security Office, working alongside experts to reduce risk, protect customers and improve security delivery. Interns collaborate with cross-functional teams on real projects, gaining exposure to threat intelligence, controls and secure engineering while building technical skills.
Randstad Technologies Recruitment Birmingham £300 – £400 pd
Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.
Barclays Knutsford
Two-year graduate programme in Barclays' Chief Security Office, working across cyber and security teams to reduce risk and protect customers. You'll complete three eight-month rotations with bespoke training, learning how technology, controls, threat intelligence and secure engineering combine to keep services resilient.
Pertemps Thames Water Reading £50,000 pa
Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.
Darktrace Cambridge
Join a global team developing and improving threat detection capabilities across key product areas. You'll respond to customer incidents, analyse cyber threat intelligence, and build detection schemes aligned to adversary techniques, collaborating with Development, Security Research and SOC teams.
Palo Alto Networks London
Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.
