244 jobs for “Threat Intelligence Analyst”
CrowdStrike Ireland
Leads a team of three data scientists at the intersection of machine learning, big data and cybersecurity, setting technical standards and strategy for threat detection and agentic AI systems. Drives ML projects from research through production deployment, partnering with security research, engineering and product teams, while mentoring staff and contributing hands-on technical work.
CrowdStrike United Kingdom
Lead a team of data scientists applying machine learning, large language models and reverse engineering to cybersecurity problems at massive scale, handling trillions of events daily. The role blends technical leadership, roadmap planning and stakeholder alignment with hands-on work on malware detection and threat analysis.
Amazon Virtual Location - Uk
Leads complex security testing engagements end-to-end across interconnected AWS microservice architectures, performing penetration testing and AI-augmented source code review. Investigates high-consequence risk hypotheses to documented conclusions, builds reusable mechanisms like fuzzers and detection rules, and mentors engineers while setting the team's peer-review bar.
Appcastenterprise Lytham Saint Annes £60,000 pa
Conducts red team exercises, critical control testing, cyber hygiene assessments and penetration testing to validate security controls and SOC detection capabilities. Produces detailed vulnerability reports for internal resolver groups and briefs leadership on detection effectiveness. Requires hands-on infrastructure and web app testing with tools like Kali and Parrot across firewalls, IDS/IPS, Active Directory, cloud and networks.
eFinancialCareers London £80,000 – £100,000 pa
Defines and delivers secure architectures across enterprise IT and operational technology environments, working with technical and solution architects to embed security through the design lifecycle. Applies threat modelling, NIST/ISO/CIS frameworks and advises on protective monitoring, IAM and risk mitigation. Client-facing, requiring active SC clearance and strong stakeholder communication.
RiverSafe London
Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.
Entrust Newbury
Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.
Entrust Cambridge
Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.
HAYS Specialist Recruitment Birmingham £80,000 – £87,000 pa
Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.
Cambridge University Press & Assessment (CUPA) Cambridge £69,600 – £85,000 pa
Leads a global business continuity, crisis management and incident response programme across operations in over 170 countries, owning the BCR framework, business impact analysis, testing and assurance. Partners with senior leaders, IT disaster recovery, Group Security and local continuity leads to embed resilience in a federated, matrixed organisation.
Experis Shropshire £63,000 pa
An all-round Infrastructure Architect role within a government organisation's architecture team, providing strategic and technical leadership across a diverse estate spanning Azure cloud, SharePoint, Entra ID, virtualisation, networking and security. The position involves producing High Level Design and Technical Design Authority documentation and working with senior stakeholders to ensure secure, scalable solutions aligned to a long-term technology strategy, with a strong on-premises to Microsoft Cloud transformation focus.
Summer Browning Associates London
Lead enterprise cloud architecture across GCP and/or AWS, designing secure landing zones, IAM hierarchies and microservices, plus deterministic AI safety controls and perimeter defence. The role also covers systems integration, API layers and architectural governance, including Technical Design Authority approvals and NCSC-aligned assurance within UK central government.
airbus Newport
Hands-on role managing the full lifecycle of security incidents within an international CSIRT, investigating SOC alerts and performing host forensic analysis and reverse-engineering. You will industrialise SIEM and EDR tooling, build detection use cases and automated response workflows, and support SOC Level 1 and 2 processes, including on-call crisis response.
Mimecast London £80,000 – £120,000 pa
Hands-on engineering role embedded in the Incydr product team, working directly with customers on technical health checks, custom integrations and troubleshooting. You get full access to the codebase and deployment tooling to diagnose and ship fixes, using AI coding tools to build purpose-built scripts and integrations. Expect some travel to customer sites, with most engagement remote under a hybrid model.
Amazon London
Application security engineer role focused on security reviews, secure architecture design, threat modeling, and security guidance for internal development teams. Distinct for automating and enhancing security review processes using AI agents, LLMs, and generative AI tooling, alongside security metrics and training outreach.
