Job Search

We are seeking a Senior Threat Analyst to strengthen our cyber security capability and provide expert insight into evolving threats. In this role, you will monitor, investigate and assess malicious activity across a complex technology environment, helping to protect critical systems, information and services. You will work closely with security operations, incident response, infrastructure and risk teams to identify emerging threats and support effective, proportionate responses.

Your responsibilities will include analysing security alerts, threat intelligence and indicators of compromise; conducting in-depth investigations into suspected attacks; and producing clear assessments of threat actors, tactics, techniques and procedures. You will develop and maintain detection content, contribute to threat-hunting activities, and recommend improvements to monitoring and defensive controls. You will also support incident response by providing timely analysis, documenting findings and communicating risks to both technical and non-technical stakeholders.

The role will involve tracking developments in the threat landscape, assessing their potential impact and helping to prioritise protective measures. You may contribute to intelligence requirements, tabletop exercises, post-incident reviews and the development of playbooks, standards and operating procedures. You will be expected to promote good security practice, challenge assumptions constructively and share knowledge with colleagues through briefings, reports and mentoring.

Applicants should have substantial experience in cyber threat analysis, security operations, incident investigation or a related discipline. You will have strong knowledge of networking, operating systems, cloud technologies, malware, attack frameworks and common defensive tools. Experience with SIEM, EDR, threat intelligence platforms, scripting or automation would be highly advantageous. Relevant professional certifications or equivalent practical experience are welcomed.

You should be analytical, inquisitive and able to make sound decisions under pressure. Excellent written and verbal communication skills are essential, as is the ability to explain complex technical issues clearly. A collaborative approach, strong attention to detail and a commitment to continuous learning are also required. This is an opportunity to play a key role in improving resilience against sophisticated and fast-changing cyber threats.

We are seeking a Vulnerability Management Engineer to help identify, assess and reduce security vulnerabilities across a complex technology estate. You will work closely with infrastructure, cloud, application and development teams to ensure vulnerabilities are managed consistently, prioritised according to risk and remediated within agreed timescales.

In this role, you will operate and maintain vulnerability scanning platforms, configure authenticated and unauthenticated scans, review results and investigate false positives. You will analyse findings from infrastructure, applications, operating systems, cloud services and network devices, translating technical information into clear, actionable remediation guidance for technical and non-technical stakeholders.

Your responsibilities will include maintaining vulnerability inventories, producing regular management reports and dashboards, tracking remediation activity, supporting risk acceptance processes and escalating overdue or high-risk issues. You will help define vulnerability management standards, improve scanning coverage and contribute to the development of metrics, service-level agreements and operating procedures.

You will also support the assessment of emerging threats, validate remediation through re-scanning and collaborate with security operations and incident response teams where vulnerabilities present an immediate risk. The role may involve contributing to penetration testing coordination, patch management governance, security tooling improvements and audit or regulatory requirements.

We are looking for experience in vulnerability management, security operations, infrastructure security or a related discipline. You should have practical knowledge of vulnerability scanning tools and common standards such as CVSS, CWE, OWASP and the NIST Cybersecurity Framework. Experience across Windows and Linux environments, cloud platforms, networking, databases and web applications would be advantageous.

You will need strong analytical and problem-solving skills, attention to detail and the ability to manage competing priorities. Excellent written and verbal communication is essential, along with the confidence to challenge constructively and build effective relationships across technical teams. Relevant security certifications, such as Security+, CEH, OSCP or equivalent experience, are desirable.

We are seeking a Cyber Threat Adversary Analyst to assess, interpret and communicate the activities, capabilities and intentions of cyber threat actors. You will help strengthen organisational resilience by turning complex intelligence into clear, actionable insight for technical teams, security leaders and wider stakeholders.

In this role, you will conduct research into emerging threats, adversary groups, campaigns, malware, vulnerabilities and attack techniques. You will analyse information from open-source intelligence, commercial feeds, internal telemetry, incident data and trusted industry sources. Your work will include identifying trends, assessing relevance and credibility, developing threat profiles, and maintaining accurate intelligence records.

You will map adversary behaviours to recognised frameworks such as MITRE ATT&CK and produce intelligence reports, briefings, alerts and assessments tailored to different audiences. You will support the development of detection and prevention measures by translating intelligence into indicators of compromise, detection opportunities, hunt hypotheses and recommendations for security controls. You may also contribute to incident investigations, threat hunting, tabletop exercises and assessments of organisational exposure.

The successful candidate will have experience in cyber threat intelligence, security operations, digital investigations, incident response or a related discipline. You will be confident analysing technical and non-technical information, connecting disparate findings and explaining their significance clearly. Knowledge of threat actor tactics, techniques and procedures, intrusion analysis, malware behaviours and intelligence lifecycle practices is essential.

Strong written and verbal communication skills are required, along with sound judgement, curiosity and attention to detail. You should be comfortable working independently while collaborating with security engineers, incident responders, risk specialists and business stakeholders. Experience with intelligence platforms, security information and event management tools, scripting or data analysis would be advantageous.

This is an opportunity to influence cyber defence strategy and help anticipate hostile activity in a fast-changing threat landscape. Candidates must be willing to maintain professional knowledge, handle sensitive information responsibly and work flexibly when emerging threats or major incidents require an accelerated response.

We are seeking a Threat Detection Engineer to design, develop and maintain effective security detections across a complex technology environment. You will work as part of a collaborative cyber security function, helping to identify suspicious activity, reduce exposure to emerging threats and improve the organisation’s ability to detect and respond to incidents.

Your responsibilities will include creating and tuning detection rules across SIEM, endpoint, cloud and network security platforms. You will investigate alerts, assess their relevance and accuracy, and use threat intelligence, adversary techniques and incident findings to improve detection coverage. You will also support the development of use cases aligned to recognised frameworks such as MITRE ATT&CK, while helping to reduce false positives and improve alert triage and prioritisation.

You will collaborate closely with incident responders, security operations analysts, infrastructure teams and software engineers to understand technical environments and identify opportunities for improved monitoring. The role will involve analysing logs and telemetry, conducting proactive threat hunts, documenting detection logic and contributing to incident investigations and post-event reviews. You may also help automate investigative workflows and produce meaningful metrics on detection performance and operational effectiveness.

The successful candidate will have experience in threat detection, security engineering, security operations or a related discipline. You should be comfortable working with SIEM technologies, endpoint detection and response tools, cloud platforms and security data pipelines. Strong analytical and problem-solving skills are essential, along with practical knowledge of networking, operating systems, authentication, scripting and common attack techniques. Experience with languages such as Python, PowerShell or Kusto Query Language would be advantageous.

You will be curious, methodical and able to communicate technical findings clearly to both technical and non-technical audiences. Relevant professional certifications or demonstrable equivalent experience are welcome. This is an opportunity to influence detection strategy, strengthen defensive capabilities and contribute to a proactive, intelligence-led security culture.

We are seeking a Threat Detection Engineer to strengthen the organisation’s ability to identify, investigate and respond to cyber threats. You will design, develop and maintain detection capabilities across cloud, on-premises and endpoint environments, helping to protect critical systems, applications and data.

In this role, you will create and tune detection rules using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and cloud security platforms. You will analyse logs and telemetry, develop queries and correlation logic, and reduce false positives while ensuring genuine threats are identified quickly. You will also contribute to threat hunting activities based on current intelligence, emerging attack techniques and observed adversary behaviour.

You will work closely with security operations, incident response, infrastructure, engineering and risk teams to investigate suspicious activity and improve detection coverage. Responsibilities will include assessing alerts, supporting incident investigations, documenting technical findings, conducting root-cause analysis and recommending improvements to monitoring and response processes. You will help map detections to recognised frameworks such as MITRE ATT&CK and maintain clear, accurate technical documentation.

The successful candidate will have experience in threat detection, security monitoring, threat hunting, incident response or a closely related discipline. You should be confident working with SIEM and EDR technologies, writing queries in languages such as Kusto Query Language (KQL), SPL or SQL, and interpreting logs from operating systems, networks, applications and cloud services. Knowledge of common attack methods, intrusion techniques, vulnerabilities and indicators of compromise is essential.

Strong analytical and problem-solving skills are required, along with the ability to communicate technical issues clearly to both specialist and non-specialist audiences. Experience with automation, scripting in Python or PowerShell, detection-as-code practices and cloud platforms would be advantageous. Relevant professional certifications or demonstrable practical experience are welcome.

This is an opportunity to make a direct contribution to cyber resilience, continuously improve defensive capabilities and help shape a proactive, intelligence-led security function.

We are seeking an experienced Cyber Security Threat Hunting Principal to lead proactive efforts to identify, investigate and disrupt sophisticated cyber threats. This is a senior technical role for an accomplished security professional who can combine deep threat-hunting expertise with strategic thinking, clear communication and strong stakeholder management.

You will develop and mature threat-hunting capabilities across a complex technology environment, using intelligence-led techniques to uncover previously unknown or active threats. Your responsibilities will include creating and refining hunting hypotheses, analysing endpoint, network, identity and cloud telemetry, and conducting detailed investigations into suspicious activity. You will lead the development of repeatable detection content, playbooks and operating procedures, ensuring findings are translated into measurable improvements in security monitoring and incident response.

The role will involve working closely with security operations, incident response, threat intelligence, engineering and technology teams. You will provide technical leadership during complex investigations, support the assessment of emerging threats and vulnerabilities, and contribute to purple-team exercises and adversary emulation activities. You will also mentor other analysts, promote consistent analytical standards and help shape the future direction of the threat-hunting function.

Applicants should have substantial experience in cyber security, including hands-on threat hunting, digital forensics, detection engineering or incident response. You will need strong knowledge of attacker tactics, techniques and procedures, with practical experience using frameworks such as MITRE ATT&CK. Experience with SIEM, EDR, network monitoring, cloud security and security automation tools is essential, alongside the ability to investigate using scripting or query languages such as Python, PowerShell, KQL or SPL.

We are looking for someone who can explain complex technical findings to both specialist and non-specialist audiences, challenge assumptions constructively and make sound decisions under pressure. Relevant professional certifications or equivalent practical experience are desirable. This is an opportunity to influence security strategy, tackle meaningful and evolving threats, and help build a resilient, intelligence-led cyber security capability.

We are seeking a Threat Investigator – EMEA to identify, assess and respond to cyber security threats affecting people, systems and data across the region. This role will investigate suspicious activity, support incident response and help strengthen the organisation’s ability to detect and manage emerging threats.

You will monitor and analyse security alerts, log data, endpoint activity, network traffic and threat intelligence to determine the nature, scope and potential impact of incidents. Working with colleagues across security, technology, risk and business teams, you will lead investigations from initial triage through to containment, remediation and closure. You will also maintain clear, accurate records and produce concise reports for technical and non-technical stakeholders.

Key responsibilities will include investigating phishing, malware, account compromise, insider threat and other security events; correlating intelligence from multiple sources; identifying indicators of compromise; supporting forensic analysis; and recommending practical improvements to security controls and response procedures. You will contribute to threat hunting, develop detection logic and playbooks, and help identify trends that could improve preventative measures. The role may require participation in an out-of-hours on-call or escalation rota.

The successful candidate will have experience in cyber security investigations, security operations or incident response, with a sound understanding of common attack techniques, vulnerabilities and defensive controls. You should be comfortable analysing logs and alerts using SIEM, EDR or related security tooling, and able to use threat intelligence frameworks such as MITRE ATT&CK. Experience with scripting, digital forensics, cloud environments or malware analysis would be advantageous.

Strong analytical, written and verbal communication skills are essential, along with the ability to prioritise effectively in a fast-moving environment. You will be confident working independently while collaborating across international teams and time zones. Relevant professional certifications or equivalent practical experience are welcomed. The role is suitable for an investigator who is curious, methodical and committed to continuous learning.

We are seeking an experienced Cyber Threat Intelligence (CTI) Lead to provide strategic direction and operational leadership across the organisation’s threat intelligence capability. This is a senior role for an established cyber security professional who can translate complex threat information into clear, actionable insight for technical teams, senior stakeholders and business leaders. You will help strengthen the organisation’s understanding of the evolving threat landscape and support informed decisions relating to cyber risk, resilience and investment.

You will lead the development and delivery of the CTI strategy, including the collection, analysis and dissemination of intelligence from open-source, commercial, technical and classified sources where appropriate. Responsibilities will include overseeing the production of strategic, operational and tactical intelligence; identifying threat actors, campaigns, vulnerabilities and emerging risks; and providing timely assessments to support incident response, threat hunting, vulnerability management and security operations. You will establish effective intelligence requirements, develop reporting standards and metrics, and ensure intelligence is relevant, accurate and delivered to the right audience. The role will also involve managing relationships with internal teams, industry peers, intelligence providers and relevant external partners, as well as coaching and developing members of the team.

Applicants should have significant experience in cyber threat intelligence, cyber security or a closely related discipline, with a strong understanding of intelligence lifecycle principles, threat modelling and the tactics, techniques and procedures used by sophisticated threat actors. You will be confident analysing disparate information, assessing confidence and impact, and communicating complex findings concisely to both technical and non-technical audiences. Experience of leading teams or programmes, influencing senior stakeholders and operating in a regulated or complex environment is essential. Knowledge of frameworks such as MITRE ATT&CK, experience with intelligence platforms and analytical tooling, and relevant professional qualifications would be advantageous. A collaborative leadership style, sound judgement, curiosity and a commitment to continuous improvement are also important.

An exciting opportunity is available for a Cyber Threat Intelligence (CTI) Lead at Senior Manager level to shape and lead an enterprise-wide threat intelligence capability. You will provide strategic direction, translating complex cyber threat information into clear, actionable insight for senior stakeholders, security teams and business leaders. Working across intelligence, cyber security, technology, risk and operational functions, you will help strengthen resilience against evolving threats and ensure intelligence directly informs security strategy, investment and decision-making.

Key responsibilities will include setting the CTI strategy, operating model and roadmap; leading the collection, analysis and dissemination of strategic, operational and tactical intelligence; and overseeing the production of timely assessments, threat briefings, trend analysis and executive reporting. You will develop trusted relationships with internal stakeholders, industry peers, government bodies and external intelligence partners, while identifying emerging threats, adversary behaviours and vulnerabilities relevant to the organisation. The role will also involve guiding threat hunting, incident response and cyber risk teams, improving intelligence requirements and processes, and establishing meaningful performance measures. You will lead, coach and develop a high-performing team, promoting collaboration, knowledge sharing and continuous improvement.

You will bring significant experience in cyber threat intelligence, threat analysis or a closely related discipline, together with a strong understanding of the threat landscape, intelligence lifecycle and recognised frameworks such as MITRE ATT&CK, the Cyber Kill Chain and intelligence tradecraft. Experience of leading teams and influencing at executive level is essential, as is the ability to communicate complex technical issues clearly to both technical and non-technical audiences. A strategic mindset, sound judgement, strong analytical capability and a pragmatic, delivery-focused approach are required. Experience within a regulated, multinational or highly complex environment, alongside relevant professional qualifications or certifications, would be advantageous.

We are seeking a Cyber Threat Intelligence (CTI) Lead – Senior Manager to establish and advance an organisation-wide capability for identifying, assessing and communicating cyber threats. This senior role will provide strategic direction across the CTI function, ensuring intelligence is relevant, timely and actionable for security operations, technology teams, business leaders and risk stakeholders. You will lead the development of intelligence priorities, collection strategies, analytical frameworks and reporting standards, while translating complex threat activity into clear recommendations that support informed decision-making.

Key responsibilities will include managing and mentoring a team of threat intelligence professionals; overseeing the production of strategic, operational and tactical intelligence; and coordinating assessments of threat actors, campaigns, vulnerabilities and emerging attack techniques. You will build effective relationships with internal stakeholders and trusted external partners, contribute to incident response and crisis management, and support purple teaming, threat hunting and detection engineering activities. The role will also involve enhancing intelligence platforms, defining performance measures, maintaining governance and ensuring that intelligence outputs are aligned with organisational risk and resilience objectives.

You will bring substantial experience in cyber threat intelligence, cyber security analysis or a closely related discipline, together with a proven track record of leading teams and influencing senior stakeholders. Strong knowledge of the threat landscape, intelligence lifecycle, analytical methodologies, adversary tactics and techniques, and relevant frameworks such as MITRE ATT&CK is essential. Experience working across strategic and operational environments, handling sensitive information and presenting concise conclusions to executive audiences is highly desirable. Excellent communication, judgement, prioritisation and people leadership skills are required, alongside the ability to operate effectively in a changing and high-pressure environment. Relevant professional certifications or formal qualifications in cyber security, intelligence or information technology would be advantageous.