1 to 25 of 167 Cyberattack Jobs in the UK

query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong ...

industry standards (e.g., ISO 27001, NIST, GDPR) Assist clients in incident response and remediation efforts in the event of a security breach or cyber attack Collaborate with clients’ IT teams and stakeholders to ensure the successful implementation and maintenance of cyber security measures Stay updated on emerging threats, trends ...

Energy, Resources & Industrials, and others, you will drive the development of reference architectures that keep critical services running and recoverable in the face of cyber attack and disruption — spanning on-premises, hybrid and multi-cloud service providers. This role sits at the intersection of cloud architecture, cyber security and operational ...

collecting and analysing evidence from Windows, Linux, and macOS systems, as well as mobile devices, servers, and cloud environments. Knowledge of incident response methodologies, cyberattack techniques, threat actors, malware behaviour, and digital artefact analysis. Understanding of networking fundamentals, including TCP/IP, routing, subnetting, network architecture, and common network protocols. ...

problem-solving skills with the ability to make sound decisions in fast-moving and ambiguous situations. Technology Intelligence: Deep understanding of attacker behaviours, cyber attack lifecycles, emerging threats and modern cyber defence approaches. Collaboration: Experience providing technical leadership, mentoring and guidance while working effectively across technical and business teams. Stakeholder ...

fundamentals, including identity and access management, endpoint and network security, vulnerability management, incident response, backup and recovery, and business resilience. Good understanding of common cyberattack methods, how threats can affect organisations and the security controls that help mitigate them. Experience leading client meetings, workshops, presentations or advisory engagements, including communicating ...

equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity ...

query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong ...

query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong ...

query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong ...

query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong ...

Information Event Monitoring Tools and/or Network Packet Capture tools. IDS/IPS technologies and threat hunting activities. Strong analytical mind-set. Defensive Cyber-attack methodologies and frameworks. Understanding of Malware capabilities, attack vectors, propagation and impact. Good communication skills liaising with the business and suppliers. ...

vulnerability assessment software and prioritizing results using a combination of various frameworks tied to internal objects (CVE, CVSS, EPSS, etc.). Knowledge of common cyber‐attack types such as DDoS, SQLi, XSS, and others. This experience is relied upon to make rational decisions in our baselines program. Previous experience assessing ...

purpose of this role is to deliver our offensive security services including digital footprint reconnaissance, social engineering, vulnerability assessments, penetration testing, threat modelling, cyber-attack simulation exercises, and more to high profile clients across all industries. You’ll benefit from ongoing coaching, career mentoring, and be supported by our career ...

through monitoring, detection and standardisation of security practices. You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment ...

enabling clients to swiftly and effectively return to business following a cyber-attack. As a global market leader in ransomware post-breach remediation and cyber-attack first response, we consistently deliver results that exceed market standards for handling cyber-extortion and ransomware events. Our team collaborates with prominent global insurance ...

The London Stock Exchange Group is seeking a Senior Attack Monitoring Analyst to join the Global Security Operations Centre (GSOC). The role focuses on identifying and responding to cyber security incidents and enhancing defensive ...

Successful Applicant Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation and hands-on remediation Exposure of detection engineering ...

procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation and hands-on remediation Exposure of detection engineering ...

return to business rapidly, the right way, following a cyber-attack. We are a global market leader in ransomware post-breach remediation and cyber-attack first response. We deliver results that far surpass market statistics for cyber-extortion and ransomware events. Our team of cybersecurity professionals works with prominent global ...

operational environments. Previous experience working in a regulated business environment. experience with cloud-native application protection platforms (CNAPP). experience with exposure management and cyber attack surface management, including external attack management and vulnerability management. experience implementing Identity Governance and Administration (IGA) tools. Why Work Here? You will join ...

operational environments. Previous experience working in a regulated business environment. experience with cloud-native application protection platforms (CNAPP). experience with exposure management and cyber attack surface management, including external attack management and vulnerability management. experience implementing Identity Governance and Administration (IGA) tools. Why Work Here? You will join ...

thrilling journey, you'll become a proud member of Hack The Box, with the ultimate mission to help cybersecurity professionals and organizations enhance their cyber-attack readiness. Get ready for an exciting adventure into the world of cybersecurity! The core mission of the Growth Marketing Specialist Drive net-new user ...

borough that is greener, safer and fairer for all. In this role, you’ll need a true “we’re all in” mindset. Following a cyber‐attack in November 2025, we are actively strengthening our approach to effective, efficient and resident‐focused technology delivery, and this role is at the heart ...

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Our mission is to improve and safeguard ...