1 to 25 of 33 Intrusion Detection Jobs in the UK

CrowdStrike Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence … support ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

multiple customer accounts. Establish and maintain boundary service quality standards and operational procedures. Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection. Architect boundary security solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content … protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post ...

Implementation: Implement and enforce network security best practices, including networkaccess control lists (NACLs), security groups, cloud firewalls (AWS WAF,GCP Firewall Rules), and network intrusion detection/prevention systems.Ensure compliance with Citi's policies, industry standards, and regulatoryrequirements. Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimizationacross hybrid … specific certifications (e.g.,AWS Certified Advanced Networking - Specialty, Google Cloud ProfessionalNetwork Engineer). Experience with network security tools such as WAF, DDoSprotection, and network intrusion detection/prevention systems. Familiarity with network virtualization and software-definednetworking (SDN) concepts. Experience with container networking (e.g., Kubernetes CNI,service mesh). ...

scripting a plus Multi‐Vendor Exposure - Cisco Advanced Security Appliances, Palo Alto Next‐Generation Firewalls, Prisma Access, Cisco Firepower, Checkpoint Firewalls, Cisco Switches, and Intrusion Detection/Intrusion Prevention Systems Skilled in engaging executive‐level stakeholders with clear technical communication Proven track record of effectively communicating technical ...

governance processes, audit requirements, and regulatory controls. Experience working within ITIL-aligned Incident, Problem, Change, and Service Management frameworks. Knowledge of network access controls, intrusion prevention systems (IPS), intrusion detection systems (IDS), DDoS protection, and secure web gateway technologies. Security Automation & Engineering Experience automating network security processes ...

solutions aligned with security and operational requirements Design network resilience, failover and disaster recovery capabilities Security & Compliance Integration Architect network security controls including firewalls, intrusion detection/prevention and advanced threat protection Design network segmentation and access control frameworks aligned with MOD Classification Guides Ensure network designs comply ...

Security Operations Centre (SOC) or enterprise security operations environment. Proven hands-on experience administering and optimising enterprise security technologies, including SIEM platforms, Endpoint Detection & Response (EDR), Secure Web Gateways, Email Security solutions, and Cloud Security platforms. Strong understanding of security operations, with experience in incident response, threat detection, investigation, and remediation. Solid knowledge of network security principles, including firewalls, intrusion detection and prevention systems (IDS/IPS), TCP/IP, routing, switching, and packet analysis. Experience identifying, assessing, and mitigating security risks through vulnerability management, security assessments, and penetration testing. Ability to investigate and troubleshoot ...

guidance on information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage … vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related to information security. Monitor security alerts, logs, and reports ...

obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM … emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. ...

experience designing, implementing, and supporting enterprise network environments. Strong expertise in network security, including firewalls, segmentation, encryption (IPsec/TLS), secure remote access, and intrusion detection/prevention systems. Deep knowledge of routing and switching technologies (e.g., Cisco, Aruba, Juniper, Meraki). Solid understanding of core networking protocols ...

Security Operations Centre (SOC). In this contract role, you will lead a team of 8+ security professionals, drive the department's threat detection and response strategy, and act as the principal escalation point for critical incidents. You will also oversee managed service providers (MSSPs) to ensure strict adherence … Profession career framework. Incident Response: Lead end-to-end incident triage, containment, escalation, and post-incident reviews. Security Operations and SIEM: Oversee SIEM operations, intrusion detection, rule tuning, and proactive threat-hunting capabilities. Threat Intelligence: Analyze OSINT and commercial threat intelligence to mitigate organizational risks. Vendor and Stakeholder ...

Extensive experience in cyber security management within defence, aerospace, or government environments. Strong knowledge of classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence-specific ...

Extensive experience in cyber security management within defence, aerospace, or government environments. Strong knowledge of classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence‐specific ...

cyber security management within defence, aerospace, or government environments. Required: Strong knowledge of classified information handling and secure communication protocols. Required: Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Required: Proven track record of leading incident response in high-security environments. Required: Familiarity with defence ...

driven Technical skills: Extensive knowledge of SIEM, EDR, Web Gateway, Email Gateway, Cloud Security, operating systems, network protocols and packet analysis tools, firewall and intrusion detection/prevention systems, TCP/IP, computer networking, routing and switching, penetration and vulnerability testing, scripting such as Python or PowerShell Certifications ...

emphasis on Kubernetes-based environments. You'll be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. This is a hands-on, engineering-centric role that requires deep technical expertise in cloud environments, Kubernetes … security, and platform automation. Responsibilities Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes ...

encryption, authentication and access control technologies Understanding of security frameworks and compliance standards including ISO 27001 and GDPR Experience with SIEM technologies, firewalls or intrusion detection systems CyberArk Delivery Engineer (CDE) certification desirable TO BE CONSIDERED Please either apply through this advert or emailing me directly ...

live environments is highly desirable. Experience in deploying and supporting cyber security tooling such as security monitoring solutions (SIEM/logging platforms), network intrusion detection systems (IDS) and endpoint protection/EDR solutions. Knowledge of networking and infrastructure e.g. network architectures, firewalls and network segmentation. Knowledge of cyber ...

Bounty Program handling Knowledge of network operations or engineering or system administration on Unix, Linux, MAC (Message Authentication Code), or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, Penetration Testing, Web Application assessment, Secure Coding practices, Cloud Technologies. Preferred Qualifications Professional security certifications such ...

teamwork skills. Desirable C programming skills for low-level or performance-critical development. Experience with containerisation (Docker, Kubernetes). Familiarity with endpoint security, intrusion detection, or system hardening. Contributions to Linux or open-source projects. Experience with debugging, profiling, or performance optimisation tools. Why Join Us: Shape ...

communication and teamwork skills. C programming skills for low-level or performance-critical development. Experience with containerisation (Docker, Kubernetes). Familiarity with endpoint security, intrusion detection, or system hardening. Contributions to Linux or open-source projects. Experience with debugging, profiling, or performance optimisation tools. Why Join Us? Shape ...

them Serving as the senior escalation point for network incidents, including those affecting remote locations Hardening the environment through VLAN design, firewall rule management, intrusion detection and a rigorous patching regime Producing and maintaining clear network diagrams, IP records and configuration documentation Supporting the wider infrastructure when required ...