26 to 50 of 65 Security Operations Jobs in London

member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation … preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models for Mizuho information assets and services. Assess and recommend security controls during design and implementation of new projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration ...

months initially We are seeking an SC Cleared Lead AI Solutions Architect to lead the assessment and design of AI capabilities within a Cyber Security Operations Centre (SOC) environment. The role will focus on identifying high-value AI use cases, assessing technical feasibility, defining secure target architectures … solutions, with expertise in Generative AI, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and Agentic AI architectures . Strong understanding of Cyber Security Operations Centres (SOC) and associated technologies including SIEM, SOAR, EDR/XDR, threat intelligence, and security operations platforms . Extensive experience defining ...

Senior/Security Operations & Vulnerability Management Consultant Salary: Competitive Location: UK Remote/Hybrid with quarterly client travel About the Role We are seeking an experienced Security Operations and Vulnerability Management Consultant to join a growing cyber consultancy team click apply for full job details ...

Security Engineer (SOC/Data Engineering) £450 per day | Outside IR35 | 9-Month Contract | Active SC Clearance Required London (1 day per month onsite) A leading consultancy is seeking an experienced Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This … role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role As a Security Engineer, you will play a key role in designing ...

Specialist (SOC) Location: London (Onsite) Duration: 12 Months Inside IR35 The Opportunity We're seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and Incident Response support within a fast-paced cyber security environment. This role focuses on monitoring, investigating, and responding … cyber security threats across macOS endpoints, Linux cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities. Key Responsibilities Monitor and triage security alerts within a SOC environment. Investigate ...

days per week)/remote (Hybrid). Purpose of the role: We are seeking an experienced Cyber Engineering & Resilience to lead our Cyber Security Engineering and Resilience function. This role is accountable for the strategy, performance, and continuous improvement of security platforms, detection capabilities, automation, and resilience services … that protect critical business operations and support organisational objectives. You will drive the security and resilience roadmap, ensuring security controls, tooling, and services remain effective against an evolving threat landscape. What you'll do: Lead the Cyber Security Engineering & Resilience function, ensuring secure, reliable, and scalable ...

client is a global technology company. As a part of the Mandiants Security Transformation Services (STS) team, you will help organizations build an effective security operations program that minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining … experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant is seeking a Remediation Advisor with advanced communication, technical, and project management skills to guide ...

client is a global technology company. As a part of the Mandiant's Security Transformation Services (STS) team, you will help organizations build an effective security operations program that minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards … combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs. Mandiant is seeking a Remediation Advisor with advanced communication, technical, and project management skills to guide ...

Outside IR35 Contract Length: 6-month contract We're looking for an experienced Content Developer with hands-on ArcSight and/or Google SecOps experience to support a cybersecurity-focused project on an initial six-month contract. This is a remote opportunity for a technical professional with experience developing … migration of content between security platforms. Key Experience Hands-on experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security ...

Outside IR35 Contract Length: 6-month contract We're looking for an experienced Content Developer with hands-on ArcSight and/or Google SecOps experience to support a cybersecurity-focused project on an initial six-month contract. This is a remote opportunity for a technical professional with experience developing … migration of content between security platforms. Key Experience Hands-on experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security ...

months + +Inside IR35 +£60 - £70 ph +On site in London We are seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and incident response support across endpoint, cloud and application environments. The successful candidate will investigate and respond to cyber security threats, with a particular focus on macOS endpoints, Linux cloud workloads, microservices and containerised environments. You will work closely with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response capabilities. Key Responsibilities Monitor security alerts, perform triage and investigate ...

Cyber Security Operations Manager - London - £100-110k We are currently working with a global law firm that is actively recruiting for a Cyber Operations Manager to join them on a permanent basis. The role will be responsible for overseeing all of the firm's cyber function … including monitoring, engineering and security controls, ensuring the firm is well protected from potential security thr click apply for full job details ...

Title: Security Technical Analyst/Security Consulting Practitioner Location: London, Birmingham, or Sheffield (Hybrid: 3 days per week in-office) Contract Duration: 6 months About the Role We are seeking an experienced Security Consulting Practitioner to guide clients on their business protection journey by shaping security … support, perfect for a subject matter expert who excels at cross-functional collaboration and complex problem-solving. Key Responsibilities Strategy & Consulting: Develop and refine security strategies that align seamlessly with business objectives and emerging cyber threats. Solution Design & Implementation: Lead the design of innovative security solutions and provide ...

days Location - London We are looking to engage an experienced Microsoft Defender XDR specialist to design and deliver practical operational training for an internal security team. This is not necessarily a dedicated trainer position. We are open to speaking with experienced security practitioners who have significant hands … confidence and capability within the team, enabling them to manage day to day alerts, investigate incidents effectively and make informed decisions when handling potential security events. Desired outcome: The overarching goal is to provide the team with a solid understanding of the Defender portals and day to day operations. ...

services function that supports and contributes to the objective of the legal practice. The Technology department consists of service delivery, business systems, training, technical operations, security operations, legal products, engineering, eDiscovery and information security. The Technology department supports the business with strategic technology delivery. The department … standard operating procedures within the service desk knowledgebase. Ensure compliance with IT policies, processes, procedures, and best practices. Support continuous improvement of service desk operations by helping to identify recurring issues (Problems) and suggestion solutions/fixes. Advise and guide staff on new technology and IT procedures. Maintain ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce ...

Account Executive £85,000 + Double OTE Fully Remote (Client travel expected) About the Role We are working with an established cyber security business looking to appoint an experienced Managed Services Sales professional to drive continued commercial growth. This is an exciting opportunity for a commercially driven individual with … strong background in selling managed services, ideally within the cyber security or wider IT services market. The successful candidate will have a proven track record of winning new business, develop strategic client relationships and delivering significant financial results. Key Responsibilities New Business Development: Identify, engage and secure new customers ...

Birmingham (Hybrid) | 6 Months | Inside IR35 Our client, a leading technology organisation is looking for a Senior SIEM Engineer to support a large-scale security monitoring platform. Responsibilities: Develop and optimise SIEM solutions Build and manage log ingestion pipelines Enhance threat detection, alerts and dashboards Support platform automation … performance tuning Work closely with Security Operations teams Key Skills: SIEM Engineering/Security Monitoring Elasticsearch, Logstash, Kibana (ELK) Kafka Kubernetes Scripting & Automation Ansible, Helm, ArgoCD or GitLab CI/CD Strong troubleshooting and analytical skills Ideal for candidates from SIEM Engineer, Security Engineer, Detection Engineer ...

tasks Skills/Experience: Essential: Successful experience as a Product Manager, Solutions Architect or in a traditional Technical Pre-Sales role within the Cyber Security industry Strong knowledge of cyber security architectural principles such as defence in depth, resilience, and integrated security operations with the ability … apply security principles to systems and enterprise system designs Proficient in MS & Linux operating systems; good understanding of general operating system security practices, TCP/IP networking and network security concepts Ability to make decisions and resolve problems effectively Seek out information and data to evaluate, prioritize ...

technologies that drive modern organizations. Since 2011, our mission hasn’t changed we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this … cybersecurity starts with you. About the Role: CrowdStrike is looking for highly motivated, self-driven, technical analysts dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. Our CrowdStrike virtual security operations center offers opportunities to expand your ...

community. Please do not contact the recruiter directly. Profile Summary We are seeking an experienced PAM (Privileged Access Management) Engineer to join our Cyber Security team. The role will focus on the development, operating and continuously improving PAM capabilities across a Mizuho entities. The successful candidate will provide hands … privileged access controls, account onboarding, credential management, session monitoring, automation and platform resilience, while working closely with infrastructure, identity, application, database, audit and security teams. Duties and Responsibilities Develop, administer and support the Privileged Access Management platform. Manage the full PAM platform lifecycle, including design, implementation, upgrades, patching, configuration ...

regulated environment. You will be responsible for designing, developing and maintaining Python-based applications and shared libraries, with a strong focus on logging, observability, security, and AWS cloud services. Working closely with developers, Site Reliability Engineers (SREs), and Security Operations Centre (SOC) teams, you will help define … implement logging standards, improve monitoring capabilities, and ensure security events are captured and delivered effectively across enterprise platforms. Key Responsibilities Design, develop and maintain applications using Python and Django . Build and support shared Python libraries, ensuring appropriate versioning, testing and documentation. Implement structured logging and observability best practices ...

allowing them to focus on delivering their business goals instead of the underlying infrastructure. Why we need this role Colt is redefining its cyber security strategy and building an industry-leading incident response function that operates across every level of the organisation. This role is central to that purpose … following: Microsoft Defender, CrowdStrike, Sentinel One, Trend Vison One. Good understanding of SIEM tools with knowledge of one of the following: Splunk, Google SecOps or Sentinel. Broad technical knowledge of networks, operating systems, applications, identity and cloud environments, An in-depth understanding of common attacker techniques and demonstrated knowledge ...

Azure ecosystem both as a technical lead as well as a support specialist, with strong complementary skills. Primary Platform (Expert): Microsoft Azure o Identity & Security: Microsoft Entra ID (full suite including PIM/Conditional Access), Azure Key Vault, Azure Policy. o Security Operations: Microsoft Sentinel, Defender … Server, Active Directory, DNS, PKI, and core networking principles. Desirable Technical Skills Secondary Platform: Experience with Amazon Web Services (AWS) (VPC, EC2, S3, IAM, Security Groups). Data Platforms: Familiarity with Azure SQL, Azure Data Factory, or Power BI. Migration: Experience with Azure Migrate and database migration strategies. Linux ...