176 to 200 of 275 Security Operations Jobs in the UK

lead and execute the "defence in depth" strategy for one of the UK’s most iconic travel brands? If yes, our Head of Information Security, Risk & Compliance position might be the right next move for you. What’s it all about? Our Head of Information Security, Risk … Compliance is a senior leadership position within the IT Operations team. The primary mission is to reduce security risks through robust controls that align with Travelodge’s commercial strategy. Core responsibilities Strategic Leadership: Develop a continuously evolving security roadmap and "defence in depth" strategy; manage both internal ...

Response space. The Principal DFIR Consultant plays a pivotal role within the team of seasoned analysts, actively participating in the analysis and response to security incidents and events. With a focus on continuous learning and collaboration, Principal consultants are adaptable to most events in challenging and dynamic situations. Through … Maintaining composure and effectiveness in client incident‐management scenarios. Providing clients with high‐quality technical investigations. Collaborating in the identification, resolution, and documentation of security incidents. Conducting intelligence‐driven investigative analysis. The ability to discuss wider technology and security posture with a client ultimately to perform cyber threat ...

Council in London is seeking a Contract Senior Cybersecurity Engineer for 6 months. With the strategic deployment of an outsourced Security Operations Center (SOC) that leverages Splunk and CrowdStrike , the Senior Cyber Security Engineer role is a key addition to our team to maximise the timeline … investment. The ideal candidate will be a technical expert in CrowdStrike for endpoint protection and Splunk for security telemetry, capable of turning raw data into actionable intelligence. Key Responsibilities Endpoint Strategy: Lead the deployment, policy configuration, and maintenance of the CrowdStrike Falcon SIEM Mastery: Work with our SOC partner ...

Ready for your next move in cyber security? Join our fast-growing Security Operations Centre, where you’ll help defend multiple organisations across a wide range of industries – from critical infrastructure to complex enterprise environments. As part of our SOC team, you’ll play a key role … strengthening and maturing our services, helping deliver smart, efficient and high-impact security outcomes for our clients. You won’t just monitor alerts. You’ll investigate, enhance detection capability, influence processes and help shape how we defend modern environments. You’ll gain exposure to real-world threats, diverse technology ...

soft skills, have you got everything required to succeed in this opportunity Find out below. Top 3 skills needed for this role: Cloud Security Expertise Security Operations & Controls experience Threat & Vulnerability Management What this role is all about:We're xkybehq looking for a Senior Cloud Security ...

Sopra Steria, our Security Operations Centre (SOC) protects some of the UKs most critical organisations. As a SOC Engineer, youll make sure the right monitoring and protective tooling is in placeso our analysts can detect, investigate and respond at pace. Its a hands-on role with real impact … Site in Farnborough OR Hemel Hempstead. You do need to be eligible for SC Clearance. What you will be doing: Install, configure and support security monitoring tools feeding into the SOC Ensure tooling is operating effectively to protect client environments. Work with teams to assess risks, design controls ...

days hybrid post-conversion We’re supporting a leading global investment bank in hiring a Red Team Operator (AVP level) into a growing offensive security function. This is a contract-to-permanent opportunity offering the chance to work within a mature cyber security environment focused on adversary simulation … purple teaming, and enterprise-scale offensive security operations. The role combines hands-on red team delivery with strategic influence across security operations, detection engineering, and stakeholder engagement. The Role You’ll be responsible for planning and executing realistic adversary simulation exercises across complex enterprise environments, helping ...

Role As a Cyber Incident Response Analyst, you will be part of the Cyber Defence team that develops and oversees the company's security program, ensuring S&P Global is protected from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will … detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. While based in the UK, you will support response and intelligence needs globally. Candidates should have a genuine interest in cyber security and a strong grasp of attacker tactics, techniques ...

Head of AI Security - (UK homebased) We're excited to introduce a new leadership role: Head of AI Security. This is a strategic position within the Group CISO's Strategy function, with responsibility for Capita's AI security posture at a critical point of change in the threat … leadership across AI-enabled platforms and products - Partnering with AI technology leaders and Group CISO teams (policy, behaviour and culture, security management, and SecOps) - Engaging with Capita's AI Council and the wider business - Building a demonstrable and defensible AI security framework that builds internal and external trust ...

Purpose: You will lead the development and delivery of threat intelligence capabilities that directly support advanced offensive security services, including Red Team and Adversary Emulation engagements. Your mission is to identify, analyse, and translate real-world threat actor behaviour into actionable intelligence that enables realistic, threat-led security … testing and strengthens our clients’ resilience. You will ensure operational excellence and team readiness for all client engagements, working closely with internal teams (Offensive Security, CRS, and Sales) to deliver integrated cybersecurity solutions. This includes defining relevant threat scenarios, identifying priority targets, and mapping adversary Tactics, Techniques, and Procedures ...

Security OT Engineer Rate: £500 - £550 Inside IR35 Duration: 6 months Location: South West (Bristol) - 2 days per week onsite The Role: We're hiring an experienced Security OT Engineer to support the protection and evolution of complex Operational Technology (OT) and industrial control system environments. This role … sits within a Security Operations function but is heavily engineering focused, combini... LFWQ1_UKTJ ...

Provide recommendations for stage gating and go live decisions Own completion and accuracy of all security related product delivery evidence Provide recommendations for SecOps processes and automation for new systems Technical scope Security products (email filtering, AV, firewalls, WAFs, MS Defender) Security Testing (SAST, DAST) Virtualisation platforms … through security aspects of project start to finish Ability to share knowledge and experience with colleagues and effectively hand over to SecOps Desirable Skills Experience with MS Dynamics, Power Platform and Azure Experience managing independent testing (scope, pre-test config, triage findings) Experience with MCSE Certified or equivalent experience ...

Provide recommendations for stage gating and go live decisions Own completion and accuracy of all security related product delivery evidence Provide recommendations for SecOps processes and automation for new systems Technical scope Security products (email filtering, AV, firewalls, WAFs, MS Defender) Security Testing (SAST, DAST) Virtualisation platforms … through security aspects of project start to finish Ability to share knowledge and experience with colleagues and effectively hand over to SecOps Desirable Skills Experience with MS Dynamics, Power Platform and Azure Experience managing independent testing (scope, pre-test config, triage findings) Experience with MCSE Certified or equivalent experience ...

Provide recommendations for stage gating and go live decisions Own completion and accuracy of all security related product delivery evidence Provide recommendations for SecOps processes and automation for new systems Technical scope Security products (email filtering, AV, firewalls, WAFs, MS Defender) Security Testing (SAST, DAST) Virtualisation platforms … through security aspects of project start to finish Ability to share knowledge and experience with colleagues and effectively hand over to SecOps Desirable Skills Experience with MS Dynamics, Power Platform and Azure Experience managing independent testing (scope, pre-test config, triage findings) Experience with MCSE Certified or equivalent experience ...

Provide recommendations for stage gating and go live decisions Own completion and accuracy of all security related product delivery evidence Provide recommendations for SecOps processes and automation for new systems Technical scope Security products (email filtering, AV, firewalls, WAFs, MS Defender) Security Testing (SAST, DAST) Virtualisation platforms … through security aspects of project start to finish Ability to share knowledge and experience with colleagues and effectively hand over to SecOps Desirable Skills Experience with MS Dynamics, Power Platform and Azure Experience managing independent testing (scope, pre-test config, triage findings) Experience with MCSE Certified or equivalent experience ...

days on-site) Join our Cyber Defence Centre (CDC) as a SOC Analyst. This is a crucial hands-on operational role within Security Operations, focused on incident detection, investigation, and response. You will play a pivotal role in ensuring effective monitoring, triage, and response to security events … Technical Skills: Experience with SIEM platforms (e.g., Microsoft Sentinel). Experience with EDR/XDR tools (e.g., CrowdStrike). ServiceNow or similar ITSM/SecOps platforms. Ability to write and optimise KQL queries (essential). Knowledge of scripting/query languages (e.g., Falcon Query Language) is advantageous. Analytical Capability: Strong ...

days on-site) Join our Cyber Defence Centre (CDC) as a SOC Analyst. This is a crucial hands-on operational role within Security Operations, focused on incident detection, investigation, and response. You will play a pivotal role in ensuring effective monitoring, triage, and response to security events … Technical Skills: Experience with SIEM platforms (e.g., Microsoft Sentinel). Experience with EDR/XDR tools (e.g., CrowdStrike). ServiceNow or similar ITSM/SecOps platforms. Ability to write and optimise KQL queries (essential). Knowledge of scripting/query languages (e.g., Falcon Query Language) is advantageous. Analytical Capability: Strong ...

protection integrations within platforms, applications, and business solutions. Influence tooling decisions through risk-based requirements, not operational ownership of underlying cloud or infrastructure services. Security-by-Design & Platform Integration Embed security-by-design principles for data protection into the application and platform lifecycle, including requirements for data handling … Infrastructure, and IT teams to ensure data protection controls are designed into platforms, not bolted on post-deployment. Incident Support & Risk Management Partner with Security Operations and Incident Response teams to support detection, investigation, and response to data protection incidents and policy violations. Ensure data protection capabilities align ...

Engineer Milton Keynes We are seeking a hands-on SOC Engineer with strong SIEM and security monitoring experience to join a fast-paced Cyber Security Operations Centre. This role requires both soft and technical skills, focused on the engineering, optimisation, and support of SOC tooling, telemetry … detection capabilities to improve threat visibility and incident response across hybrid environments. Key Responsibilities Operate, support, and tune SIEM and security monitoring platforms, including Graylog and Splunk. Maintain and optimise log ingestion pipelines across multiple data sources. Develop and refine detection rules, alerts, dashboards, and SOC playbooks. Support incident ...

part of an exciting digital transformation, the University of Surrey is seeking a Cyber Security Continuous Improvement Manager. In this senior role, you will shape and strengthen the University's cyber resilience, ensuring our security capabilities, controls and behaviours continuously evolve in response to an ever changing threat … adapts to cyber risk-using data, intelligence and sector best practice to guide decision making. The post leads our shift from reactive to proactive security, driving behavioural and cultural change across the institution and embedding clear accountability for cyber risk. Beyond formal project delivery, you will oversee continuous improvement ...

practices are developed and maintained driving a culture of cyber safe service excellence Take responsibility for cyber defence systems to ensure alignment to security governance Develop and manage excellent service delivery, working with all teams across IT to maintain customer satisfaction Work with Director of IT Operations, IT Infrastructure Manager and Head of Cyber Security to develop relationships with internal stakeholders Take pro-active ownership of the Cyber Defence strategy, working closely with the internal stakeholders to create, align and execute for: Penetration Testing Security Operations Centre Management Endpoint Detection and Response Security ...

required £700 per day outside IR35 The SOC Lead - Threat Hunting & Investigations is responsible for leading advanced threat detection, proactive threat hunting, and complex security investigations across the enterprise. This role focuses on identifying unknown threats, coordinating deep-dive investigations, and elevating the maturity of SOC investigative and hunting … intelligence into actionable hunt hypotheses Continuously refine detection logic based on hunt outcomes and emerging threats Investigations & Incident Response Lead complex and high-severity security investigations from triage through containment and remediation Act as the technical escalation point for advanced SOC investigations Conduct root cause analysis and attacker kill ...

Cyber Security Analyst Location: London (Remote) Reporting to: Director of Cybersecurity Operations Employment Type: Permanent | Exempt The Opportunity We are working with a leading international law firm to recruit a Cybersecurity Analyst to join its Cybersecurity Operations Group. This role plays a critical part in protecting … complex global technology environment through continuous monitoring, threat detection, and incident response. The successful candidate will work closely with security and IT stakeholders, contributing to the organisation’s defensive capabilities while remaining at the forefront of the evolving threat landscape. Key Responsibilities Monitor and analyse security events across ...

this evolution BCHG is seeking to appoint a Head of IT & Digital to provide strategic leadership for technology, digital transformation, cyber resilience, IT operations, and organisational digital capability. Client Details Purpose of the role Michael Page are proud to partnering with the Black Country Housing group to support … this evolution BCHG is seeking to appoint a Head of IT & Digital to provide strategic leadership for technology, digital transformation, cyber resilience, IT operations, and organisational digital capability. You will be pivotal in ensuring BCHG's technology direction, digital roadmap, cyber maturity and major systems align with organisational priorities. ...

QRadar SME/Consultant Role: QRadar Subject-Matter-Expert/QRadar Consultant Specialism(s) : IBM QRadar, SIEM, Log Source Analysis, Detection/Security Engineering, Upgrading & Patching, Tuning, Security Frameworks Type: Contract, Daily Rate Pay Rate: DoE Start: Mid-End May 2026 Location: Remote/Midlands Duration: 3 Months … ensuring the platform is maintained and upgraded in line with best practices. You’ll act as a subject matter expert, working closely with security operations and engineering teams to ensure the solution is effective, resilient, and aligned with evolving threat landscapes. Key Responsibilities Conduct a comprehensive review ...