151 to 175 of 312 Threat Detection Jobs in England

Understanding of Responsible AI, security, governance and risk management principles. Excellent stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure ...

detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously monitor … also get involved in projects that enhance the capability of our services and ensure we are providing cutting-edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting-edge technology, malware analysis, recommending detections and getting involved in strategic cross-team ...

Create runbooks, decision trees, and architectural standards that allow teams to move fast while staying secure Infrastructure Security Implementation: Implement and manage firewalls, intrusion detection/prevention, DDoS mitigation, and threat monitoring across network layers Establish secure supply chain practices for infrastructure: vendor management, procurement policy, and third … network engineering, infrastructure architecture, or systems engineering roles Proven hands-on with enterprise network security: firewall architecture (Palo Alto, Fortinet, Cisco ASA), network segmentation, threat detection, compliance Strong understanding of DevSecOps principles and how to embed security into CI/CD and infrastructure-as-code workflows Proven experience ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security requirements … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

Smiths Detection , a global leader in threat detection and screening technologies for aviation, ports & borders, defense, and urban security. Our expertise is spread across 5 R&D centers, 21 Global Offices and 7 Manufacturing Sites with 3000 brilliant minds globally contributing for over 40 years … frontline which enables us to deliver the solutions needed to protect our society from any threat and illegal passage of explosives, prohibited weapons, contraband, toxic chemicals, and narcotics. Every minute of every day, our technology and talented team members help to make the world a safer place - https:/ ...

effectiveness across the environment.This role is responsible for monitoring and responding to security alerts, performing assigned operational tasks, and optimizing security tooling to improve detection quality and reduce false positives. The position operates within a centralized global security function and collaborates across regions to ensure consistent handling of security … technologies including Microsoft Defender, Zscaler, SIEM platforms (e.g. Google SecOps), and identity platforms (e.g. Azure/Entra, Okta).Hands on experience in incident response, threat detection, and vulnerability management within an enterprise environment.* Strong ability to analyze, prioritize, and respond to security alerts and vulnerabilities within the context ...

complex environments, identify material risks, diagnose issues and drive cross-functional resolution. Working knowledge of Zero Trust, least privilege, secure by design, vulnerability management, threat detection, incident response, security posture management and data loss prevention. Executive presence with the ability to connect technical performance to client trust, service ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

assess complex environments, identify material risks, diagnose issues and drive cross-functional resolution.Working knowledge of Zero Trust, least privilege, secure by design, vulnerability management, threat detection, incident response, security posture management and data loss prevention.Executive presence with the ability to connect technical performance to client trust, service resilience ...

Acting as a senior point of contact on days, supporting junior analysts during investigations. Contributing to the improvement of SOC playbooks, processes, documentation, and detection use cases. Helping identify ways to improve workflows and strengthen SOC operations. Reviewing KPIs and trends to support service improvement initiatives. Staying … date with the latest cyber threats, threat actors, and attack techniques relevant to our customers. Taking part in ongoing learning, knowledge sharing, and technical development opportunities. What Were Looking For A good understanding of networking fundamentals, including IP addressing, protocols, and traffic flows. Experience working with Windows and Linux ...

authentication, multi-factor authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier … following areas: Network security: Secure network design, segmentation, firewalls, remote access and secure connectivity. Infrastructure and endpoint security: Server hardening, endpoint protection, endpoint detection and response, and patch management. Cloud and SaaS security: Secure cloud configurations, configuration management and cloud service protection. Identity and access management: Directory services, multi ...

governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design).Relevant certifications such … CCNP Level, Expert Level PreferredPalo Alto Firewalls – Specialist Level, Architect Level PreferredCisco Layer 2 Port SecurityNetwork Access Control including Cisco ISE, TACACS etcNetwork Detection and ResponseNetwork Encryption (Site to Site VPN's)Cisco Secure Client (ASA)Network IPS (Trellix)Network Zero Day (Trellix NX or similar)Host Zero ...

analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark etc.). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti-virus, vulnerability management, and encryption. Ability to think critically under pressure ...

Security Monitoring Advisory:Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero ...

Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud. Offer guidance on improving threat detection, monitoring, and response for cloud-based resources. Access Control & Conditional Access: Assess and improve Conditional Access policies and identity management strategies, enforcing ...

Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud. Offer guidance on improving threat detection, monitoring, and response for cloud-based resources. Access Control & Conditional Access: Assess and improve Conditional Access policies and identity management strategies, enforcing ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience working ...

join a collaborative cyber security team where you'll lead complex investigations, strengthen security controls and influence how we defend against an evolving threat landscape. You'll work across cloud, identity, endpoint, network and data security while partnering with technical and business teams to continuously improve our security capability. … have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. Vulnerability Management ...

with customersHands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etcExperience with open source collections (Telegraf, FluentBit, FluentD, Open Telemetry, etc.) (preferred)Experience ...

customers Hands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etc Experience with open source collections (Telegraf, FluentBit, FluentD, Open Telemetry, etc.) (preferred ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...