76 to 100 of 153 Threat Detection Jobs in England

dynamic team in Manchester as a Cyber Security Specialist, where you will be responsible for delivering a comprehensive range of security services. This includes detection and response services, vulnerability scanning, dark web monitoring, social engineering assessments, and detailed reporting. Your primary objective will be to maintain and enhance … scalable security tooling and integrations using DevOps practices (CI/CD, Infrastructure as Code).Contribute to the operationalization of AI-driven capabilities to enhance threat detection and response.Collaborate with internal and external stakeholders to resolve security incidents and ensure vulnerability compliance.Strive for customer satisfaction while continuously seeking ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.Job Responsibilities:Design, scale ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies. Job Responsibilities: Design, scale ...

effectiveness across the environment.This role is responsible for monitoring and responding to security alerts, performing assigned operational tasks, and optimizing security tooling to improve detection quality and reduce false positives. The position operates within a centralized global security function and collaborates across regions to ensure consistent handling of security … predominantly Windows‐based and cloud‐hosted ecosystems, with experience applying Zero Trust security principles across identity, endpoint, and access domains.Demonstrated experience in incident response, threat detection, vulnerability management, and securing workloads operating at enterprise scale.Strong ability to analyze, prioritize, and respond to security alerts and vulnerabilities within ...

procedures.The Successful ApplicantPrevious experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.Experience investigating security incidents … activities.Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies.Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.Experience securing cloud-based and enterprise collaboration environments.Familiarity with cyber threat intelligence and attack frameworks such ...

Cyber Security Operations Manager to lead our in-house Security Operations capability while remaining deeply involved in the day-to-day technical aspects of detection, response and continuous improvement. This role is ideal for someone moving from a Senior SOC Analyst, Senior Security Engineer or SOC Team Lead position … small SOC team while remaining an active technical contributor. Investigating and responding to security incidents across enterprise, cloud and operational technology environments. Improving detection capabilities, automation and SOC processes to stay ahead of emerging threats. Working closely with vulnerability management, incident response and governance teams to strengthen the organisation ...

leading Financial Services client in the City of London is looking for a Senior Cyber Threat & Vulnerability Manager to lead its cyber threat, vulnerability, penetration testing and exposure management capabilities. This is a senior, hands-on role within the CISO function, focused on identifying and responding to emerging … business. The role offers a base of circa £110,000 + excellent benefits with very flexible working. Key Responsibilities Lead the end-to-end Threat, Vulnerability and Exposure Management function. Drive the prioritisation and remediation of high and critical vulnerabilities, including zero-day and actively exploited threats. Own penetration ...

correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting as the senior escalation point … incident response simulations What we're looking for We're particularly interested in candidates with: 5–10 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...

Azure Key Vault.· Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring, and threat detection across structured and unstructured environments.· Understanding of data privacy regulations (e.g., GDPR, CCPA), data governance frameworks, and emerging trends in data security. ...

correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting as the senior escalation point … incident response simulations What we're looking for We're particularly interested in candidates with: 510 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...

Security Monitoring Advisory:Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero ...

Security Monitoring Advisory:Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero ...

governance, and IT operations sit at the heart of that ambition.What you will be doingSecurity architecture and engineering– Define security architecture standards and lead threat modelling across the organisation– Establish and maintain long-term security architecture aligned to business strategy and regulatory requirements– Guide technology decisions at an enterprise … level, including cloud strategy and zero trust adoption– Oversee penetration testing, DLP, and advanced threat detection programmes.– Own the vulnerability management programme– Implement enterprise frameworks including IAM, SIEM, and data classification.– Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision– Lead Security ...

. The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated workflows, and help shape the future direction … telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point for complex security engineering issues. Mentor SOC analysts and engineers. Improve detection, response and operational processes through automation. Maintain engineering documentation, standards and best practices. Skills & Experience 3-5+ years' experience within ...

security incidentsPerform vulnerability assessments and remediation trackingSupport implementation of security controls across cloud and on-prem environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering … GSEC, or ISC2 certificationsExperience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google CloudScripting experience (PowerShell, Python, or Bash)Exposure to threat hunting or SIEM rule developmentWhat's On OfferSalary up to 55,000 depending on experienceOpportunity to work with modern security tools and technologiesTraining ...

protected with the security controls and tools required to meet policy and compliance requirements.We are looking for candidates who have a passion for cybersecurity, threat detection, risk mitigation, and response. You will be a key part of our efforts to build and support a defensible environment where … output to enhance security processes in support of those workflowsCoordinate, across service owners, the implementation of core security integrations (SSO, Event Logs, Secrets, Alerting, Threat Model and Backup/Recovery) with applications developed in-house and externally/SaaS hosted environmentsEnsure the security considerations identified are implemented and solutions ...

government and public sector services.What you will do as a Senior Application EngineerSupport, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and responseDeliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.Contribute to application architecture … vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active Directory, identity platforms)Exposure to DevOps/CI-CD practicesExperience working in secure ...

better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house developers and providing some advice on SDLC security Performing vulnerability scanning … What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDR and MDR. Knowledge of how to integrate security into project lifecycles Effective communication skills, with the ability ...

hybrid environmentsdeveloping, implementing and maintaining cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials)overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plansrisk management and compliance, ensuring compliance with various standards and frameworksAbout youApplicants for the Cyber Security Engineer ...

emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline ...

Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP).Develop and implement security monitoring and logging strategies.Investigate and analyse security incidents, including identifying root causes, determining … ability to obtain, a Developed Vetting (DV) UK security clearance.Preferred qualifications:Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP).Experience with Kubernetes threat detection and anomaly detection.Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity.Experience in detection engineering, logging pipeline development, or SIEM tuning ...