1 to 25 of 170 Threat Detection Jobs in London

Role: Threat Hunting & Detection AnalystLocation: Cheltenham (hybrid- 1x a month office attendance)Position: Specialist/Senior AnalystPlease Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days … About the team: As a member of the SOC Content Team, you will be responsible for contributing to the creation, deployment, and tuning of threat detection content and delivery of proactive threat hunting. You will work in close partnership with client Lead Analysts, threat intelligence teams ...

Description Job Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. We build, tune, and maintain the detection content that security operation teams depend on, and hunt proactively for threats that … existing controls do not catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, and document the intent, data source, and expected ...

Lead Threat Detection Engineer| London | Up to £120k + Bonus I'm working with a leading global fintech on a senior hire into a newly established security function. This is a hands-on role for someone who wants to go beyond responding to alerts and take real ownership … threat detection and intelligence is built, automated and improved across a large-scale, multi-cloud environment. You’ll be joining at a point where the core security tooling is already in place, but there’s significant scope to define what best-in-class looks like. What ...

financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment. Permanent (£70k - £80k) London/Hybrid Must have UK citizenship …/ILR Visa/EU settled status Key Responsibilities Threat Modelling & Security Engineering Develop and maintain threat models for business-critical systems and services. Assess security risks and recommend controls during project design and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. ...

learn more. ð Powering Real Work As a Security Operations Engineer at TravelPerk, you will be responsible for designing, implementing, and maintaining advanced threat detection solutions. Collaborating with the TechOps/IT team and various engineering squads at TravelPerk, you will ensure robust security measures are applied … threats and possess strong technical expertise in security operations, this is an exciting opportunity to make a significant impact. What you'll do: Enhance threat detection & response by designing, implementing, and optimizing security tools, detection mechanisms, and secure configurations to identify and mitigate cybersecurity threats. Develop ...

shaping the future of fintech – and we're just getting started. The roleYou will own and evolve the company's threat detection and threat-hunting capability. This role defines what "good" looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security. … This is not an alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation. You will partner closely with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership ...

Threat Detection EngineerMillennium SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is a highly technical role, and successful candidates will have demonstrable knowledge and experience across a range of business … within a fast-paced, innovative organization. Principal ResponsibilitiesThreat Hunting – The ability to leverage multiple data sources to identify modern evolving threats and develop new detection and response approaches. Detection Engineering – Creation and operation of high-fidelity detections mechanisms that drive efficient, effective and repeatable response. Playbook Creation ...

Orbis Group is seeking a Lead Threat Detection Engineer in London to own and evolve our threat detection lifecycle across a multi-cloud environment. You will build and refine SIEM detections, automate response, and work with engineering to turn findings into scalable security improvements. The role … emphasizes hands-on threat hunting, threat intelligence, and clear ownership of security outcomes in a fintech-oriented landscape, with a base salary up to £120k plus bonus. #J-18808-Ljbffr ...

this role is Identity and Access Management. You will advise clients on applying AI to modernise IAM — including intelligent access governance, anomalous behaviour detection, AI-driven privileged access controls, and identity threat detection and response (ITDR) — and on securing the identities within AI systems themselves, including machine … directly with clients to identify, shape, and qualify opportunities across AI-driven security and the security of AI systemsArchitect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modellingDefine security architectures for AI pipelines, data platforms, model ...

this role is Identity and Access Management. You will advise clients on applying AI to modernise IAM - including intelligent access governance, anomalous behaviour detection, AI-driven privileged access controls, and identity threat detection and response (ITDR) - and on securing the identities within AI systems themselves, including machine … with clients to identify, shape, and qualify opportunities across AI-driven security and the security of AI systems Architect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modelling Define security architectures for AI pipelines, data platforms ...

Deception Engineering) working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands‐on Defender XDR mastery ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

carbon, sustainable future. This role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals … operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience ...

Security Researcher (AI & Detection Engineering) Location: London (Hybrid) Salary: £70,000-£90,000 + bonus + benefits We're partnering with one of the UK's most innovative cyber security organisations as they expand their research capabilities at the intersection of AI, Security Research and Detection Engineering. … help explore how emerging AI technologies can be leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling ...

Security Researcher (AI & Detection Engineering) Please double check you have the right level of experience and qualifications by reading the full overview of this opportunity below. Location: London (Hybrid) Salary: £70,000-£90,000 + bonus + benefits We're partnering with one of the UK's most innovative … cyber security organisations as they expand their research capabilities at the intersection of AI, Security Research and Detection Engineering. You'll help explore how emerging AI technologies can be leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher ...

Security Researcher (AI & Detection Engineering) Location: London (Hybrid) Salary: £70,000-£90,000 bonus benefits We're partnering with one of the UK's most innovative cyber security organisations as they expand their research capabilities at the intersection of AI, Security Research and Detection Engineering. … opening, and what is expected from applicants, by reading the below. You'll help explore how emerging AI technologies can be leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends ...

Security Operations Lead Threat Detection & Response London | Hybrid | Up to £80k + excellent benefits Im working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber … ensuring the organisation is prepared to respond effectively to cyber incidents. The ideal candidate will have: Experience leading or managing a SOC, Security Operations, Detection & Response or Incident Response function Strong knowledge of security monitoring, alert triage, investigations and incident response Experience with technologies such as SIEM, SOAR ...

central function employing people, process and technology to continuously monitor and respond to cyber-security incidents. Security Operations spans multiple domains including cyber threat intelligence, cyber threat detection, data loss prevention and cyber incident response. This role sits within the Cyber Threat Intelligence (CTI) team, helping … assessments that support security decision-making. The role provides the opportunity to work across tactical, operational and strategic intelligence, supporting activities including adversary tracking, threat hunting, detection engineering, vulnerability management and incident response. Key ResponsibilitiesResearch, analyse and assess cyber threats relevant to LSEG, its customers, people, technology ...

Conditional Access and administrative boundaries Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures Establish requirements for logging, monitoring, alerting, threat detection and incident response Review technical architectures and solution designs for security weaknesses, gaps and dependencies Assess migration strategies and cutover approaches from … readiness and production transition Align designs with security policies, information-security standards, data-protection obligations and regulatory requirements Maintain HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records Provide risk-based security recommendations to programme leadership and senior stakeholders Support continuous improvement ...

Security Operations Lead - Threat Detection & Response London Hybrid Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team click apply for full ...

risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Role Summary The Senior Cyber Analyst … senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation. Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security ...

respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible … operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring ...