1 to 25 of 84 Threat Detection Jobs in London

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.As … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting.This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits.You will be responsible for:Designing and implementing threat ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact … detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale.This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits.Why This Role is ExcitingHigh autonomy: Lead projects from idea to deploymentInnovation-driven: Develop cutting-edge detections beyond standard ...

data. As a Security Operations Engineer, you'll primarily working on monitoring, investigating and responding to security events while helping to strengthen our detection and response capabilities through continuous engineering and automation improvements.Working closely with Security, Engineering and Technology teams, you'll combine operational analysis with hands-on engineering … using Splunk, automation and AI to improve threat detection, streamline investigations and enhance our overall security posture. You'll optimise our security tooling, improve detection capabilities and support incident response across the business through threat hunting, continuous improvement and meaningful reporting that enables informed security decisions. ...

clients protect critical services, systems, and data against evolving cyber threats. The successful candidates will play a key role in security monitoring, incident response, detection engineering, and threat analysis, working alongside Security Operations, Threat Intelligence, and Incident Response teams. You will act as a cyber security subject … matter expert, helping to strengthen defensive capabilities while contributing to the continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud ...

learn more. ð Powering Real Work As a Security Operations Engineer at TravelPerk, you will be responsible for designing, implementing, and maintaining advanced threat detection solutions. Collaborating with the TechOps/IT team and various engineering squads at TravelPerk, you will ensure robust security measures are applied … emerging threats and possess strong technical expertise in security operations, this is an exciting opportunity to make a significant impact.What you’ll do:Enhance threat detection & response by designing, implementing, and optimizing security tools, detection mechanisms, and secure configurations to identify and mitigate cybersecurity threats.Develop and optimize ...

shaping the future of fintech – and we’re just getting started.The roleYou will own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security.This … alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation.You will partner closely with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership of the most complex ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … Mizuho information assets and services. Assess and recommend security controls during design and implementation of new projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with ...

Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing environments. … This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat Intelligence ...

Threat Detection EngineerMillennium SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is a highly technical role, and successful candidates will have demonstrable knowledge and experience across a range of business … technologies within a fast-paced, innovative organization.Principal ResponsibilitiesThreat Hunting – The ability to leverage multiple data sources to identify modern evolving threats and develop new detection and response approaches.Detection Engineering – Creation and operation of high-fidelity detections mechanisms that drive efficient, effective and repeatable response.Playbook Creation – Own, operate and automate ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

informed, risk‐based decisions during security incidents, prioritising alerts, coordinating containment actions, and recommending remediation strategies. They would be expected to deliver infrastructure hardening, threat detection, vulnerability management and supports Microsoft 365 security improvements. The successful candidate will be part of the wider infrastructure team and work closely … with development teams, clients, risk and compliance to drive security automation, threat detection, incident response, and risk reduction across the enterprise platform stack.Key ResponsibilitiesSecurity Leadership & Team Management: Lead a team of engineers, setting direction, managing workloads, and developing capability. Act as the primary security escalation point across ...

respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible … operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring ...

Analyst to monitor cyber risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally. You will be responsible for threat detection, investigation, and incident response, leveraging a modern security technology stack with a strong focus on the Microsoft Defender ecosystem. Working across multiple … security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ATT&CK, Cyber Kill Chain) and available security platforms to identify and mitigate emerging threats Assess ...

Security Engineering and Security Operations across IAG Group and our operating companies. You'll combine technical expertise with operational leadership to improve monitoring, strengthen threat detection, optimise security tooling and lead the response to security incidents.This is a hands-on role where you'll have genuine influence over … lead the continual improvement of our Security Operations capability, working closely with Security Engineering, technology teams and third-party partners to strengthen monitoring, detection and incident response across the business.You'll own the end-to-end incident management lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons learned ...

Sports. It is a program leadership role responsible for embedding security into how products are designed, built, and shipped — and for owning the full threat detection and incident response pipeline end-to-end.The Director sets direction for a global team spanning secure development lifecycle, security architecture, threat … across multiple regions and time zones.Set team objectives aligned to functional and company-level OKRs. Own delivery against them.Product SecurityDrive shift-left security — embed threat modelling, secure design review, and SDL practices into the development lifecycle.Own the security architecture direction, including zero trust principles and secure design patterns.Own vulnerability ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives.Key ResponsibilitiesLead and manage the Cyber Defence function, overseeing … security operations, threat intelligence, vulnerability management, and incident response capabilities.Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats.Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents.Oversee threat intelligence programmes, identifying emerging risks and implementing ...

Charlotte, Jacksonville, and Atlanta, among other locations globally. For more information, please visit . OVERVIEW Executive level position reporting to the Director of Cyber Threat Management & Incident Response, this is a hands-on senior security position working within the Information Security group and with the internal IT department. This … ensure consistent, measurable end to end triage and closure of security related events. The successful candidate will work to assess, develop, and deploy detection capabilities and processes ensuring enterprise systems and data are protected, serving as the Incident Response Lead for European and Pacific regions of the organisation. ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, driving operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security.As a Blockchain Security Operations Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding the organization … secure digital environment and driving continuous improvement in the firm.Job responsibilitiesExecute and influence the design of comprehensive security strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from cybersecurity threatsProactively monitor and analyze complex on-chain ...

Director, R&D, Email & Collaboration Threat Protection About MimecastMimecast is a leading cybersecurity company that helps organizations protect their people, data, and communications from today's most sophisticated threats. With over 42,000 customers worldwide, we analyze more than 18 billion security events daily to stop attacks before they … both an organization's greatest asset and its most significant security vulnerability. Our platform addresses the human element of cybersecurity by combining advanced threat detection, awareness training, and Incydr risk management to reduce the likelihood and impact of human-caused security incidents.AI-First Engineering at MimecastMimecast ...

leading cyber incidents operationally, technically and commercially from end-to-end.You will act as a senior technical subject matter expert across incident response, detection engineering, cloud security and vulnerability management, while also providing calm, structured leadership during high-pressure situations.The environment is heavily Microsoft-focused, with particular emphasis … secure-by-design principlesDetection engineering and automationThreat and vulnerability managementYou will work closely with global technology and cyber teams to continuously improve monitoring, detection, response and remediation capabilities across hybrid cloud and on-premise environments.Key ResponsibilitiesIncident Response & Major Incident ManagementLead the end-to-end management of cyber security incidents ...

Engineer to join their Global Cyber Security Defence team. This role offers the opportunity to contribute to the optimisation and strategic development of the threat detection and engineering tools. You will also have the chance to lead a global team of 5 Analysts based in India, Japan ...

everything we build. You'll be at the forefront of protecting mission-critical workloads for millions of customers worldwide, leveraging technologies like AI-driven threat detection, real-time anomaly identification, and automated response systems. You'll work with industry-leading services like Amazon GuardDuty and AWS Security … suite and VP-level stakeholders (CIO, CISO, CTO)- • Strong knowledge of cybersecurity frameworks and technologies (e.g., NIST, Zero Trust, SIEM, EDR, MDR, IAM, threat detection, data protection)Preferred qualification - • Experience working in a matrix/overlay sales model, influencing strategy and collaborating cross-functionally with Solutions Architects, engineering ...