26 to 50 of 84 Threat Detection Jobs in London

some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait.This architecture is not greenfield. It carries two decades of accumulated … this role. The expectation is fluency and daily practice, not passing familiarity.The ECS DomainECS covers the following product and capability areas:Email threat detection and preventionEmail security efficacyCollaboration securityDMARC analyzerData platform and observabilityAnalysis and ResponseEnd user application integrationInternal operations enablementWhat You Will DoLead from Problem Space, Not Solution ...

market plan for AWS quantum, cryptography, and cybersecurity services across UK Public Sector — identifying the highest-value use cases in areas such as threat detection, zero-trust architecture, cryptographic modernisation, post-quantum migration planning, secure patient data, citizen data protection, and research data security- Apply value-based selling … modernisation and post-quantum readiness, then jump to a call with an NHS trust's IT security lead exploring how AWS can strengthen their threat detection and data protection posture. Afternoons could see you building a business case with your Solutions Architect for a quantum-safe pilot with ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Security Copilot.The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

automation making that coverage possible. We are looking for a Software Development Engineer to support the building and operating of the platforms that onboard threat detection, remediate security risk, and accelerate security response across every AWS account.AWS Security, Epoxy builds a collection of automation platforms for AWS Security. … enable threat detection across a large fleet of AWS accounts (onboarding coverage, auditing it continuously, and making findings available to partner teams), we help partner teams remediate detected risks and respond to incidents automatically at scale, and we run the foundational services (communications, workflow orchestration, data enrichment ...

talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The Threat and Vulnerability Management Team Lead is responsible for defining, developing, and leading the strategic direction for safeguarding the organisation’s infrastructure and applications. This … Service Management across EMEA Bank, International Securities, and the 15+ countries in which these entities operate. The position is responsible for leading the Threat and Vulnerability Management function, including oversight of an outsourced offshore third-party service.This function integrates secure practices into the development lifecycle and aligns with service ...

role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI.This is a technically demanding role that combines proactive security ownership with infrastructure delivery. The successful candidate will … defensive capabilities.This role is office-based and requires five days per week on-site presence.Key ResponsibilitiesLead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-endMonitor, triage, and respond to security events across the environment, including log analysis, anomaly detection ...

unauthorised access events.Monitor, analyse, and respond to alerts from client security platforms (MDR/XDR, SentinelOne, Huntress, Fortinet, Mimecast, Avanan, Defender) to ensure rapid threat mitigation.Conduct vulnerability assessments, risk analyses and security audits across client environments, providing actionable recommendations and remediation guidance.Implement and maintain security hardening across infrastructure, cloud … alignment with best practices and frameworks such as ISO27001, NIST, and Cyber Essentials Plus.Lead and coordinate incident response efforts, including root cause analysis, threat containment and post-incident reporting for clients.Collaborate with the Project and Service Desk teams to embed security into deployments, migrations, upgrades, and automation workflows, ensuring ...

This is an excellent opportunity for a strategic cyber security leader to take ownership of a mature Security Operations Centre, driving continuous improvement, enhancing threat detection capabilities and leading a high-performing security team. About the Role As the SOC Manager, you will be responsible for leading … Security Operations Centre, ensuring effective security monitoring, incident response and threat intelligence capabilities while shaping the future direction of the SOC. Working closely with internal stakeholders, external vendors and managed security service providers (MSSPs), you will play a key role in strengthening the organisation's cyber resilience. Essential Experience ...

security operations across the firm's global technology estate. The successful candidate should have practical experience working with modern enterprise security platforms covering endpoint detection and response, extended detection and response, cloud security, threat monitoring, behavioural analytics and vulnerability management, and be comfortable engaging with IT teams … analysis and proportionate remediation.Support incident response activities, including containment, eradication, recovery, evidence preservation and clear documentation of findings and actions.Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting.Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate with ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency.You will work alongside Accenture's CrowdStrike Business Group … security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementProven experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group … customer capacity Minimum 2 years experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Minimum 2 years experience with enterprise security architectures, including identity infrastructure, cloud environments ...

scalable, and resilient. Splunk Engineering & Security Monitoring Develop and maintain security monitoring capabilities using Splunk. Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility. Support log ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve ...

security risks across its external ecosystem, including third party vendors, clients and key partners.The role will lead a specialist team focused on the proactive detection, analysis and investigation of cyber security incidents impacting the Bank’s third party ecosystem. The successful candidate will help strengthen the Bank’s ability … role offers significant visibility, senior stakeholder engagement and the opportunity to lead a team of four direct reports while supporting the Bank’s broader threat-led, risk-focused and intelligence-enabled approach to third party security risk management.Key ResponsibilitiesLead and mature the Bank’s third party incident investigations ...

risks across its external ecosystem, including third party vendors, clients and key partners. The role will lead a specialist team focused on the proactive detection, analysis and investigation of cyber security incidents impacting the Bank's third party ecosystem. The successful candidate will help strengthen the Bank's ability … role offers significant visibility, senior stakeholder engagement and the opportunity to lead a team of four direct reports while supporting the Bank's broader threat-led, risk-focused and intelligence-enabled approach to third party security risk management. Key Responsibilities Lead and mature the Bank's third party incident ...

using tools such as Wiz, Microsoft Defender, and ArmorCode.Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure.Conduct security assessments and threat modelling exercises for new projects and technologies.Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements.Produce reports and metrics demonstrating … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and Experience: Essential Microsoft Entra ID/Identity ...

Lead or support incident response activities in line with internal policies and procedures. Escalate significant incidents appropriately and provide clear, timely updates to stakeholders. Threat Detection & Prevention Proactively identify emerging threats, vulnerabilities, and attack patterns affecting the organisation. Tune and optimise security tools to reduce false positives … improve detection accuracy. Implement, manage, and maintain endpoint protection and security policies. Support vulnerability management activities, including remediation planning and risk tracking. Security Operations & Continuous Improvement Maintain and enhance security monitoring rules, alerts, and dashboards. Contribute to the development and maintenance of security runbooks and incident response playbooks. Support ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.Job Responsibilities:Design, scale ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies. Job Responsibilities: Design, scale ...

effectiveness across the environment.This role is responsible for monitoring and responding to security alerts, performing assigned operational tasks, and optimizing security tooling to improve detection quality and reduce false positives. The position operates within a centralized global security function and collaborates across regions to ensure consistent handling of security … predominantly Windows‐based and cloud‐hosted ecosystems, with experience applying Zero Trust security principles across identity, endpoint, and access domains.Demonstrated experience in incident response, threat detection, vulnerability management, and securing workloads operating at enterprise scale.Strong ability to analyze, prioritize, and respond to security alerts and vulnerabilities within ...

leading Financial Services client in the City of London is looking for a Senior Cyber Threat & Vulnerability Manager to lead its cyber threat, vulnerability, penetration testing and exposure management capabilities. This is a senior, hands-on role within the CISO function, focused on identifying and responding to emerging … business. The role offers a base of circa £110,000 + excellent benefits with very flexible working. Key Responsibilities Lead the end-to-end Threat, Vulnerability and Exposure Management function. Drive the prioritisation and remediation of high and critical vulnerabilities, including zero-day and actively exploited threats. Own penetration ...

correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting as the senior escalation point … incident response simulations What we're looking for We're particularly interested in candidates with: 5–10 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...

Azure Key Vault.· Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring, and threat detection across structured and unstructured environments.· Understanding of data privacy regulations (e.g., GDPR, CCPA), data governance frameworks, and emerging trends in data security. ...

correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting as the senior escalation point … incident response simulations What we're looking for We're particularly interested in candidates with: 510 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...