1 to 25 of 28 Threat Detection Jobs in the North of England

Profession Framework.The Lead Cyber Detect and Respond Analyst will lead the proactive monitoring, analysis, and response to security events and incidents, ensuring the effective detection and mitigation of cyber threats to the Ministry of Justice (MoJ). The lead analyst develops and refines detection and response procedures, mentors … EssentialExperience working in a Security Operations Centre (SOC) or similar cyber security role. Previous experience leading, coordinating, or supervising. Working understanding of cybersecurity operations, threat detection methodologies, and incident response processes. Strong experience in analysing and correlating logs (e.g., SIEM, XDR/EDR, cloud, network). Excellent analytical ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

influencing best practice, this role offers real scope to make an impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with infrastructure … aligned to business needs What we are looking for Proven experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such ...

influencing best practice, this role offers real scope to make an impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with infrastructure … aligned to business needs What we are looking for Proven experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such ...

technical, hands-on role where you'll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You'll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced … ahead of emerging threats, including AI and automated attack methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security ...

Your Role: As a Cyber Security Specialist, you will work within a multi-disciplinary security team delivering a broad range of services, including threat detection and response, vulnerability scanning, dark web monitoring, social engineering assessments, and security reporting. You will act as a technical escalation point for complex … diverse client base. The role also involves developing and maintaining security tooling and integrations, while supporting the adoption of AI-driven capabilities to improve threat detection and response. Working closely with internal teams and customers, you will ensure effective incident resolution and vulnerability compliance, while staying ...

Description:Job Title: Security Detection & Response II Corporate Title: Up to Vice President Location: Chester Company Overview:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering … backdrop of the rolling North Wales hills and the banks of the serene River Dee.Role Description:We are seeking an experienced and motivated Security Detection & Response Analyst (SDR II) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate with ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate with ...

experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience … CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance: Knowledge ...

Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency. You will work alongside Accenture's CrowdStrike Business Group … partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure ...

dynamic team in Manchester as a Cyber Security Specialist, where you will be responsible for delivering a comprehensive range of security services. This includes detection and response services, vulnerability scanning, dark web monitoring, social engineering assessments, and detailed reporting. Your primary objective will be to maintain and enhance … scalable security tooling and integrations using DevOps practices (CI/CD, Infrastructure as Code).Contribute to the operationalization of AI-driven capabilities to enhance threat detection and response.Collaborate with internal and external stakeholders to resolve security incidents and ensure vulnerability compliance.Strive for customer satisfaction while continuously seeking ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab CI/CD pipelines — SAST, IaC scanning, secrets detection, dependency/container scanning, and policy-as-code gates. Assess the security posture of workloads before, during, and after migration; identify and remediate misconfigurations … applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection ...

procedures.The Successful ApplicantPrevious experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.Experience investigating security incidents … activities.Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies.Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.Experience securing cloud-based and enterprise collaboration environments.Familiarity with cyber threat intelligence and attack frameworks such ...

Security Monitoring Advisory:Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero ...

security incidentsPerform vulnerability assessments and remediation trackingSupport implementation of security controls across cloud and on-prem environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering … GSEC, or ISC2 certificationsExperience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google CloudScripting experience (PowerShell, Python, or Bash)Exposure to threat hunting or SIEM rule developmentWhat's On OfferSalary up to 55,000 depending on experienceOpportunity to work with modern security tools and technologiesTraining ...

better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house developers and providing some advice on SDLC security Performing vulnerability scanning … What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDR and MDR. Knowledge of how to integrate security into project lifecycles Effective communication skills, with the ability ...

working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid … opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure, Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents ...

Copilot. You will be in the office 3 days a week. What you'll bring: A minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using ...