24 of 24 Threat Detection Jobs in the South East

response activities, ensuring effective containment, eradication, recovery, and lessons learned. Develop, maintain, and test cyber incident response plans, procedures, and playbooks. Oversee security monitoring, threat detection, threat intelligence, and vulnerability management activities. Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management … optimisation of firewalls, network access controls, intrusion detection/prevention systems, secure remote access solutions, and related security platforms. Lead investigations into security breaches, suspicious activity, and emerging threats. Drive continuous improvement across security operations processes, tooling, and capabilities. Produce security reporting, metrics, and risk-based recommendations for senior ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

/2026 Role Overview : The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus … enhancing detection capabilities and proactively identifying threats. Key Responsibilities : Detection Engineering: Design, develop, and optimise security detections across both SIEM platforms Continuously improve detection rules to enhance coverage and reduce false positives Threat Hunting : Conduct proactive threat hunting activities across both SIEM environments Identify ...

available throughout the hiring process. This is an opportunity to play a key role in protecting critical customer environments, leading complex investigations, driving proactive threat hunting activities, and helping shape the future of our security monitoring services. Were looking for someone who enjoys solving difficult security challenges, mentoring others … leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity, and ensure DXC continues to deliver a world-class security monitoring service. This role operates on a Monday to Friday ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

looking for a Cyber Security Implementation Engineer to play a key role in delivering cutting-edge AI-powered Security Operations capabilities. Working alongside Cyber Detection & Response, Cloud, Infrastructure, Network and Platform teams, you'll help implement intelligent detection, investigation and response technologies that enhance security operations across … third-party platforms into the security ecosystem. Coordinate service accounts, permissions and connectivity with Cloud, Infrastructure, Identity and Network teams. Validate AI-assisted detection, investigation and automated response workflows. Design and execute testing scenarios, attack simulations and operational readiness exercises. Identify integration issues, deployment risks and workflow improvements. Troubleshoot ...

security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes and reporting emerging risks. Researching and recommending new security technologies, trends and best practices. … broad range of security technologies, tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with ...

enterprise IT environments Knowledge of identity & access management (IAM, MFA, RBAC, PAM) Experience with risk management and ISO 27001 compliance Understanding of incident response, threat detection, and DevSecOps practices Excellent communication skills with the ability to translate technical risk into business terms Desirable Certifications such as CISSP, CISM ...

appropriately flowed down to suppliers, partners, and third-party service providers. 4. Operational Cyber Security Management Oversee operational security activities across multiple entities, including: Threat detection and monitoring Incident response and remediation Vulnerability identification and patch management Endpoint protection and hardening Network and boundary defence IDS/… research). Demonstrable experience managing cyber security in high-assurance and classified system environments. Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking ...

containment and mitigation activities where authorised, including coordinating response actions with relevant teams and tooling. Continuous Improvement and PIR Learnings Develop and fine-tune detection rules and alerts to identify malicious activity, validating effectiveness and reducing false positives. Identify and implement lessons learned from incidents and post-incident reviews … PIRs) to improve processes, runbooks, and detection logic. Contribute to a culture of quality and standardisation by improving documentation and operational practices. Skills and Experience Required Strong technical communication skills in time-pressured environments, with excellent written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge ...

hybrid environments developing, implementing and maintaining cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants ...

particularly interested in experience across: Security operations and cyber defence Azure and AWS security Enterprise infrastructure and networking Identity and access management Threat detection and incident response Vulnerability management Security governance, risk and compliance Secure development and DevSecOps practices Experience with Splunk Enterprise Security would be advantageous. Background ...

threats quickly and efficiently. Install, configure and maintain security monitoring tools Ensure SOC tooling is optimised and operating effectively Support SIEM platforms and threat intelligence tooling Work with teams to assess risk and design security controls Apply updates, patches and follow change processes Stay current with emerging threats … your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...

hands-on experience with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying ...

across industrial environments Support OT network segmentation and secure remote access solutions Integrate OT environments into SIEM/SOC platforms Develop and tune OT threat detection rules Conduct OT security assessments, gap analysis, and remediation planning Support OT incident response and investigation activities Collaborate with engineering and operations ...

reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps ...

reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities Integrate XSIAM with other security tools and information systems to automate security operations and workflows Conduct continuous monitoring … analysis of security alerts and incidents to identify trends and potential threats Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats ...

enterprise applications Owning global firewall design and architecture Architecting and enhancing Privileged Access Management (PAM) capabilities, including approval workflows and continuous monitoring Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks Guiding the hardening of multi-site Active Directory domains/forests ...

Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues … need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such ...

Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues … need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such ...

ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including LAN/… standards Support disaster recovery and business continuity planning, testing, and readiness activities Key Experience & Skills: Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing ...

deploying and managing security tooling within a Kubernetes Environment. In your role you will administer and maintain Splunk for log aggregation, monitoring, alerting and threat detection. You will operate and manage Nessus for vulnerability scanning, reporting and remediation tracking. Also, you will integrate security tools into CI/ ...

seamless integration of multi-factor authentication with biometric and mobile device capabilities to improve both security and user experience. Champion the adoption of identity threat detection and response solutions to proactively identify and mitigate identity-based attacks. Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos ...