1 to 25 of 80 Threat Detection Jobs in the UK

Lead Cloud Detection & Threat Modelling Engineer AWS, Azure, Sentinel, Elastic Stack, SOAR platforms 6 Month Fixed-Term Contract £110k-£120k pro rata 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature and scale our cloud security monitoring, detection and response capabilities across a complex, global, multi-cloud environment. This role is ideal for someone who has progressed from a Senior SOC Analyst background into Threat Modelling & Detection Engineering and is passionate about threat ...

Enterprise Threat Detection (ETD) Expert (m/f) Start : ASAP Duration : 6 months Location : remote Role Overview : Expert will support on implementation, operation, and continuous improvement of SAP Enterprise Threat Detection Cloud within the RISE environment. This role focuses on security monitoring, threat detection … deployment and configuration of SAP ETD Cloud, including integration with RISE systems and client 000 and Hana Database monitoring setup Develop, tune, and maintain detection rules, alert patterns, and correlation logic to identify cyberattacks and suspicious behaviors Support on monitor security events and alerts generated by SAP ETD, performing ...

Detection Engineer Location: Leamington Spa, Manchester or Warrington Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment. This is an opportunity to work … threat-led detection engineering, focusing on identifying sophisticated attacker behaviours and improving the effectiveness of security operations. You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day Outside IR35 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Deception Engineering) working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

Security Operations Lead Threat Detection & Response London Hybrid Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior … ensuring the organisation is prepared to respond effectively to cyber incidents. The ideal candidate will have: Experience leading or managing a SOC, Security Operations, Detection & Response or Incident Response function Strong knowledge of security monitoring, alert triage, investigations and incident response Experience with technologies such as SIEM, SOAR ...

Security Operations Lead – Threat Detection & Response Submit your CV and any additional required information after you have read this description by clicking on the application button. London | Hybrid | Up to £80k + excellent benefits I'm working with a leading London university to appoint a Security Operations Lead … lead its Threat Detection & Response (TDR) function within the wider Security Operations team. This is a senior cyber security leadership role with responsibility for continuous monitoring, alert triage, security investigations and incident response , alongside leading a team of security specialists and junior staff. You'll also play ...

international technology environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead … responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical teams across the business. ...

technology advancements, and defence digital transformation programmes. This includes driving the adoption of Zero Trust Architecture, improving network segmentation, and implementing advanced monitoring and threat detection capabilities at ingress and egress points. The role also engages with architects, risk authorities, and accrediting bodies to ensure services align with … defence teams, risk authorities, accrediting bodies, suppliers, and customer stakeholders. Support the adoption of Zero Trust principles, enhanced network segmentation, and advanced monitoring and threat detection capabilities. Provide operational reporting, risk management, service assurance, and governance oversight to senior stakeholders. What You'll Bring Significant experience leading cyber ...

technology advancements, and defence digital transformation programmes. This includes driving the adoption of Zero Trust Architecture, improving network segmentation, and implementing advanced monitoring and threat detection capabilities at ingress and egress points. The role also engages with architects, risk authorities, and accrediting bodies to ensure services align with … defence teams, risk authorities, accrediting bodies, suppliers, and customer stakeholders. Support the adoption of Zero Trust principles, enhanced network segmentation, and advanced monitoring and threat detection capabilities. Provide operational reporting, risk management, service assurance, and governance oversight to senior stakeholders. What You'll Bring Significant experience leading cyber ...

privileged access management services across the enterprise. The role will contribute to privileged account governance, identity lifecycle management, access controls, authentication technologies, and identity threat protection initiatives. Working closely with cybersecurity, infrastructure, and application teams, the individual will help ensure secure, compliant, and efficient management of identities, privileged access … Connect (OIDC), and Single Sign-On (SSO) solutions. Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise platforms. Support identity threat detection, incident response, monitoring, and automation activities through IAM and PAM integrations. Your Profile Essential skills/knowledge/experience: Experience in Identity ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive a proactive ethos … ever-changing cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational ...

will work with enterprise customers to design, deploy and optimise modern endpoint security and XDR solutions. The environment is heavily focused on advanced threat detection, endpoint security, automation and AI-led security operations , so we are particularly interested in consultants who have worked across large-scale enterprise … Responsibilities Design, deploy and optimise enterprise XDR/EDR solutions Support large-scale endpoint security implementations and migrations Work with customers to improve threat detection, investigation and response capabilities Deliver endpoint protection across complex enterprise environments Support security automation and next-generation Agentic AI security capabilities Integrate endpoint ...

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizers Global Cyber Defense organization … response to security incidents on a global scale, and provide technical guidance to analysts and partner teams. You will bring deep expertise in cyber threat analysis, incident response, malware investigations and adversary tradecraft, with the ability to operate confidently across complex business and technical environments. Working alongside Threat ...

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizer's Global Cyber Defense organization … response to security incidents on a global scale, and provide technical guidance to analysts and partner teams. You will bring deep expertise in cyber threat analysis, incident response, malware investigations and adversary tradecraft, with the ability to operate confidently across complex business and technical environments. Working alongside Threat ...

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizer's Global Cyber Defense organization … response to security incidents on a global scale, and provide technical guidance to analysts and partner teams. You will bring deep expertise in cyber threat analysis, incident response, malware investigations and adversary tradecraft, with the ability to operate confidently across complex business and technical environments. Working alongside Threat ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools. Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments. Operate effectively … stakeholders across multiple functions and levels. Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM. Essential Skills Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state ...

support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools. Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments. Operate effectively … stakeholders across multiple functions and levels. Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM. Essential Skills Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state ...

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizer’s Global Cyber Defense organization … response to security incidents on a global scale, and provide technical guidance to analysts and partner teams. You will bring deep expertise in cyber threat analysis, incident response, malware investigations and adversary tradecraft, with the ability to operate confidently across complex business and technical environments. Working alongside Threat ...

Cyber Security Engineer who enjoys a mix of engineering, security operations, automation, and infrastructure security, while working with modern security technologies and threat detection capabilities. What You'll Be Doing Designing, implementing, and maintaining security controls across infrastructure, applications, and platforms. Supporting security monitoring and threat detection ...

Senior Cyber Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring … Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause analysis, containment, and remediation Implement, maintain, and optimise security controls ...