1 to 25 of 237 Threat Detection Jobs in the UK

Gurugram, New Delhi, Berlin, Paris and LuxembourgABOUT THE ROLE:The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & ResponseProduct Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure … design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We're proactive in our defence, constantly hacking ourselves to improve ...

clients protect critical services, systems, and data against evolving cyber threats. The successful candidates will play a key role in security monitoring, incident response, detection engineering, and threat analysis, working alongside Security Operations, Threat Intelligence, and Incident Response teams. You will act as a cyber security subject … matter expert, helping to strengthen defensive capabilities while contributing to the continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud ...

shaping the future of fintech – and we're just getting started. The roleYou will own and evolve the company's threat detection and threat-hunting capability. This role defines what "good" looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security. … This is not an alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation. You will partner closely with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership ...

World Class Defence Organisation is currently looking to recruit a Cyber Threat Operations Specialist subcontractor on an initial 12 month contract.You do not need to hold any current security clearance in order to apply. However, SC security clearance will be required prior to starting the position , with DV clearance … background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote working: Onsite ...

World Class Defence Organisation is currently looking to recruit a Cyber Threat Operations Specialist subcontractor on an initial 12 month contract. You do not need to hold any current security clearance in order to apply. However, SC security clearance will be required prior to starting the position , with … background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote working: Onsite ...

Threat Detection EngineerMillennium SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is a highly technical role, and successful candidates will have demonstrable knowledge and experience across a range of business … within a fast-paced, innovative organization. Principal ResponsibilitiesThreat Hunting – The ability to leverage multiple data sources to identify modern evolving threats and develop new detection and response approaches. Detection Engineering – Creation and operation of high-fidelity detections mechanisms that drive efficient, effective and repeatable response. Playbook Creation ...

Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing environments. … This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat Intelligence ...

Security Researcher (AI & Detection Engineering) Location: London (Hybrid) Salary: £70,000-£90,000 + bonus + benefits We're partnering with one of the UK's most innovative cyber security organisations as they expand their research capabilities at the intersection of AI, Security Research and Detection Engineering. … help explore how emerging AI technologies can be leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

role in protecting a large-scale, international technology environment. This is an excellent opportunity for a security professional with experience in SOC operations, threat detection, incident response, and threat hunting to join a mature security function that is investing heavily in its cyber capabilities. You'll work … within a hybrid Security Operations model alongside an MSSP, helping to strengthen detection capabilities, improve threat visibility and drive continuous security improvement across cloud and on-premises environments. Your role: Investigate, triage and respond to cyber security alerts, incidents and threats Act as the key operational contact ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use‐case tuning, and post‐incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client‐facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use-case tuning, and post-incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client-facing ...

Conditional Access and administrative boundaries Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures Establish requirements for logging, monitoring, alerting, threat detection and incident response Review technical architectures and solution designs for security weaknesses, gaps and dependencies Assess migration strategies and cutover approaches from … readiness and production transition Align designs with security policies, information-security standards, data-protection obligations and regulatory requirements Maintain HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records Provide risk-based security recommendations to programme leadership and senior stakeholders Support continuous improvement ...

Cyber Security Engineer to join a growing Cyber Security Operations function. This is a fantastic opportunity to work on large-scale security tooling, detection capabilities and SOC technologies within a complex, highly secure environment. You'll play a key role in enhancing security visibility, improving detection capabilities … ongoing evolution of cyber defence tooling. What You'll Be Doing Supporting and improving SOC security tooling and capabilities Managing and optimising SIEM and threat detection platforms Developing and enhancing automation and security playbooks Supporting tool integrations, data onboarding and log ingestion Investigating security events and improving detection ...

fascinated by cyber threats, digital investigations and how organisations protect themselves from cyber attacks? We’re looking for an ambitious Cyber Threat Detection & Response Apprentice to join our growing team and begin an exciting career in one of the fastest-growing areas of technology. This is an opportunity … more than 100 specialists help businesses stay connected, secure and future-ready through innovative technology solutions. What you’ll be doing: As a Cyber Threat Detection & Response Apprentice at SNO, you’ll work alongside experienced professionals to strengthen our cyber defence capabilities. Your responsibilities will include: Assisting ...

background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote working: Onsite … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

nearly 30,000 global businesses. Задачи Design and implement secure cloud architectures across AWS environments Build and maintain protective and detective controls for cloud threat visibility Develop detection engineering capabilities to identify attacker behaviour and reduce detection and response times Lead cloud security investigations and incident response … definition through implementation and measurable outcomes Assess emerging cloud threats and evolve defensive capabilities Shape Fin's AI-first security approach, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities Support the secure adoption of AI-assisted software development tools and engineering workflows Требования Proven experience ...

Lead integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry. . Design and optimise KQL queries to support effective threat detection and investigation. . Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases. . Develop … data normalisation logic. . Strong knowledge of KQL (Kusto Query Language), advanced query development and optimisation. . Experience designing, building and tuning analytic rules, detection logic and threat use cases. . Experience developing Logic Apps, Playbooks and SOAR automation workflows. . Experience implementing CI/CD pipelines using ...