51 to 75 of 109 Threat Detection Jobs in the UK excluding London

About iVerify We are Experts in Mobile Threat Hunting. The first mobile threat hunting company to protect mobile devices like any other vulnerable corporate endpoint. The mobile security market has a problem. Simply put, current solutions fail to meet the sophistication of modern threats or the growing privacy … often dangerous work - but because enterprises and consumers deserve real protection from advanced mobile threats without sacrificing privacy. We are building the first mobile threat hunting company to harmonize security and privacy in the face of a new class of mobile threats. Supported by some of the most well ...

activity across SIEM, EDR and other security platforms Identifying indicators of compromise, suspicious activity and emerging threats Supporting incident response and containment activities Performing threat hunting activities to proactively identify potential security risks Escalating significant or complex incidents where appropriate Working closely with Tier 1 and Tier 3 analysts … incident responders and other technical teams Tuning and improving detection rules and use cases to reduce false positives and improve threat detection Analysing logs and security events from endpoints, networks, cloud environments and other infrastructure Producing clear investigation reports and documenting incidents, findings and recommendations Maintaining awareness ...

role leads the design, implementation, administration, and optimisation of Proofpoint security solutions within a large enterprise environment, bringing deep expertise across email security, threat protection, DLP, and email authentication technologies to protect against phishing, malware, and advanced email-based threats. Key Responsibilities Serve as the engineer for the Proofpoint … platform, designing, deploying, configuring, and maintaining solutions including Proofpoint Email Protection (PEP), Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Email Fraud Defense (EFD), and Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat detection rules, configuring and maintaining email authentication ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: Serve … platform and related email security technologies. Design, deploy, configure, and maintain Proofpoint solutions, including: Proofpoint Email Protection (PEP) Proofpoint Targeted Attack Protection (TAP) Proofpoint Threat Response Auto-Pull (TRAP) Proofpoint Email Fraud Defense (EFD) Proofpoint Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: • Serve … email security technologies. • Design, deploy, configure, and maintain Proofpoint solutions, including: o Proofpoint Email Protection (PEP) o Proofpoint Targeted Attack Protection (TAP) o Proofpoint Threat Response Auto-Pull (TRAP) o Proofpoint Email Fraud Defense (EFD) o Proofpoint Information Protection/DLP • Manage email security policies, spam filtering, malware protection ...

complex cyber landscape. We're looking for an experienced Cyber Security Analyst Tier 2 to join our Cyber Security Operations Centre (CSOC), providing advanced threat detection, investigation and response services while acting as an escalation point for our Tier 1 analysts. As a Tier 2 Cyber Security Analyst … events, and helping to continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor for Tier 1 analysts ...

dynamic team in Manchester as a Cyber Security Specialist, where you will be responsible for delivering a comprehensive range of security services. This includes detection and response services, vulnerability scanning, dark web monitoring, social engineering assessments, and detailed reporting. Your primary objective will be to maintain and enhance … scalable security tooling and integrations using DevOps practices (CI/CD, Infrastructure as Code).Contribute to the operationalization of AI-driven capabilities to enhance threat detection and response. Collaborate with internal and external stakeholders to resolve security incidents and ensure vulnerability compliance. Strive for customer satisfaction while continuously ...

pentest cadence, IR retainer, EASM, DLP, tabletops, etc) - surfacing risk credibly and identifying where NCC services can close the gap. Maintain and refresh the threat overview as the customer's environment and threat landscape evolve. Key Requirements Proven experience in cybersecurity, IT operations, or managed security services … customer-facing technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR ...

Cyber Security Operations Manager to lead our in-house Security Operations capability while remaining deeply involved in the day-to-day technical aspects of detection, response and continuous improvement. This role is ideal for someone moving from a Senior SOC Analyst, Senior Security Engineer or SOC Team Lead position … small SOC team while remaining an active technical contributor. Investigating and responding to security incidents across enterprise, cloud and operational technology environments. Improving detection capabilities, automation and SOC processes to stay ahead of emerging threats. Working closely with vulnerability management, incident response and governance teams to strengthen the organisation ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies. Job Responsibilities: Design, scale ...

/12/2026 Clearance: Active SC Role Description: SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like ArcSight, Splunk, or QRadar. Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats. Incident Response - Work with security teams to analyze and mitigate security incidents. … Custom Rule Creation - Develop and fine-tune detection rules and alerts to identify malicious activities. Security Reporting - Generate reports on security events, trends, and system performance. Collaboration - Work with IT and security teams to improve overall cybersecurity posture. Required Skills & Qualifications Technical Expertise - Strong knowledge of SIEM platforms, network ...

Lead security remediation activity on escalated MDR incidents, coordinating technical resolution and clear communication across the IT team and wider business. Develop and enhance threat detection rules and use cases in collaboration with internal stakeholders and third-party partners. Implement and maintain security controls across Microsoft 365, Azure ...

Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud. Offer guidance on improving threat detection, monitoring, and response for cloud-based resources. Access Control & Conditional Access: Assess and improve Conditional Access policies and identity management strategies, enforcing ...

join a collaborative cyber security team where you'll lead complex investigations, strengthen security controls and influence how we defend against an evolving threat landscape. You'll work across cloud, identity, endpoint, network and data security while partnering with technical and business teams to continuously improve our security capability. … have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. Vulnerability Management ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...

better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house developers and providing some advice on SDLC security Performing vulnerability scanning … What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDR and MDR. Knowledge of how to integrate security into project lifecycles Effective communication skills, with the ability ...

emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline ...

professional with hands-on capability, sound judgement and a practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot or similar … assisted security tooling experience managing or working closely with an outsourced SOC/MDR provider Strong understanding of modern threat vectors including: Ransomware Identity-based attacks Cloud misconfiguration AI-driven and automated attacks (including agentic tooling) experience in cloud security, particularly across Azure environments Strong understanding of detection ...

demonstrate:? Experience in Cybersecurity, Information Security, IT Risk, Governance or Information Assurance? Understanding of security disciplines such as: Risk Management Access Controls Network Security Threat Detection & Monitoring Incident Response Knowledge of regulatory or compliance frameworks such as: CAF NIS/NIS2 ISO 27001 GDPR Other governance or assurance ...

with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update incident response documentation and procedures Contributing to threat intelligence reviews and sharing findings with stakeholders Preparing reports and presentations on security incidents and trends Staying up-to-date with emerging cyber threats ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid … opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure, Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents ...

critical organisations. Unlike many cyber roles that focus on a single specialism, our team bring together elements of cyber analysis, software engineering, data science, threat research and capability development. The result is varied, meaningful work that continues to evolve alongside both technology and the threat landscape. … personal projects. Familiarity with data analysis, data visualisation or working with large and complex datasets. Exposure to cyber security concepts such as security operations, threat detection, incident response, risk management or vulnerability management. Experience using automation to improve processes, increase efficiency or solve technical problems. Familiarity with Linux ...

critical organisations. Unlike many cyber roles that focus on a single specialism, our team bring together elements of cyber analysis, software engineering, data science, threat research and capability development. The result is varied, meaningful work that continues to evolve alongside both technology and the threat landscape. … personal projects. Familiarity with data analysis, data visualisation or working with large and complex datasets. Exposure to cyber security concepts such as security operations, threat detection, incident response, risk management or vulnerability management. Experience using automation to improve processes, increase efficiency or solve technical problems. Familiarity with Linux ...

Electronic Arts in Guildford, UK seeks a Senior Detection Engineer to advance our detection engineering strategy within the Enterprise Security team. This role is essential to safeguarding EA's cloud and production environments and will directly impact our ability to detect, respond to, and prevent cyber threats … scale. As a senior individual contributor, you will mentor junior engineers, help define engineering direction, and lead the development of scalable threat detection solutions, #J-18808-Ljbffr ...

flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer to play a leading role in Vitality … operational procedures and incident response playbooks Support penetration testing activities and coordinate the remediation of identified findings Contribute to the ongoing enhancement of monitoring, detection and response processes across the Security Operations function You will keep up to speed with emerging threats, vulnerabilities and industry developments to support continuous ...