51 to 75 of 79 Threat Detection Jobs in the UK

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security ...

high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation, security requirements … Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures • Understanding of security ...

authentication, multi-factor authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier … following areas: Network security: Secure network design, segmentation, firewalls, remote access and secure connectivity. Infrastructure and endpoint security: Server hardening, endpoint protection, endpoint detection and response, and patch management. Cloud and SaaS security: Secure cloud configurations, configuration management and cloud service protection. Identity and access management: Directory services, multi ...

identity governance - Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk - Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience - Chair architecture review boards and lead security risk assessments and design assurance - Oversee compliance with ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience working ...

services into a new AWS platform. Ensure cloud workloads, networks, identities, and data are secured against modern threats. Implement and maintain security monitoring, detection, and alerting capabilities. Support cloud governance and compliance initiatives across the wider programme. Provide security recommendations and remediation guidance for cloud-based risks. Identity & Access … access controls across AWS environments. Support identity security reviews and privilege management activities. Cloud Security Operations Manage and optimise AWS-native security tooling. Support threat detection, investigation, and remediation activities. Maintain security visibility and monitoring through AWS logging and security services. Assist with vulnerability management and cloud security ...

Cyber Security Manager, you'll play a key role in strengthening security across our Microsoft 365 environment, cloud platforms, networks and infrastructure. From threat detection and incident response to vulnerability management and security-by-design, you'll be at the centre of keeping our organisation secure … ever-changing threat landscape. This is an exciting opportunity for an experienced security professional who enjoys combining hands-on technical expertise with influencing projects, improving controls and embedding best practice across the business. What you'll be doing Leading investigations into security incidents and emerging threats. Managing and enhancing ...

Cyber Security Manager, you'll play a key role in strengthening security across our Microsoft 365 environment, cloud platforms, networks and infrastructure. From threat detection and incident response to vulnerability management and security-by-design, you'll be at the centre of keeping our organisation secure … ever-changing threat landscape. This is an exciting opportunity for an experienced security professional who enjoys combining hands-on technical expertise with influencing projects, improving controls and embedding best practice across the business. What you'll be doing Leading investigations into security incidents and emerging threats. Managing and enhancing ...

emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline ...

operational security controls and procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation … hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

management, strengthening cloud security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud … with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised security frameworks including NCSC CAF, ISO27001, NIST ...

secure configuration standards, system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises ...

regulated environment. Proven experience owning and improving ISO 27001 and security governance. Experience managing outsourced SOC and security partners. Strong knowledge of security operations, threat detection, incident response and vulnerability management. Good understanding of Microsoft/Azure, cloud security, SaaS assurance and security architecture. This is a senior ...

experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow office, with a 3 day in-office ...

Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence … feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and proactively monitor SIEM infrastructure health. Security Engineering: Drive security projects, system transformations, and respond to emerging threats. What You Bring: Proven background ...

within highly regulated environments. Desirable Skills Cloud connectivity within OT environments (Azure or AWS). Industrial IoT (IIoT) technologies. Experience with OT monitoring and threat detection platforms. Relevant certifications such as: GICSP CISSP TOGAF ISA/IEC 62443 certifications Azure Security certifications IR35 Status: Inside IR35 ...

Centre Analyst | £30,000 - £40,000 | West Yorkshire Our client runs a 24x7x365 Security Operations Centre supporting customers across multiple industries against an evolving threat landscape. They're looking for a SOC Analyst to join the team on a shift basis, taking ownership of frontline threat detection … knowledge across firewalls, IDS/IPS, Active Directory, Windows Server, Linux, TCP/IP and cloud environments Foundational grasp of core security concepts and threat types Exposure to access/security administration tasks Familiarity with incident containment, remediation and recovery Confident communicator with solid customer-facing skills Sharp analytical ...

continuity; security assurance; tooling and operational capability; and the continued development of the team. You'll oversee areas including MDR/XDR, security monitoring, threat detection and vulnerability management, whilst operating across regulatory and contractual security requirements, including Cyber Essentials Plus. And when significant cyber incidents occur ...

continuity; security assurance; tooling and operational capability; and the continued development of the team. You'll oversee areas including MDR/XDR, security monitoring, threat detection and vulnerability management, whilst operating across regulatory and contractual security requirements, including Cyber Essentials Plus. And when significant cyber incidents occur ...

Salary: £80,000 - £100,000 Location: Coventry (Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage ...

storage costs without losing security coverage Build and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection Monitor and resolve pipeline and SIEM issues, and report ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. Essential: * Proven experience in Software Engineering roles * Experience in some of the following technologies: o Elasticsearch … Helm o Ansible o Basic networking * Strong analytical and troubleshooting skills * Willingness to learn new technologies * Attention to detail Advantageous: * Experience in SIEM Detection Engineering. * Experience of On Premise SIEM solutions * Experience with log source onboarding and normalisation * Knowledge of Linux, Windows and Network Administration * Knowledge and experience ...

solution designs, perform architectural assurance, and guide teams through implementation challenges. * Security & Compliance Implement security controls including IAM policies, encryption, network segmentation, monitoring, and threat detection. Ensure compliance with regulatory requirements (e.g., GDPR, ISO27001, PCI DSS) through AWS-native tools and architectural controls * Infrastructure as Code (IaC ) Lead ...

solution designs, perform architectural assurance, and guide teams through implementation challenges. Security & Compliance Implement security controls including IAM policies, encryption, network segmentation, monitoring, and threat detection. Ensure compliance with regulatory requirements (e.g., GDPR, ISO27001, PCI DSS) through AWS-native tools and architectural controls Infrastructure as Code (IaC ) Lead ...