51 to 75 of 237 Threat Detection Jobs in the UK

Cyber Security Engineer to support the Cyber Security Capability Manager in ensuring Digital Excellence UK meets the challenges and demands of countering the Cyber Threat . To work with other UK Cyber Security members, the role will cover back-end refresh, playbook scripting and fault finding, Cyber Security tool … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK network SOC Threat Detection Analyst key responsibilities are: Accountable for the effective ...

public sector services. What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute … management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active Directory, identity platforms) Exposure to DevOps/CI-CD practices Experience ...

technical, hands-on role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced … ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security ...

Your Role: As a Cyber Security Specialist, you will work within a multi-disciplinary security team delivering a broad range of services, including threat detection and response, vulnerability scanning, dark web monitoring, social engineering assessments, and security reporting. You will act as a technical escalation point for complex … diverse client base. The role also involves developing and maintaining security tooling and integrations, while supporting the adoption of AI-driven capabilities to improve threat detection and response. Working closely with internal teams and customers, you will ensure effective incident resolution and vulnerability compliance, while staying ...

trusted technical advisor, helping customers and partners design, adopt, and operationalise solutions on the Qualys platform across asset and vulnerability management, patch management, threat detection and response, compliance, and cloud/application security. You will also play a key role in partner technical enablement, joint solution development … large enterprise environment. Hands-on expertise in multiple areas such as asset management, vulnerability management, patching, policy/compliance, cloud security, application security, and threat detection/response. Ability to design complex, end-to-end security architectures from identification through remediation and recovery. Working knowledge of common security ...

senior technical stakeholders, shaping how customers and partners design, adopt, and scale solutions on the Qualys platform across asset and vulnerability management, patch management, threat detection and response, compliance, and cloud/application security.You will own the technical strategy for the partner ecosystem — driving technical enablement, joint solution … large enterprise environment.* Expert-level, hands-on command across multiple domains: asset management, vulnerability management, patching, policy/compliance, cloud security, application security, and threat detection/response.* Proven ability to architect complex, end-to-end security solutions spanning identification through remediation and recovery, independently and at executive ...

cloud-hosting platform used across a major public-sector programme. This is a senior, hands-on architecture role covering cloud integration, identity security, DevSecOps, threat monitoring and technical assurance. The Role You will provide architecture leadership across the AWS platform, helping onboard new applications and ensuring that security, integration … into Terraform and CI/CD pipelines. Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud. Support threat detection through centralised logging, tailored alerts and anomaly monitoring. Share knowledge and provide technical guidance to engineering teams. Requirements: Strong AWS cloud ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait. This architecture is not greenfield. It carries two decades … this role. The expectation is fluency and daily practice, not passing familiarity. The ECS DomainECS covers the following product and capability areas: Email threat detection and preventionEmail security efficacyCollaboration securityDMARC analyzerData platform and observabilityAnalysis and ResponseEnd user application integrationInternal operations enablementWhat You Will DoLead from Problem Space ...

some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait.This architecture is not greenfield. It carries two decades of accumulated … this role. The expectation is fluency and daily practice, not passing familiarity.**The ECS Domain****ECS covers the following product and capability areas:*** Email threat detection and prevention* Email security efficacy* Collaboration security* DMARC analyzer* Data platform and observability* Analysis and Response* End user application integration* Internal operations ...

Access Management programme. The successful candidate will help strengthen identity security across Identity Governance, Privileged Access Management, Authentication, Federation, Access Reviews and Identity Threat Detection initiatives. Key responsibilities include: Support and administer enterprise IAM platforms and services across Identity Governance and Administration (IGA) Privileged Access Management (PAM) Single … support modern identity security capabilities including: Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR) Participate in Zero Trust security initiatives and identity-centric security programs Support application onboarding and integration activities for: SAML, OAuth ...

SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team. Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration with Security ...

will run SOC operations, expand log coverage, and build high‐quality detections using MITRE ATT&CK and D3FEND. You will lead incident response, threat detection, and security training, while promoting a security‐minded culture and ensuring compliance with industry standards. #J-18808-Ljbffr ...

Elastic Subject Matter Expert (SME) to lead the design, implementation and evolution of a critical Elastic Stack environment supporting enterprise-wide monitoring, security analytics, threat detection and operational insight. This is a unique opportunity to become the go-to technical authority for a sophisticated on-premises Elastic platform … operational monitoring, observability and security operations. Designing and architecting enterprise-scale Elastic Stack solutions. Building and optimising high-volume Elasticsearch clusters. Delivering SIEM capabilities, threat detection and security analytics. Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent. Creating impactful Kibana dashboards, visualisations and reporting solutions. Implementing ...

Elastic Subject Matter Expert (SME) to lead the design, implementation and evolution of a critical Elastic Stack environment supporting enterprise-wide monitoring, security analytics, threat detection and operational insight. This is a unique opportunity to become the go-to technical authority for a sophisticated on-premises Elastic platform … operational monitoring, observability and security operations. Designing and architecting enterprise-scale Elastic Stack solutions. Building and optimising high-volume Elasticsearch clusters. Delivering SIEM capabilities, threat detection and security analytics. Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent. Creating impactful Kibana dashboards, visualisations and reporting solutions. Implementing ...

market plan for AWS quantum, cryptography, and cybersecurity services across UK Public Sector — identifying the highest-value use cases in areas such as threat detection, zero-trust architecture, cryptographic modernisation, post-quantum migration planning, secure patient data, citizen data protection, and research data security- Apply value-based selling … modernisation and post-quantum readiness, then jump to a call with an NHS trust's IT security lead exploring how AWS can strengthen their threat detection and data protection posture. Afternoons could see you building a business case with your Solutions Architect for a quantum-safe pilot with ...

analysis of security data for operational, analytics, machine learning and Gen AI purposes. The data platform lies at the heart of our security detection strategy, serving wider security teams. What is in it for you: We're all about the little helps. That's why we make sure … support your mental wellbeingYou will be responsible for: Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities. Data Integration and Transformation: Implement and manage the automated frameworks ...

full details. You will be responsible for: Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities. Data Integration and Transformation: Implement and manage the automated frameworks … full details. You will be responsible for Data Architecture: Design, build and management of realtime, near realtime and batch data architectures that support threat detection, incident response and reporting through advanced analytics, machine learning and GenAI capabilities. Data Integration and Transformation: Implement and manage the automated frameworks ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...