1 to 25 of 29 Threat Detection Jobs in the South East

Role Description: Role Overview: The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus … enhancing detection capabilities and proactively identifying threats. Key Responsibilities: Detection Engineering: Design, develop, and optimise security detections across both SIEM platforms Continuously improve detection rules to enhance coverage and reduce false positives Threat Hunting: Conduct proactive threat hunting activities across both SIEM environments Identify ...

Graylog : Empowering Threat Detection, Investigation, & Response Solutions with Cutting-Edge Technology Graylog specialises in delivering top-notch Threat Detection, Investigation, & Response (TDIR) solutions, backed by our latest addition, the Graylog API security platform. As a renowned centralised log management (CLM) and Security Information Event Management (SIEM … take home gold and become the Globee Winner for Security Information & Event Management and the 2024 Globee Winner for Threat Hunting, Detection, Intelligence, and Response. Graylog was named a Leader and Fast Mover in GigaOM s 2024 Radar Report for SIEM and 2025 has seen Graylog recognized ...

+ 15k Bonus | Hybrid UK A growing cyber security consultancy is seeking a Senior Cyber Consultant to help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating … security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned to MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation ...

response activities, ensuring effective containment, eradication, recovery, and lessons learned. Develop, maintain, and test cyber incident response plans, procedures, and playbooks. Oversee security monitoring, threat detection, threat intelligence, and vulnerability management activities. Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management … optimisation of firewalls, network access controls, intrusion detection/prevention systems, secure remote access solutions, and related security platforms. Lead investigations into security breaches, suspicious activity, and emerging threats. Drive continuous improvement across security operations processes, tooling, and capabilities. Produce security reporting, metrics, and risk-based recommendations for senior ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real‐time threat intelligence with frontline human expertise from Sophos X‐Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry‐leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies—including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next‐gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

available throughout the hiring process. This is an opportunity to play a key role in protecting critical customer environments, leading complex investigations, driving proactive threat hunting activities, and helping shape the future of our security monitoring services. Were looking for someone who enjoys solving difficult security challenges, mentoring others … leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity, and ensure DXC continues to deliver a world-class security monitoring service. This role operates on a Monday to Friday ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

Role Overview: \n \n The Cyber Security Specialist will operate as an Embedded member of the THaDE team, providing advanced support across security monitoring, threat detection, and incident management. \n The role requires strong hands-on expertise in Security Information and Event Management (SIEM) platforms, with a focus … enhancing detection capabilities and proactively identifying threats. \n\n Key Responsibilities: Detection Engineering: \n \n Design, develop, and optimise security detections across both SIEM platforms \n Continuously improve detection rules to enhance coverage and reduce false positives \n\n Threat Hunting: \n \n Conduct proactive threat ...

looking for a Cyber Security Implementation Engineer to play a key role in delivering cutting-edge AI-powered Security Operations capabilities. Working alongside Cyber Detection & Response, Cloud, Infrastructure, Network and Platform teams, you'll help implement intelligent detection, investigation and response technologies that enhance security operations across … third-party platforms into the security ecosystem. Coordinate service accounts, permissions and connectivity with Cloud, Infrastructure, Identity and Network teams. Validate AI-assisted detection, investigation and automated response workflows. Design and execute testing scenarios, attack simulations and operational readiness exercises. Identify integration issues, deployment risks and workflow improvements. Troubleshoot ...

environments Investigate complex incidents (malware, phishing, unauthorised access, vulnerabilities) Implement and maintain security controls across systems and endpoints Work with SIEM, endpoint protection, and threat detection tools Infrastructure & Cloud Security Secure servers, networks, and cloud platforms in line with best practices Manage identity and access controls (Active Directory … Azure AD, privileged access) Oversee patching, system hardening, and configuration management Lead security onboarding using tools like Microsoft Defender and Purview Incident Response & Threat Management Lead technical investigations and remediation activities Conduct root cause analysis and recommend preventative measures Support forensic investigations when required Vulnerability & Risk Management Perform vulnerability ...

environments Investigate complex incidents (malware, phishing, unauthorised access, vulnerabilities) Implement and maintain security controls across systems and endpoints Work with SIEM, endpoint protection, and threat detection tools Infrastructure & Cloud Security Secure servers, networks, and cloud platforms in line with best practices Manage identity and access controls (Active Directory … Azure AD, privileged access) Oversee patching, system hardening, and configuration management Lead security onboarding using tools like Microsoft Defender and Purview Incident Response & Threat Management Lead technical investigations and remediation activities Conduct root cause analysis and recommend preventative measures Support forensic investigations when required Vulnerability & Risk Management Perform vulnerability ...

security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes and reporting emerging risks. Researching and recommending new security technologies, trends and best practices. … broad range of security technologies, tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with ...

enterprise IT environments Knowledge of identity & access management (IAM, MFA, RBAC, PAM) Experience with risk management and ISO 27001 compliance Understanding of incident response, threat detection, and DevSecOps practices Excellent communication skills with the ability to translate technical risk into business terms Desirable Certifications such as CISSP, CISM ...

appropriately flowed down to suppliers, partners, and third-party service providers. 4. Operational Cyber Security Management Oversee operational security activities across multiple entities, including: Threat detection and monitoring Incident response and remediation Vulnerability identification and patch management Endpoint protection and hardening Network and boundary defence IDS/… research). Demonstrable experience managing cyber security in high-assurance and classified system environments. Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking ...

containment and mitigation activities where authorised, including coordinating response actions with relevant teams and tooling. Continuous Improvement and PIR Learnings Develop and fine-tune detection rules and alerts to identify malicious activity, validating effectiveness and reducing false positives. Identify and implement lessons learned from incidents and post-incident reviews … PIRs) to improve processes, runbooks, and detection logic. Contribute to a culture of quality and standardisation by improving documentation and operational practices. Skills and Experience Required Strong technical communication skills in time-pressured environments, with excellent written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge ...

hybrid environments developing, implementing and maintaining cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials) overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plans risk management and compliance, ensuring compliance with various standards and frameworks About you Applicants ...

particularly interested in experience across: Security operations and cyber defence Azure and AWS security Enterprise infrastructure and networking Identity and access management Threat detection and incident response Vulnerability management Security governance, risk and compliance Secure development and DevSecOps practices Experience with Splunk Enterprise Security would be advantageous. Background ...

threats quickly and efficiently. Install, configure and maintain security monitoring tools Ensure SOC tooling is optimised and operating effectively Support SIEM platforms and threat intelligence tooling Work with teams to assess risk and design security controls Apply updates, patches and follow change processes Stay current with emerging threats … your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security ...

hands-on experience with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying ...

reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps ...

reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities Integrate XSIAM with other security tools and information systems to automate security operations and workflows Conduct continuous monitoring … analysis of security alerts and incidents to identify trends and potential threats Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats ...

enterprise applications Owning global firewall design and architecture Architecting and enhancing Privileged Access Management (PAM) capabilities, including approval workflows and continuous monitoring Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks Guiding the hardening of multi-site Active Directory domains/forests ...