10 of 10 Contract Threat Detection Jobs in London

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

busy cyber security operations team supporting a large-scale enterprise environment. This role will suit someone with a strong background in incident response, threat detection, investigation and remediation, who is comfortable operating as a senior escalation point within a Security Operations Centre. What You'll Be Doing: Acting … escalation point for complex security incidents and investigations Leading incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting activities across enterprise ...

with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing … experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security monitoring, threat detection and SOC operations. Ability to work independently ...

cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities. Key Responsibilities Monitor and triage security alerts within a SOC environment. Investigate and respond to cyber security incidents across endpoint, cloud … remediation activities. Document investigation findings, evidence, and response actions. Escalate complex incidents and collaborate with technical and security teams. Contribute to the development of detection rules, response playbooks, and process improvements. Essential Skills & Experience Proven experience within a Security Operations Centre (SOC) or Incident Response function. Hands-on experience ...

cloud workloads, microservices and containerised environments. You will work closely with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response capabilities. Key Responsibilities Monitor security alerts, perform triage and investigate potential incidents. Assess incident severity, scope, impact and required response … application environments. Maintain accurate incident records, investigation evidence and response documentation. Escalate significant incidents and collaborate with SOC and technical teams. Contribute to improving detection capabilities, investigation processes and incident response playbooks. Essential Skills and Experience Practical experience investigating cyber security threats and incidents across endpoints, cloud environments ...

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

services into a new AWS platform. Ensure cloud workloads, networks, identities, and data are secured against modern threats. Implement and maintain security monitoring, detection, and alerting capabilities. Support cloud governance and compliance initiatives across the wider programme. Provide security recommendations and remediation guidance for cloud-based risks. Identity & Access … access controls across AWS environments. Support identity security reviews and privilege management activities. Cloud Security Operations Manage and optimise AWS-native security tooling. Support threat detection, investigation, and remediation activities. Maintain security visibility and monitoring through AWS logging and security services. Assist with vulnerability management and cloud security ...

Senior SIEM Engineer to support a large-scale security monitoring platform. Responsibilities: Develop and optimise SIEM solutions Build and manage log ingestion pipelines Enhance threat detection, alerts and dashboards Support platform automation and performance tuning Work closely with Security Operations teams Key Skills: SIEM Engineering/Security Monitoring … Kubernetes Scripting & Automation Ansible, Helm, ArgoCD or GitLab CI/CD Strong troubleshooting and analytical skills Ideal for candidates from SIEM Engineer, Security Engineer, Detection Engineer, Elastic Engineer, Cyber Security Engineer, or Security Platform Engineer backgrounds. Please apply with your updated CV if the role aligns with your experience ...

solution designs, perform architectural assurance, and guide teams through implementation challenges. * Security & Compliance Implement security controls including IAM policies, encryption, network segmentation, monitoring, and threat detection. Ensure compliance with regulatory requirements (e.g., GDPR, ISO27001, PCI DSS) through AWS-native tools and architectural controls * Infrastructure as Code (IaC ) Lead ...

some C# or .NET coding. Please note: this is an engineering role, not a cyber security role. If your background is mainly vulnerability management, threat detection, SOC or penetration testing, this won't be the right fit. Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy ...