24 of 24 Contract Threat Detection Jobs in the UK

Lead Cloud Detection & Threat Modelling Engineer AWS, Azure, Sentinel, Elastic Stack, SOAR platforms 6 Month Fixed-Term Contract £110k-£120k pro rata 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature and scale our cloud security monitoring, detection and response capabilities across a complex, global, multi-cloud environment. This role is ideal for someone who has progressed from a Senior SOC Analyst background into Threat Modelling & Detection Engineering and is passionate about threat ...

Enterprise Threat Detection (ETD) Expert (m/f) Start : ASAP Duration : 6 months Location : remote Role Overview : Expert will support on implementation, operation, and continuous improvement of SAP Enterprise Threat Detection Cloud within the RISE environment. This role focuses on security monitoring, threat detection … deployment and configuration of SAP ETD Cloud, including integration with RISE systems and client 000 and Hana Database monitoring setup Develop, tune, and maintain detection rules, alert patterns, and correlation logic to identify cyberattacks and suspicious behaviors Support on monitor security events and alerts generated by SAP ETD, performing ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

privileged access management services across the enterprise. The role will contribute to privileged account governance, identity lifecycle management, access controls, authentication technologies, and identity threat protection initiatives. Working closely with cybersecurity, infrastructure, and application teams, the individual will help ensure secure, compliant, and efficient management of identities, privileged access … Connect (OIDC), and Single Sign-On (SSO) solutions. Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise platforms. Support identity threat detection, incident response, monitoring, and automation activities through IAM and PAM integrations. Your Profile Essential skills/knowledge/experience: Experience in Identity ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive a proactive ethos … ever-changing cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational ...

will work with enterprise customers to design, deploy and optimise modern endpoint security and XDR solutions. The environment is heavily focused on advanced threat detection, endpoint security, automation and AI-led security operations , so we are particularly interested in consultants who have worked across large-scale enterprise … Responsibilities Design, deploy and optimise enterprise XDR/EDR solutions Support large-scale endpoint security implementations and migrations Work with customers to improve threat detection, investigation and response capabilities Deliver endpoint protection across complex enterprise environments Support security automation and next-generation Agentic AI security capabilities Integrate endpoint ...

support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools. Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments. Operate effectively … stakeholders across multiple functions and levels. Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM. Essential Skills Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state ...

maintain VPNs, IPSec connectivity, SSL VPNs and secure remote access solutions. Monitor network security events, investigate incidents and collaborate with SOC teams to improve threat detection and response. Conduct vulnerability assessments, security architecture reviews and remediation activities. Ensure network security controls align with relevant policies, industry standards ...

cyber security incidents within a Microsoft security environment. The successful candidate will play a key role in protecting business-critical systems through proactive threat detection, security monitoring and incident response activities. Working as part of a wider Security Operations or Cyber Defence team, you will leverage Microsoft Sentinel … security alerts generated by Microsoft Sentinel and Microsoft Defender. Perform triage and analysis of security incidents to determine impact and appropriate response actions. Conduct threat hunting activities to identify suspicious or malicious activity. Analyse logs and security telemetry from multiple data sources. Create, tune and optimise Sentinel analytics rules ...

Understanding of Responsible AI, security, governance and risk management principles. Excellent stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure ...

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security ...

identity governance - Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk - Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience - Chair architecture review boards and lead security risk assessments and design assurance - Oversee compliance with ...

services into a new AWS platform. Ensure cloud workloads, networks, identities, and data are secured against modern threats. Implement and maintain security monitoring, detection, and alerting capabilities. Support cloud governance and compliance initiatives across the wider programme. Provide security recommendations and remediation guidance for cloud-based risks. Identity & Access … access controls across AWS environments. Support identity security reviews and privilege management activities. Cloud Security Operations Manage and optimise AWS-native security tooling. Support threat detection, investigation, and remediation activities. Maintain security visibility and monitoring through AWS logging and security services. Assist with vulnerability management and cloud security ...

operational security controls and procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation … hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

secure configuration standards, system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises ...

Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence … feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and proactively monitor SIEM infrastructure health. Security Engineering: Drive security projects, system transformations, and respond to emerging threats. What You Bring: Proven background ...

within highly regulated environments. Desirable Skills Cloud connectivity within OT environments (Azure or AWS). Industrial IoT (IIoT) technologies. Experience with OT monitoring and threat detection platforms. Relevant certifications such as: GICSP CISSP TOGAF ISA/IEC 62443 certifications Azure Security certifications IR35 Status: Inside IR35 ...

storage costs without losing security coverage Build and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection Monitor and resolve pipeline and SIEM issues, and report ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. Essential: * Proven experience in Software Engineering roles * Experience in some of the following technologies: o Elasticsearch … Helm o Ansible o Basic networking * Strong analytical and troubleshooting skills * Willingness to learn new technologies * Attention to detail Advantageous: * Experience in SIEM Detection Engineering. * Experience of On Premise SIEM solutions * Experience with log source onboarding and normalisation * Knowledge of Linux, Windows and Network Administration * Knowledge and experience ...

solution designs, perform architectural assurance, and guide teams through implementation challenges. * Security & Compliance Implement security controls including IAM policies, encryption, network segmentation, monitoring, and threat detection. Ensure compliance with regulatory requirements (e.g., GDPR, ISO27001, PCI DSS) through AWS-native tools and architectural controls * Infrastructure as Code (IaC ) Lead ...

hybrid DNS design (AWS Route 53, Azure DNS) and cloud IPAM integration. DNS security experience, including DNSSEC, DNS Firewalling and logging for threat detection. Certifications Vendor certification desirable (BlueCat, Infoblox or equivalent). Network certification such as CCNP desirable. Automation or cloud certification a plus (for example ...

incident response capability by developing, maintaining, and continuously improving cyber security playbooks, procedures, and associated documentation. You'll work closely with incident responders, detection engineers, and wider cyber teams to ensure processes are clear, repeatable, and aligned with best practice. You'll support the full incident lifecycle - from preparation … during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

some C# or .NET coding. Please note: this is an engineering role, not a cyber security role. If your background is mainly vulnerability management, threat detection, SOC or penetration testing, this won't be the right fit. Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy ...