18 of 18 Contract Threat Detection Jobs in the UK

clients protect critical services, systems, and data against evolving cyber threats. The successful candidates will play a key role in security monitoring, incident response, detection engineering, and threat analysis, working alongside Security Operations, Threat Intelligence, and Incident Response teams. You will act as a cyber security subject … matter expert, helping to strengthen defensive capabilities while contributing to the continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud ...

World Class Defence Organisation is currently looking to recruit a Cyber Threat Operations Specialist subcontractor on an initial 12 month contract.You do not need to hold any current security clearance in order to apply. However, SC security clearance will be required prior to starting the position , with DV clearance … background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote working: Onsite ...

Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing environments. … This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat Intelligence ...

Cyber Security Engineer to join a growing Cyber Security Operations function. This is a fantastic opportunity to work on large-scale security tooling, detection capabilities and SOC technologies within a complex, highly secure environment. You'll play a key role in enhancing security visibility, improving detection capabilities … ongoing evolution of cyber defence tooling. What You'll Be Doing Supporting and improving SOC security tooling and capabilities Managing and optimising SIEM and threat detection platforms Developing and enhancing automation and security playbooks Supporting tool integrations, data onboarding and log ingestion Investigating security events and improving detection ...

Lead integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry. . Design and optimise KQL queries to support effective threat detection and investigation. . Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases. . Develop … data normalisation logic. . Strong knowledge of KQL (Kusto Query Language), advanced query development and optimisation. . Experience designing, building and tuning analytic rules, detection logic and threat use cases. . Experience developing Logic Apps, Playbooks and SOAR automation workflows. . Experience implementing CI/CD pipelines using ...

utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

Cyber Security Engineer to support the Cyber Security Capability Manager in ensuring Digital Excellence UK meets the challenges and demands of countering the Cyber Threat . To work with other UK Cyber Security members, the role will cover back-end refresh, playbook scripting and fault finding, Cyber Security tool … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK network SOC Threat Detection Analyst key responsibilities are: Accountable for the effective ...

client has an opportunity for a Cyber Threat Operations Specialist to join them on a contract basis for 12 months with possible extension. You will be supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant … will drive a proactive ethos in an ever-changing cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Role : Cyber Threat Operations Specialist Location : Stevenage - fully onsite Hours : Shift pattern ...

organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations … triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security ...

scalable, and resilient. Splunk Engineering & Security Monitoring Develop and maintain security monitoring capabilities using Splunk. Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility. Support log ingestion, optimisation, data onboarding, and security analytics. Collaborate with SOC and Threat Intelligence teams to improve ...

role leads the design, implementation, administration, and optimisation of Proofpoint security solutions within a large enterprise environment, bringing deep expertise across email security, threat protection, DLP, and email authentication technologies to protect against phishing, malware, and advanced email-based threats. Key Responsibilities Serve as the engineer for the Proofpoint … platform, designing, deploying, configuring, and maintaining solutions including Proofpoint Email Protection (PEP), Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Email Fraud Defense (EFD), and Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat detection rules, configuring and maintaining email authentication ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: Serve … platform and related email security technologies. Design, deploy, configure, and maintain Proofpoint solutions, including: Proofpoint Email Protection (PEP) Proofpoint Targeted Attack Protection (TAP) Proofpoint Threat Response Auto-Pull (TRAP) Proofpoint Email Fraud Defense (EFD) Proofpoint Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat ...

/12/2026 Clearance: Active SC Role Description: SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like ArcSight, Splunk, or QRadar. Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats. Incident Response - Work with security teams to analyze and mitigate security incidents. … Custom Rule Creation - Develop and fine-tune detection rules and alerts to identify malicious activities. Security Reporting - Generate reports on security events, trends, and system performance. Collaboration - Work with IT and security teams to improve overall cybersecurity posture. Required Skills & Qualifications Technical Expertise - Strong knowledge of SIEM platforms, network ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...

platforms and technologies, including but not limited to: SIEM (Security Information and Event Management) Network Packet Capture platforms Anti-malware and malicious-code protection Threat detection technologies Security monitoring and analysis platforms Core responsibilities include: Maintain accurate mapping and topology of SOC toolsets, including integrations, connections and data ...

Cyber Security Engineer to support the Cyber Security Capability Manager in ensuring Digital Excellence UK meets the challenges and demands of countering the Cyber Threat Cover back-end refresh, playbook scripting and fault finding, Cyber Security tool upgrades, capability implementation, tool integration, data source on-boarding and investigation activity … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. Your skillset may include: Strong coding and scripting background - PowerShell, Python & Regex Proven ...

across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects … environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme governance ...

/CD Pipelines Security & Networking Web Application Security Bot Management API Security DDoS Protection Data & Analytics SQL/Athena Query Development Log Analytics Threat Detection Data Visualisation KPI and Operational Reporting Preferred Qualifications AWS Certified Security Specialty AWS Certified Solutions Architect Professional AWS Advanced Networking Certification Experience delivering ...