8 of 8 Permanent Threat Detection Jobs in the City of London

leading Financial Services client in the City of London is looking for a Senior Cyber Threat & Vulnerability Manager to lead its cyber threat, vulnerability, penetration testing and exposure management capabilities. This is a senior, hands-on role within the CISO function, focused on identifying and responding to emerging … business. The role offers a base of circa £110,000 + excellent benefits with very flexible working. Key Responsibilities Lead the end-to-end Threat, Vulnerability and Exposure Management function. Drive the prioritisation and remediation of high and critical vulnerabilities, including zero-day and actively exploited threats. Own penetration ...

correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning Identifying gaps in detection coverage and response processes Mentoring and supporting SOC Analysts Acting as the senior escalation point … incident response simulations What we're looking for We're particularly interested in candidates with: 5–10 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment ...

Doing Lead the investigation and response to medium and high-severity security incidents. Act as the escalation point for complex cyber security events and threat activity. Conduct root cause analysis and produce detailed incident reports. Coordinate containment, eradication and recovery activities with technical teams. Correlate data across SIEM … other security platforms to build comprehensive incident assessments. Support detection engineering by identifying gaps in monitoring, alerting and response processes. Provide technical leadership and mentorship to SOC analysts. Participate in incident response exercises and continuous improvement initiatives. Take operational ownership of the SOC during your shift ...

governance initiatives, including machine-learning-based anomaly detection. - Integrate and optimise multi-factor authentication, biometrics, and mobile identity capabilities. - Drive adoption of identity threat detection and response (ITDR) solutions. - Develop and maintain IAM architecture covering identity lifecycle, governance, and privileged access. - Design secure authentication and authorisation patterns (OpenID ...

environments usi ng Elas tic a nd Spl unk Investigate, triage and respond to security incidents in line with established playbooks and SLAs Perform threat hunting and proactive analysis to identify malicious activity. Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour Escalate incidents … where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support major incident response when required Contribute to the continuous ...

Microsoft Sentinel and Microsoft Defender XDR. Good understanding of the Microsoft Defender suite, including Defender for Endpoint. Knowledge of Microsoft 365 security from a threat detection and response perspective. Key Responsibilities Monitor, triage and respond to security alerts across managed customer environments. Investigate security events and perform first ...

Group's security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept ...

security incidents. Support containment, eradication and recovery efforts in partnership with technical stakeholders. Produce detailed incident reports and recommendations. Tune and optimise SIEM and detection rules to improve threat visibility. Identify opportunities to strengthen detection capabilities, processes and response playbooks. Provide mentoring and technical guidance to junior …/7 shift-based SOC function. What We're Looking For 3+ years' commercial experience within a SOC, Incident Response or Threat Analysis environment. Strong understanding of cybersecurity operations, incident response methodologies and threat investigations. Hands-on experience with SIEM and EDR platforms. Knowledge of malware behaviour, attack ...