1 to 25 of 108 Permanent Threat Detection Jobs in England

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join … experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling. What ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … Mizuho information assets and services. Assess and recommend security controls during design and implementation of new projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Senior SOC Analyst - Detection Engineering (SC Cleared) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Senior SOC Analyst to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

support Security Operation Center (SOC) service delivery. Automation is a key target in our response activities, and your ideas will help drive our threat detection capabilities to a new dimension to secure our world-class enterprise.HOW YOU WILL CONTRIBUTE TO THE TEAMInvestigate SOC alerts and manage the full … technical host forensic analysis and reverse-engineering.Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.Drive the continuous improvement ...

background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote working: Onsite … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing … experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security monitoring, threat detection and SOC operations. Ability to work independently ...

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence, and support ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...

threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making. Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation. Support security control implementation and monitoring approaches … networking, or technology risk. Awareness of security standards, regulatory compliance, data privacy, data protection, security governance, and risk management concepts. Familiarity with security monitoring, threat detection, vulnerability management, incident response, endpoint protection, network security, or identity and access management concepts. Exposure to security tools, platforms, or operational processes ...

closely with security engineers and SOC analysts, you will design, build and operationalise AI-powered workflows that integrate with security tooling and help accelerate threat detection and response. You'll bring strong AI engineering expertise, with hands-on experience building production-ready LLM applications, agentic workflows … exciting point in the evolution of defensive cyber operations, with AI playing an increasingly important role in responding to a rapidly evolving threat landscape. We're looking for innovative, practical engineers who want to apply their AI expertise to this challenge. ResponsibilitiesLLM Configuration: Configure, evaluate and tune large language ...

helping configure solutions, explore technical capabilities, and validate how different systems connect and exchange security-related information. Key Responsibilities Configure and support SAP Enterprise Threat Detection (ETD) and associated SAP environments. Support the technical and functional implementation of SAP security monitoring capabilities. Explore and validate different configuration options … transition from initial testing and proof of concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding ...

helping configure solutions, explore technical capabilities, and validate how different systems connect and exchange security-related information. Key Responsibilities Configure and support SAP Enterprise Threat Detection (ETD) and associated SAP environments. Support the technical and functional implementation of SAP security monitoring capabilities. Explore and validate different configuration options … transition from initial testing and proof of concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding ...

Enablement: Define and govern data modelling standards and semantic layer design principles that enable consistent, discoverable and trusted data products, supporting self-service analytics, threat investigation and decision-making across security teams. Engineering Excellence and Documentation: Champion engineering excellence by driving coding standards, testing frameworks, peer review practices … communicate complex technical concepts, architectural decisions and data strategies to both technical and non-technical audiences. Knowledge of cybersecurity principles, security operations and threat detection use cases, with experience applying data and analytics solutions to support cybersecurity outcomes.Strong communication skills, both written and verbal to effectively engage with ...

data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear … data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence … Experience Incident Response Leadership skills. Relevant experience in managing and oversee/coordinate Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking ...

opportunityWe are seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve … internal owner of both our Security Information and Event Management (SIEM) platform and our managed Security Operations Centre (SOC). You will define our detection strategy, hold our service provider to the highest standards and lead our response to security incidents. You will also be accountable ...

candidate will play a key role in developing, tuning and maintaining security detections, ensuring the SOC receives high-fidelity, actionable alerts that support effective threat detection and response. The Role As a SOC Analyst, you will focus on the development, validation and optimisation of detection content within … Microsoft Sentinel. Working alongside SOC analysts, security engineers and technical stakeholders, you will help improve threat visibility, reduce false positives and ensure monitoring requirements are translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability ...

fintech is growing its Information Security team and is looking for a Senior Security Operations Analyst. Senior Security Operations Analyst (SOC/SIEM/Threat Hunting) £55,000 - £65,000 + Bonus + excellent benefits Manchester or Leeds (Hybrid) About the role You'll protect key business assets … monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define ...

driving cloud security modernization and embedding security-by-design principles into every project. Your expertise will empower our organization to confidently navigate an evolving threat landscape. Key Responsibilities Define and own the enterprise Zero Trust security strategy and roadmap, leading security transformation programs across Azure, AWS, hybrid cloud … leveraging ZTNA, SASE, SDPs, and micro-segmentation strategies to reduce attack surface and lateral movement risks. Provide architectural leadership for security operations including monitoring, threat detection, incident response, and threat hunting. Drive integration with tools like Microsoft Sentinel, Defender, CrowdStrike Falcon, and Splunk. Manage security governance frameworks ...