1 to 25 of 43 Permanent Threat Detection Jobs in London

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … Mizuho information assets and services. Assess and recommend security controls during design and implementation of new projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Senior SOC Analyst - Detection Engineering (SC Cleared) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Senior SOC Analyst to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

support Security Operation Center (SOC) service delivery. Automation is a key target in our response activities, and your ideas will help drive our threat detection capabilities to a new dimension to secure our world-class enterprise.HOW YOU WILL CONTRIBUTE TO THE TEAMInvestigate SOC alerts and manage the full … technical host forensic analysis and reverse-engineering.Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.Drive the continuous improvement ...

with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing … experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security monitoring, threat detection and SOC operations. Ability to work independently ...

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence, and support ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...

closely with security engineers and SOC analysts, you will design, build and operationalise AI-powered workflows that integrate with security tooling and help accelerate threat detection and response. You'll bring strong AI engineering expertise, with hands-on experience building production-ready LLM applications, agentic workflows … exciting point in the evolution of defensive cyber operations, with AI playing an increasingly important role in responding to a rapidly evolving threat landscape. We're looking for innovative, practical engineers who want to apply their AI expertise to this challenge. ResponsibilitiesLLM Configuration: Configure, evaluate and tune large language ...

helping configure solutions, explore technical capabilities, and validate how different systems connect and exchange security-related information. Key Responsibilities Configure and support SAP Enterprise Threat Detection (ETD) and associated SAP environments. Support the technical and functional implementation of SAP security monitoring capabilities. Explore and validate different configuration options … transition from initial testing and proof of concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding ...

Enablement: Define and govern data modelling standards and semantic layer design principles that enable consistent, discoverable and trusted data products, supporting self-service analytics, threat investigation and decision-making across security teams. Engineering Excellence and Documentation: Champion engineering excellence by driving coding standards, testing frameworks, peer review practices … communicate complex technical concepts, architectural decisions and data strategies to both technical and non-technical audiences. Knowledge of cybersecurity principles, security operations and threat detection use cases, with experience applying data and analytics solutions to support cybersecurity outcomes.Strong communication skills, both written and verbal to effectively engage with ...

monitoring strategy that gets ahead of threats such as PHP vulnerabilities: a full dependency inventory, automated updates, security scanning before every release, AI-assisted threat detection and alerting, and a regular patch cycle, so fixes are planned work rather than last-minute fire drills.5. Business translation through KPIs … maintenance: experience designing security and monitoring strategies that get ahead of vulnerabilities (e.g. PHP), patches and third-party changes — dependency management, automated scanning, threat detection, API version tracking — without slowing delivery. Compliance in delivery: experience building security, privacy and regulatory requirements into delivery. Modern web architecture: strong knowledge ...

data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear … data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence … Experience Incident Response Leadership skills. Relevant experience in managing and oversee/coordinate Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking ...

opportunityWe are seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve … internal owner of both our Security Information and Event Management (SIEM) platform and our managed Security Operations Centre (SOC). You will define our detection strategy, hold our service provider to the highest standards and lead our response to security incidents. You will also be accountable ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

implementation and maintenance of IT security policies, standards and procedures. Monitor security alerts and incidents using security information and event management (SIEM) and endpoint detection and response (EDR) solutions. Maintain and improve endpoint protection and threat detection capabilities, including Microsoft Defender. Coordinate vulnerability scanning, patch management ...

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. Youll contribute to meaningful security work while developing skills that support your longer-term career in cyber security. ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. Youll contribute to meaningful security work while developing skills that support your longer-term career in cyber security. ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. Youll contribute to meaningful security work while developing skills that support your longer-term career in cyber security. ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. You'll contribute to meaningful security work while developing skills that support your longer-term career in cyber ...

scripting (PowerShell, Python). Why apply? This is an excellent opportunity to launch your career in cyber security. Youll receive hands-on training across threat detection, incident response and vulnerability management, with support to develop your skills and work towards industry certifications, all while contributing to meaningful security ...

scripting (PowerShell, Python). Why apply? This is an excellent opportunity to launch your career in cyber security. Youll receive hands-on training across threat detection, incident response and vulnerability management, with support to develop your skills and work towards industry certifications, all while contributing to meaningful security ...