1 to 25 of 72 Permanent Threat Detection Jobs in London

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high … impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid/remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea to deployment Innovation-driven : Develop ...

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high … impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid/remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea to deployment Innovation-driven : Develop ...

data. As a Security Operations Engineer, you’ll primarily be working on monitoring, investigating and responding to security events while helping to strengthen our detection and response capabilities through continuous engineering and automation improvements. Working closely with Security, Engineering and Technology teams, you’ll combine operational analysis with hands … engineering, using Splunk, automation and AI to improve threat detection, streamline investigations and enhance our overall security posture. You’ll optimise our security tooling, improve detection capabilities and support incident response across the business through threat hunting, continuous improvement and meaningful reporting that enables informed security ...

Threat Detection Engineer - Permanent - SOC, KQL, Active Directory, Powershell, Python - Hedge Fund Our Hedge Fund clients SOC is going through a transformation, we are looking for an experienced Threat Detection Engineer to drive our best-in-class posture. This is a highly technical role, and successful … candidates will have demonstrable knowledge and experience across a range of business and security technologies within a fast-paced, innovative organization. Principal Responsibilities Threat Hunting - The ability to leverage multiple data sources to identify modern evolving threats and develop new detection and response approaches. Detection Engineering - Creation ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, delivering intelligence-driven operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Intelligence Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from ...

gaps, and define pragmatic remediation roadmaps aligned to business priorities. Lead and support security architecture reviews across cloud, applications, infrastructure, IAM, data protection and detection/response domains. Provide expert consulting to customers on security strategy, risk reduction, control design, and security operating model improvements. Challenge weak security assumptions … monitoring patterns, and guardrails. Partner with engineering, platform, DevOps and operations teams to embed security into delivery pipelines and infrastructure as code practices. Support threat detection, incident response readiness, use‐case tuning, and post‐incident improvement activities. Contribute to security standards, policies, patterns, reusable accelerators, and client‐facing ...

passionate individual who enjoys building defences against today's cyber threats, targeting infrastructure, data, and employees. You should be able to analyze the current threat environment and Intigriti’s security posture, then design and implement controls in line with our risk appetite. This position requires strategic thinking, technical expertise … controls leveraging security tools, including EDR, SIEM, phishing simulation, and compliance solutions, among others. In addition, you will own and continuously improve Intigriti’s threat detection capabilities. This includes running day-to-day Security Operations Centre (SOC) activities, expanding log coverage, and building high-quality detections ...

respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible … operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI‐first approach to security, investing in areas such as AI‐assisted detection engineering, automated investigations, continuous monitoring ...

respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible … operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

critical in improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response … analysis. Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence. Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures. Interprets and synthesizes threat ...

WORK As a Senior Security Engineer focusing on anti-abuse and threat intelligence, you will lead the design and development of systems and automation to detect, mitigate, and prevent threats targeting Ripple’s staff, products, and users. This includes identifying and advising on Advanced Persistent Threats (APTs) targeting … mobile, and social platforms. You will collaborate closely with Legal, Communications, Brand Security, and third‐party vendors to build a scalable and proactive threat intelligence capability. WHAT YOU'LL DO Operationalize threat intelligence: Develop systems to detect and disseminate intelligence on threats impacting Ripple and Ripple customers. Automate ...

cyber security leader responsible for developing and executing enterprise-wide cyber defence strategies to protect critical business systems, data, and infrastructure. Leads security operations, threat detection, incident response, and cyber resilience initiatives while ensuring alignment with organisational risk management objectives. Key Responsibilities Lead and manage the Cyber Defence … function, overseeing security operations, threat intelligence, vulnerability management, and incident response capabilities. Develop and implement cyber defence strategies, policies, and procedures to protect against evolving cyber threats. Direct Security Operations Centre (SOC) activities, ensuring effective monitoring, detection, investigation, and response to security incidents. Oversee threat intelligence programmes ...

strengthen our overall cyber security posture. If you are passionate about leading high-performing teams, influencing strategic decisions and staying ahead of an evolving threat landscape, this is an opportunity to make a significant impact at a European scale. What you will do As our Director, Cyber Security (CISO … report meaningful security metrics, risk indicators and maturity measures to executive stakeholders. Strengthen cyber defence and resilience Lead our cyber defence capabilities, including monitoring, threat detection, incident response, crisis management and continuous improvement. Oversee Security Operations Centre capabilities, ensuring effective protection against evolving cyber threats. Lead executive cyber ...

Embrace the challenge of securing institutional blockchain infrastructure at scale, driving operational excellence across on-chain monitoring operations, and implementing cutting-edge detection capabilities for smart contract and digital asset security. As a Blockchain Security Operations Vice President in Cybersecurity & Tech Controls, you will contribute significantly to safeguarding … environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design of comprehensive security strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from cybersecurity threats Proactively monitor and analyze complex ...

some of the most consequential challenges in enterprise security today: AI-augmented threats, sprawling collaboration surfaces, multi-cloud delivery complexity, and the expectation that detection and response capabilities keep pace with a threat landscape that does not wait.This architecture is not greenfield. It carries two decades of accumulated … this role. The expectation is fluency and daily practice, not passing familiarity.**The ECS Domain****ECS covers the following product and capability areas:*** Email threat detection and prevention* Email security efficacy* Collaboration security* DMARC analyzer* Data platform and observability* Analysis and Response* End user application integration* Internal operations ...

CrowdStrike offers flexibility and autonomy while encouraging responsible AI adoption, experimentation, and innovation. We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers … last for current scale and the future. Lead system design and architecture decisions, including design reviews and RFC processes. Develop Go-based microservices supporting threat detection, case management, and incident response workflows, alongside RESTful APIs powering customer-facing capabilities. Take end-to-end ownership of technical initiatives, individually ...

will run SOC operations, expand log coverage, and build high‐quality detections using MITRE ATT&CK and D3FEND. You will lead incident response, threat detection, and security training, while promoting a security‐minded culture and ensuring compliance with industry standards. #J-18808-Ljbffr ...

major security transformation programme within a large enterprise environment. The successful consultant will take ownership of the Microsoft Sentinel platform, helping to improve detection capabilities, optimise existing configurations, develop new use cases, and enhance the organisation's overall security monitoring and response capabilities. This role would suit a hands … Security Engineer, Detection Engineer, SIEM Engineer, or Security Operations specialist with deep Microsoft security expertise and extensive experience working with Sentinel in complex enterprise environments. Key Responsibilities Act as the technical lead and subject matter expert for Microsoft Sentinel Review and optimise existing Sentinel deployments, analytics rules, and workbooks ...

role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI. This is a technically demanding role that combines proactive security ownership with infrastructure delivery. The successful candidate … This role is office‐based and requires five days per week on‐site presence. Key Responsibilities Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end‐to‐end Monitor, triage, and respond to security events across the environment, including log analysis, anomaly ...

across Azure, M365, and infrastructure environments Lead hardening initiatives across IAM, PAM, AD, and network security Drive security automation and DevSecOps practices Incident Response & Threat Detection Lead real‐time response to security incidents Oversee SIEM/SOAR integration, alerting, and playbooks Conduct investigations using log analysis, forensic techniques … threat intelligence Client‐Facing Security Services Provide advisory and managed security support to a portfolio of insurance clients Deliver security reviews, maturity assessments, and improvement plans Act as a trusted advisor on risk, controls, and security architecture Vulnerability & Risk Management Own scanning, assessment, and remediation across platforms Partner with ...

Description We are seeking a Security Operations Manager to lead and strengthen Frasers Group’s internal Security Operations Center (SOC), ensuring robust monitoring, detection, and response capabilities across our global retail, digital, cloud, and operational technology environments. In this role, you will manage and mentor the SOC team, providing … operational oversight. You will participate in on‐call rotations, ensuring rapid and effective response to security incidents, and maintain continuous improvement of detection and alerting capabilities to address emerging threats. Key responsibilities include: Lead and develop the internal SOC team, fostering a proactive, high‐performing security operations culture. Oversee ...

such as Wiz, Microsoft Defender, and ArmorCode. Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience: Microsoft Entra ...

excellent opportunity for someone with 2-4 years' hands-on security experience to take the next step in their career, working across threat detection, incident response, and security operations in a collaborative, fast-paced environment. Key Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support ...