21 of 21 Permanent Threat Detection Jobs in the Midlands

Engineer and play a pivotal role in defending clients against evolving cyber threats. You will leverage your expertise in SIEM platforms, threat detection, and incident response to strengthen security operations center (SOC) capabilities. Collaborating with cross-functional teams, you’ll develop automated playbooks, engineering use cases, and deploying … advanced detection systems to ensure robust protection in a fast-paced, real-time environment. Core Responsibilities SIEM Engineering & Analytics Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.Normalize and onboard diverse log sources from cloud and on-premises environments ...

National Gas Transmission PLC is seeking a SOAR Engineer to join the Cyber Threat Detection team in the UK. You will enable CSIRT threat detection, automate responses, and mature security posture through orchestrated playbooks and analytics. The role involves developing content for SOAR and SIEM, analyzing ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. The role is hybrid (3 days in office) & based in Birmingham What you’ll be doing … scope of data ingestion. Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with ...

network for a clean energy future. Join us and help secure Britain's energy. About the role: A crucial part of our Cyber Threat Detection team, the SOAR Engineer (security orchestration and automated response) ensures that National Gas can continuously keep up-to-date with new and emerging … more effective. Mature the cyber security posture of the business by leveraging automation and orchestrated response. Key accountabilities: Subject Matter Expert for all things Threat Detection and security automation across the business. Analyse workflows and create automations to improve speed and efficiency. Develop tailored automations and enrichments ...

cloud-hosting platform used across a major public-sector programme. This is a senior, hands-on architecture role covering cloud integration, identity security, DevSecOps, threat monitoring and technical assurance. The Role You will provide architecture leadership across the AWS platform, helping onboard new applications and ensuring that security, integration … into Terraform and CI/CD pipelines. Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud. Support threat detection through centralised logging, tailored alerts and anomaly monitoring. Share knowledge and provide technical guidance to engineering teams. Requirements: Strong AWS cloud ...

SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team. Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration with Security ...

complex cyber landscape. We're looking for an experienced Cyber Security Analyst Tier 2 to join our Cyber Security Operations Centre (CSOC), providing advanced threat detection, investigation and response services while acting as an escalation point for our Tier 1 analysts. As a Tier 2 Cyber Security Analyst … events, and helping to continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor for Tier 1 analysts ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

cybersecurity risk and vulnerability management.Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response.Good understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark etc.). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti-virus, vulnerability management, and encryption. Ability to think critically under pressure ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

join a collaborative cyber security team where you'll lead complex investigations, strengthen security controls and influence how we defend against an evolving threat landscape. You'll work across cloud, identity, endpoint, network and data security while partnering with technical and business teams to continuously improve our security capability. … have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. Vulnerability Management ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. This role is based in BT's Birmingbam office & requires 3 days in office. What … Doing Data Ingestion and Enrichment: Configure Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development: Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules, alerts ...

seamlessly align with our clients' operational, regulatory, and security requirements. We leverage cutting-edge cybersecurity technologies, alongside AI and Generative AI capabilities, to enhance threat detection, automate security operations, and protect sensitive workloads, including AI-driven applications and data pipelines, across complex cloud environments. Headquartered in Birmingham, METCLOUD ...

United Kingdom. You will bring a minimum of five years' SOC experience, mentor junior staff, and contribute to rapid incident response and threat detection. This role emphasizes hands-on SIEM work (Splunk, MS Sentinel), log analysis (Wireshark), and strong knowledge of Windows and Linux systems, networking, encryption and vulnerability ...

hands-on in incident investigation and response across enterprise, cloud, and OT environments. The Cyber Security Lead will be responsible for driving improvements in detection, automation, and SOC processes within a complex technology landscape, balancing technical expertise with strategic planning and team management.## Key Responsibilities* Lead and mentor … team, providing guidance and technical direction* Actively participate in incident investigation and response, including across enterprise, cloud, and OT environments* Drive improvements in detection, automation, and SOC processes to enhance the overall security posture* Collaborate with cross-functional teams to identify and address security risks and vulnerabilities* Develop ...

emerging manufacturing technologies. Develop and maintain OT cyber security testbeds that demonstrate industry best practice in areas such as asset management, network monitoring and threat detection. Design and implement secure‐by‐design IT and OT infrastructure architectures for both internal and customer‐facing projects. Work with industry partners ...

seamlessly align with our clients’ operational, regulatory, and security requirements. We leverage cutting-edge cybersecurity technologies, alongside AI and Generative AI capabilities, to enhance threat detection, automate security operations, and protect sensitive workloads, including AI-driven applications and data pipelines, across complex cloud environments. Headquartered in Birmingham, METCLOUD ...

BT Group in Birmingham is seeking a SIEM Application Engineer to support the development, deployment and operation of BT's strategic SIEM. You will design and maintain ingestion pipelines using Elasticsearch, Logstash and Kibana, and ...

join a collaborative cyber security team where you'll lead complex investigations, strengthen security controls and influence how we defend against an evolving threat landscape. You'll work across cloud, identity, endpoint, network and data security while partnering with technical and business teams to continuously improve our security capability.If … have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access and Privileged Access.Data Loss Prevention (DLP) technologies and policy management.Vulnerability Management and security hardening.Security architecture ...