1 to 25 of 49 Permanent Threat Detection Jobs in the North of England

Title: Senior Cyber Threat Detection and Response AnalystLocation: Any of our main UK locations + Hybrid Working ArrangementsCompensation: Competitive + BenefitsRole Type: Full time/PermanentRole ID: SF75113At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play … your part as a Senior Cyber Threat Detection and Response Analyst at any of our main UK locations.The roleAs a Senior Cyber Threat Detection and Response Analyst, you’ll be a technical leader within our Cyber Security Operations capability, driving advanced threat detection, cyber ...

Senior Security Engineer - Monitoring & Detection Hybrid Working (Bristol, London, Manchester or Swansea) £55,000 - £85,000 + Benefits Active SC Clearance Required Join a Team Protecting Critical Digital Services We're looking for an experienced Senior Security Engineer - Monitoring & Detection to play a key role in securing large … scale, cloud-based environments supporting critical public sector and government services. This is a hands-on engineering role focused on threat detection, SIEM engineering, security monitoring, log management, and SOC optimisation . You'll design and enhance detection capabilities, improve security visibility, and ensure organisations can rapidly ...

About the Team Join the team protecting the UK's world-leading education and research sector from an ever-evolving cyber threat landscape. Jisc's Security Operations Centre (SOC) plays a critical role in safeguarding the Janet Network, the UK's National Research and Education Network, which connects more … than 20 million users across universities, colleges and research organisations. Combining cutting-edge security technologies, threat intelligence and specialist expertise, we provide 24/7 protection, rapid incident response and advanced threat detection to help our members stay secure and resilient. Security Centre brings together Cyber Security ...

impact. The Team The Team is responsible for defining and implementing our cyber security strategy, engineering modern security solutions, driving cloud security initiatives, strengthening threat detection capabilities, and supporting the organisation's wider digital transformation programme. We operate in a supportive and knowledge-sharing environment where innovation, continuous … recommend improvements to strengthen our security posture. You will support the implementation of Zero Trust security principles across the organisation. You will enhance threat prevention, detection, and response capabilities through security engineering best practices. Cloud Security You will design and implement security controls within Microsoft Azure and hybrid ...

manage and maintain security tooling and infrastructure across on premise and cloud environments, embedding secure by design principles o Carry out routine vulnerability assessments, threat analysis and horizon scanning to identify and mitigate emerging risks o Serve as a technical escalation point for complex security issues, contributing expert analysis … Please see job description attached for full list of responsibilities. Person Specification Knowledge Desirable Knowledge of Microsoft Defender, Sentinel, including Kusto Query Language (KQL), threat hunting, analytics rule development, security monitoring, incident investigation and automation capabilities. Education/Qualifications Essential Holds highly developed specialist knowledge and expertise acquired through ...

before production releases. Make sure environments are configured securely, verify controls and oversee technical change so access and data are handled appropriately. Monitor threat intelligence for company exposure, review emerging threats, and share relevant intelligence with stakeholders. Lead the response to security incidents, coordinating investigations and root cause analysis … producing clear and accurate reports for internal and external stakeholders. Own our security monitoring capability, ensuring effective logging across key platforms and improving detection while preventing alert storms and false positives. Own the penetration testing and vulnerability management programme – not just detecting vulnerabilities, but risk‐assessing them, deciding what ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...

effective remediation solutions Monitor and configure security tools - global EDR/XDR policies, blocklists, and automated containment rules including SIEM, EDR and respond to threat detection alerts. Maintain and enhance security monitoring capabilities through effective integrations and optimisation of security tooling, ensure effective data collection and eliminate visibility … secure day-to-day operations. Skills, Qualifications, And Experience Previous hands-on experience in cybersecurity operations or security engineering roles. Experience of security monitoring, threat detection, incident response, and threat hunting methodologies. Strong working knowledge of endpoint security, identity and access management, authentication controls, privileged access management ...

role in protecting their systems, networks and data. This is a hands-on position offering the opportunity to work across cyber security, infrastructure, cloud, threat detection and incident response within a small, technically capable IT team. The Role As Cyber Security & Infrastructure Engineer, you will be responsible … security, resilience and operational performance. Key Responsibilities Monitor security alerts, investigate potential incidents and lead incident response activities Conduct forensic investigations and contribute to threat detection and intelligence activities Develop and refine security monitoring, detection rules and use cases Carry out vulnerability scanning and support remediation ...

team. This is a dual‐focused position combining hands‐on technical expertise with day‐to‐day operational leadership, ensuring high‐quality delivery of managed detection and response services across a diverse customer base. You'll lead SOC operations, act as the escalation point for complex security incidents, and mentor … team. This is a dual‐focused position combining hands‐on technical expertise with day‐to‐day operational leadership, ensuring high‐quality delivery of managed detection and response services across a diverse customer base. You'll lead SOC operations, act as the escalation point for complex security incidents, and mentor ...

controls, and working collaboratively across technology, security and operational teams. You'll play a key role in maintaining and developing our security tooling, improving threat detection capabilities, and ensuring our security operations remain effective in an evolving threat landscape. Key Responsibilities Manage, maintain and develop the Elastic … SIEM platform. Improve security monitoring, detection and response capabilities. Support Security Operations Centre (SOC) and Network Operations Centre (NOC) activities. Design and enhance security controls across AWS and Azure environments. Support Data Loss Prevention (DLP) initiatives and associated controls. Deliver log ingestion, transformation, normalisation and integration activities. Work closely ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

date with the latest releases and best practices. Experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel … such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement initiatives. Developing reusable implementation patterns, standards and automation to improve consistency and security across projects. Managing software configuration, source ...

Lloyds Banking Group is seeking a Lead Detection & Response Engineer in Edinburgh/Bristol/Leeds/Manchester to defend one of the UK's largest organisations against cyber threats. You will lead complex investigations, detect malicious activity and enhance detection and response capabilities while guiding a team … security engineers. You'll work hands-on in threat detection, incident response and continuous improvement, collaborating with engineers across the Cyber Defence Centre and supporting #J-18808-Ljbffr ...

Lloyds Banking Group is seeking a Lead Detection & Response Engineer in Edinburgh/Bristol/Leeds/Manchester to defend one of the UK's largest organisations against cyber threats. You will lead complex investigations, detect malicious activity and enhance detection and response capabilities while guiding a team … security engineers. You'll work hands-on in threat detection, incident response and continuous improvement, collaborating with engineers across the Cyber Defence Centre and supporting #J-18808-Ljbffr ...

telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams. Coordinate vulnerability management activities across endpoints, servers, cloud services … findings, assessing risk, assigning remediation actions, tracking progress, and escalating overdue or high-risk vulnerabilities Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams. Maintain ...

Manchester to join a high-performing security function protecting a critical national infrastructure environment. This role is hands-on, focusing on security monitoring, tooling, threat detection and collaborating with technology, security and operations teams. You will maintain and enhance our Elastic SIEM and security controls across ...

technical, hands-on role where you’ll play a key part in protecting critical systems and data, while driving improvements across security operations, threat detection and incident response. You’ll work with technologies including Microsoft Sentinel, Security Copilot and Azure, collaborating with internal IT teams and an outsourced … ahead of emerging threats, including AI and automated attack methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security ...

Your Role: As a Cyber Security Specialist, you will work within a multi-disciplinary security team delivering a broad range of services, including threat detection and response, vulnerability scanning, dark web monitoring, social engineering assessments, and security reporting. You will act as a technical escalation point for complex … diverse client base. The role also involves developing and maintaining security tooling and integrations, while supporting the adoption of AI-driven capabilities to improve threat detection and response. Working closely with internal teams and customers, you will ensure effective incident resolution and vulnerability compliance, while staying ...

cloud-hosting platform used across a major public-sector programme. This is a senior, hands-on architecture role covering cloud integration, identity security, DevSecOps, threat monitoring and technical assurance. The Role You will provide architecture leadership across the AWS platform, helping onboard new applications and ensuring that security, integration … into Terraform and CI/CD pipelines. Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud. Support threat detection through centralised logging, tailored alerts and anomaly monitoring. Share knowledge and provide technical guidance to engineering teams. Requirements: Strong AWS cloud ...

Morson Human Resources Limited in the United Kingdom is seeking a Cyber Security Specialist to join a multi-disciplinary security team. You will deliver threat detection and response, vulnerability scanning, dark web monitoring, social engineering assessments, and security reporting for a diverse client base. You will develop … maintain security tooling and integrations, support AI-driven capabilities to improve threat detection, and act as a technical escalation point for complex incidents. #J-18808-Ljbffr ...

About the Team Join the team protecting the UK's world-leading education and research sector from an ever-evolving cyber threat landscape. Jisc’s Security Operations Centre (SOC) plays a critical role in safeguarding the Janet Network, the UK's National Research and Education Network, which connects more … than 20 million users across universities, colleges and research organisations. Combining cutting-edge security technologies, threat intelligence and specialist expertise, we provide 24/7 protection, rapid incident response and advanced threat detection to help our members stay secure and resilient. Our Security Centre brings together Cyber ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI‐driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities. Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp) Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp) Good communication, project management, and organisational skills, with a high level of attention to detail. Ability ...