1 to 25 of 94 Permanent Threat Detection Jobs in the UK excluding London

Technical Consultant - Threat Detection, Response & Intelligence Location: Hursley - On-site Security clearance: UK national with a minimum of 5 years' UK residency required Certification: Microsoft Certified: Security Operations Analyst Associate We are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join … experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling. What ...

international technology environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead … responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical teams across the business. ...

background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote working: Onsite … utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence, and support ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

Senior Cyber Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring … Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause analysis, containment, and remediation Implement, maintain, and optimise security controls ...

threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making. Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation. Support security control implementation and monitoring approaches … networking, or technology risk. Awareness of security standards, regulatory compliance, data privacy, data protection, security governance, and risk management concepts. Familiarity with security monitoring, threat detection, vulnerability management, incident response, endpoint protection, network security, or identity and access management concepts. Exposure to security tools, platforms, or operational processes ...

helping configure solutions, explore technical capabilities, and validate how different systems connect and exchange security-related information. Key Responsibilities Configure and support SAP Enterprise Threat Detection (ETD) and associated SAP environments. Support the technical and functional implementation of SAP security monitoring capabilities. Explore and validate different configuration options … transition from initial testing and proof of concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding ...

candidate will play a key role in developing, tuning and maintaining security detections, ensuring the SOC receives high-fidelity, actionable alerts that support effective threat detection and response. The Role As a SOC Analyst, you will focus on the development, validation and optimisation of detection content within … Microsoft Sentinel. Working alongside SOC analysts, security engineers and technical stakeholders, you will help improve threat visibility, reduce false positives and ensure monitoring requirements are translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability ...

fintech is growing its Information Security team and is looking for a Senior Security Operations Analyst. Senior Security Operations Analyst (SOC/SIEM/Threat Hunting) £55,000 - £65,000 + Bonus + excellent benefits Manchester or Leeds (Hybrid) About the role You'll protect key business assets … monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale. What you'll be doing SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC. Detection rules: Define ...

driving cloud security modernization and embedding security-by-design principles into every project. Your expertise will empower our organization to confidently navigate an evolving threat landscape. Key Responsibilities Define and own the enterprise Zero Trust security strategy and roadmap, leading security transformation programs across Azure, AWS, hybrid cloud … leveraging ZTNA, SASE, SDPs, and micro-segmentation strategies to reduce attack surface and lateral movement risks. Provide architectural leadership for security operations including monitoring, threat detection, incident response, and threat hunting. Drive integration with tools like Microsoft Sentinel, Defender, CrowdStrike Falcon, and Splunk. Manage security governance frameworks ...

maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine-tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents through to resolution. Provide effective monitoring and incident response capability across … practices. Support the development and maintenance of security policies, standards, and processes. Design and execute testing methods for security controls. Manage and optimise Endpoint Detection and Response (EDR) technologies. Skills & Experience Required Strong understanding of technical and network security principles. Proven ability to identify security weaknesses, vulnerabilities, and control ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

protecting and enhancing our technology environment. This is much more than a traditional security operations role. You'll work across cloud security, vulnerability management, threat detection, incident response and infrastructure protection, while also contributing to the development and improvement of our wider IT environment. Reporting directly … visibility, responsibility and the opportunity to influence how security is delivered across the organisation. From strengthening AWS and Microsoft 365 security controls to improving threat monitoring, automating processes and responding to emerging cyber threats, you'll enjoy a varied technical role where your expertise will make a difference. ...

experience with Microsoft security technologies including: Microsoft 365 Security Microsoft Entra ID Microsoft Defender Microsoft Purview Intune Azure Security Experience with incident response, threat detection and remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security frameworks and standards ...

events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection, and response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within ...

events and supporting incident response activities. Collaborating with engineering teams to embed security controls into CI/CD pipelines and infrastructure automation. Improving monitoring, threat detection, and response capabilities. Driving security improvement projects across cloud, endpoint, identity, and network security domains. Supporting compliance, assurance, and audit requirements within ...