101 to 125 of 153 Threat Detection Jobs in England

Doing Lead the investigation and response to medium and high-severity security incidents. Act as the escalation point for complex cyber security events and threat activity. Conduct root cause analysis and produce detailed incident reports. Coordinate containment, eradication and recovery activities with technical teams. Correlate data across SIEM … other security platforms to build comprehensive incident assessments. Support detection engineering by identifying gaps in monitoring, alerting and response processes. Provide technical leadership and mentorship to SOC analysts. Participate in incident response exercises and continuous improvement initiatives. Take operational ownership of the SOC during your shift ...

security controls and tools required to meet policy and compliance requirements. We are looking for candidates who have a passion for cyber security, threat detection, risk mitigation, and response. You will be a key part of our efforts to build and support a defensible environment where … cybersecurity architecture and risk objectives Evaluate new and emerging threats against existing security controls; ensuring controls remain effective to meet business objectives Translate threat intelligence and risk assessments into engineering roadmaps Review the designs of proposed major applications and upgrades for compliance with security architecture; deliver cross team security ...

working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies ...

award-winning UK fintech. They're looking for a Senior Security Operations Analyst to sit at the heart of their Information Security function, owning threat detection and incident response at real scale. Senior Security Operations Analyst Salary - £54,000 - £65,000 + bonus Location - Manchester or Leeds - Hybrid … opportunity SIEM - write and tune detection rules, investigate alerts end-to-end, and collaborate with Infrastructure, Networks, DevOps and an outsourced SOC. Threat intelligence & hunting - monitor intelligence from multiple sources, identify trends and emerging threats, and lead coordinated hunting activity. Incident response - analyse, contain, and remediate security incidents ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches.You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture inputs … opportunities.Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.• Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies.• Understand threat modelling, attack ...

Azure Key Vault.Data Security Posture Management and Data Governance tools such as Microsoft, Varonis and BigID for data discovery, classification, access monitoring, and threat detection across structured and unstructured environments.Experience working in a digital transformation environment supporting the definition of data security architecture leveraging cloud native and/ ...

with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update incident response documentation and procedures Contributing to threat intelligence reviews and sharing findings with stakeholders Preparing reports and presentations on security incidents and trends Staying up-to-date with emerging cyber threats ...

still evolving. You'll have the opportunity to: Lead AI Security and broader cyber security assessments Advise senior stakeholders on AI-related cyber risk Threat model LLM applications, AI agents and agentic workflows Assess risks around prompt injection, excessive agency, data leakage, insecure tool use and model supply chains … oversight, logging and autonomous actions Advise organisations on secure adoption of AI across their technology estate Identify opportunities to safely use AI across SOC, threat detection, vulnerability management and incident response Shape client propositions, bids and new AI Security offerings Lead and mentor consultants within engagements Work alongside ...

discuss flexible working!Top 3 skills needed for this role:Highly experienced Cyber Security Operations expertiseAdvanced security incident response capabilityProven security tooling and threat management knowledgeWhat this role is all about:We're looking for a Senior Security Operations Engineer to play a leading role in Vitality's cyber … security documentation, operational procedures and incident response playbooksSupport penetration testing activities and coordinate the remediation of identified findingsContribute to the ongoing enhancement of monitoring, detection and response processes across the Security Operations functionYou will keep up to speed with emerging threats, vulnerabilities and industry developments to support continuous improvement ...

flexible working! Top 3 skills needed for this role: Highly experienced Cyber Security Operations expertise Advanced security incident response capability Proven security tooling and threat management knowledge What this role is all about: We're looking for a Senior Security Operations Engineer to play a leading role in Vitality … operational procedures and incident response playbooks Support penetration testing activities and coordinate the remediation of identified findings Contribute to the ongoing enhancement of monitoring, detection and response processes across the Security Operations function You will keep up to speed with emerging threats, vulnerabilities and industry developments to support continuous ...

from incidents, operational activity and service development. Identify and manage technical security risks, vulnerabilities and appropriate mitigations. Develop and maintain security monitoring, vulnerability and threat-detection tooling. Provide technical guidance, assurance and mentoring to operational teams, projects and colleagues. Essential skills Strong experience designing and implementing technical security … Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure environments. Strong analytical and problem-solving skills, including threat analysis and security incident response. Ability to manage priorities, communicate technical risks clearly and demonstrate leadership through coaching or mentoring. Desirable criteria Experience working across both cloud ...

Copilot. You will be in the office 3 days a week. What you'll bring: A minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using ...

Police Digital Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology ...

NIST benchmarks.Identity & Access Security: Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce ...

senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve vulnerability management and threat detection Support secure design and architecture across infrastructure and cloud changes Enhance and manage key security tooling and controls Work closely with IT, infrastructure ...

governance initiatives, including machine-learning-based anomaly detection. - Integrate and optimise multi-factor authentication, biometrics, and mobile identity capabilities. - Drive adoption of identity threat detection and response (ITDR) solutions. - Develop and maintain IAM architecture covering identity lifecycle, governance, and privileged access. - Design secure authentication and authorisation patterns (OpenID ...

operational improvements, and decision-making.Experience implementing business intelligence tools and data-driven KPIs.Cybersecurity & GovernanceBackground in implementing cybersecurity strategies across enterprise and operational domains.Experience in threat detection, and incident response.Knowledge of regulatory requirements and governance frameworks (e.g., ISO 27001, NIST).Budgeting & Resource AllocationStrong financial management skills, including budgeting, forecasting ...

certification. Main Responsibilities: Implement, manage and actively monitor security controls across email, web, endpoint and cloud environments.Monitor and respond to security incidents using advanced threat detection tools.Day-to-day administration of Netskope web filtering platform including website unblocks and policy updates.Day-to-day administration of Mimecast email filtering ...

employ constructive and flexible approach to building innovative solutions.You may be a good fit if:5+ years previous experience in SecOps, DevSecOps, Cloud Security, Threat Detection & Response or software development with a strong focus on security tool onboarding and optimizationYou’re a hands-on security engineer interested ...

environments usi ng Elas tic a nd Spl unk Investigate, triage and respond to security incidents in line with established playbooks and SLAs Perform threat hunting and proactive analysis to identify malicious activity. Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour Escalate incidents … where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support major incident response when required Contribute to the continuous ...

ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including LAN/… standards Support disaster recovery and business continuity planning, testing, and readiness activities Key Experience & Skills: Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing ...

provisioning and de-provisioning of accounts.Implement and maintain identity governance controls aligned to corporate policy.Monitor authentication behaviour across all users and systems to support threat detection and response.Specialist Identity CapabilitiesManage workload identities, including non-user accounts and credential rotation.Own privileged identity management processes, ensuring secure control of administrative … platforms such as Entra ID and Active Directory.Experience across identity lifecycle management, governance, and privileged access.Understanding of modern authentication methods and identity threat landscape.Extensive cybersecurity experience with a strong focus on identity management.Proven leadership experience managing global teams and security programmes.Relevant certifications such as CISSP, CISM, or Microsoft security ...

security risk analysis and resolution. Reporting to the DevOps Lead, you’ll help define security testing requirements, implement policy-as-code solutions, and integrate threat detection and gating into CI/CD pipelines to ensure secure and reliable software delivery. This role is currently completely remote from … first culture across development teams and the SDLC.• Lead the implementation of remediation efforts for identified risks and vulnerabilities, including patch management.• Collaborate on threat modeling exercises within development and DevOps teams.The skills and experience you needWe are looking for someone who:• Has knowledge of cyber security architecture within ...

provisioning of accounts. Implement and maintain identity governance controls aligned to corporate policy. Monitor authentication behaviour across all users and systems to support threat detection and response. Specialist Identity Capabilities Manage workload identities, including non-user accounts and credential rotation. Own privileged identity management processes, ensuring secure control … platforms such as Entra ID and Active Directory. Experience across identity lifecycle management, governance, and privileged access. Understanding of modern authentication methods and identity threat landscape. Extensive cybersecurity experience with a strong focus on identity management. Proven leadership experience managing global teams and security programmes. Relevant certifications such ...

developers. You will sit at the intersection of corporate security, federal compliance, and data analytics, translating complex risk matrices into actionable developing and behavioral detection mechanisms. You will lead a personnel security program and oversee the execution of the end-to-end clearance management process and will serve … benefits Learn more about benefits at Google. Minimum qualifications: Bachelor's degree or equivalent practical experience. 7 years of experience in personnel security, insider threat programs, counterintelligence, or behavioral risk investigations (including cybersecurity equivalents). 5 years of experience in people management leading cross-functional teams. Experience with U.S. ...