151 to 175 of 307 Threat Detection Jobs in England

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

Smiths Detection , a global leader in threat detection and screening technologies for aviation, ports & borders, defense, and urban security. Our expertise is spread across 5 R&D centers, 21 Global Offices and 7 Manufacturing Sites with 3000 brilliant minds globally contributing for over 40 years … frontline which enables us to deliver the solutions needed to protect our society from any threat and illegal passage of explosives, prohibited weapons, contraband, toxic chemicals, and narcotics. Every minute of every day, our technology and talented team members help to make the world a safer place - https:/ ...

effectiveness across the environment.This role is responsible for monitoring and responding to security alerts, performing assigned operational tasks, and optimizing security tooling to improve detection quality and reduce false positives. The position operates within a centralized global security function and collaborates across regions to ensure consistent handling of security … technologies including Microsoft Defender, Zscaler, SIEM platforms (e.g. Google SecOps), and identity platforms (e.g. Azure/Entra, Okta).Hands on experience in incident response, threat detection, and vulnerability management within an enterprise environment.* Strong ability to analyze, prioritize, and respond to security alerts and vulnerabilities within the context ...

complex environments, identify material risks, diagnose issues and drive cross-functional resolution. Working knowledge of Zero Trust, least privilege, secure by design, vulnerability management, threat detection, incident response, security posture management and data loss prevention. Executive presence with the ability to connect technical performance to client trust, service ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

assess complex environments, identify material risks, diagnose issues and drive cross-functional resolution.Working knowledge of Zero Trust, least privilege, secure by design, vulnerability management, threat detection, incident response, security posture management and data loss prevention.Executive presence with the ability to connect technical performance to client trust, service resilience ...

Acting as a senior point of contact on days, supporting junior analysts during investigations. Contributing to the improvement of SOC playbooks, processes, documentation, and detection use cases. Helping identify ways to improve workflows and strengthen SOC operations. Reviewing KPIs and trends to support service improvement initiatives. Staying … date with the latest cyber threats, threat actors, and attack techniques relevant to our customers. Taking part in ongoing learning, knowledge sharing, and technical development opportunities. What Were Looking For A good understanding of networking fundamentals, including IP addressing, protocols, and traffic flows. Experience working with Windows and Linux ...

authentication, multi-factor authentication and privileged access. Lead vulnerability management activities, prioritising remediation based on risk and potential business impact. Establish effective security monitoring, threat detection and incident response arrangements. Coordinate responses to significant security incidents, ensuring a calm, structured and effective approach. Assess third-party and supplier … following areas: Network security: Secure network design, segmentation, firewalls, remote access and secure connectivity. Infrastructure and endpoint security: Server hardening, endpoint protection, endpoint detection and response, and patch management. Cloud and SaaS security: Secure cloud configurations, configuration management and cloud service protection. Identity and access management: Directory services, multi ...

governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design).Relevant certifications such … CCNP Level, Expert Level PreferredPalo Alto Firewalls – Specialist Level, Architect Level PreferredCisco Layer 2 Port SecurityNetwork Access Control including Cisco ISE, TACACS etcNetwork Detection and ResponseNetwork Encryption (Site to Site VPN's)Cisco Secure Client (ASA)Network IPS (Trellix)Network Zero Day (Trellix NX or similar)Host Zero ...

analytics, and playbooks. Experience conducting security event triage and rapid incident response. Log analysis experience (Wireshark etc.). Strong understanding of information security principles, threat detection, and remediation processes. Knowledge of Microsoft and Linux technologies, networking, anti-virus, vulnerability management, and encryption. Ability to think critically under pressure ...

Security Monitoring Advisory:Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.Access Control & Conditional Access:Assess and improve Conditional Access policies and identity management strategies, enforcing zero ...

Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud. Offer guidance on improving threat detection, monitoring, and response for cloud-based resources. Access Control & Conditional Access: Assess and improve Conditional Access policies and identity management strategies, enforcing ...

Monitoring Advisory: Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud. Offer guidance on improving threat detection, monitoring, and response for cloud-based resources. Access Control & Conditional Access: Assess and improve Conditional Access policies and identity management strategies, enforcing ...

risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience working ...

join a collaborative cyber security team where you'll lead complex investigations, strengthen security controls and influence how we defend against an evolving threat landscape. You'll work across cloud, identity, endpoint, network and data security while partnering with technical and business teams to continuously improve our security capability. … have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. Vulnerability Management ...

with customersHands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etcExperience with open source collections (Telegraf, FluentBit, FluentD, Open Telemetry, etc.) (preferred)Experience ...

customers Hands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etc Experience with open source collections (Telegraf, FluentBit, FluentD, Open Telemetry, etc.) (preferred ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...

Target Architecture & Migration Approach for DDoS Protection. Establish Appropriate Controls for Both Volumetric & Application-Layer DDoS Attacks Own Engineering & Operational Maturity of ExtraHop Network Detection & Response Capability Lead Design & Implementation of Illumio Micro-Segmentation Capability Develop Workload Labelling, Application Dependency Mapping & Segmentation Models Security Automation & Security-as-Code -core … Imperva , ExtraHop and/or Illumio is Highly Desirable. Essential Technical Experience will include Web Application Firewalls & Application Security Controls; DDoS Protection & Mitigation; Network Detection & Response; Network & Workload Micro-Segmentation; Network Security Architecture; Enterprise Networking & TCP/IP; Security Monitoring & Telemetry; Infrastructure & Security Automation; APIs & Scripting; Infrastructure as Code ...

confidence. Securonix was built to close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. … unifies detection, investigation, and response in a single system. Advanced UEBA delivers deep behavioral insight across users, entities, and data. Native threat intelligence continuously enriches detections and investigations with real-world context. AI reinforces every layer of the platform while keeping accountability with the security team. Built cloud ...

ReliaQuest, we do things differently. We do not limit your professional growth with outdated job titles and responsibilities. Why be just a “Security Analyst”, “Detection Developer”, or “Security Engineer” when you can be all three? As a GreyMatter Specialist, you will do all of that and more. This role … uniquely designed to combine skills of threat detection, engineering, and incident response. On our team, we give you the opportunity to make an impact starting from day one. In this role, you’ll develop a diverse skill set which normally takes years to learn—all within your first ...

ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline … emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. ...

beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent de drijvende kracht … incidenten snel en effectief te mitigeren; Continu verbeteren van onze monitoring- en responsprocessen; Rapporteren van bevindingen en adviseren over structurele verbeteringen in securitymaatregelen; Proactief threat hunting: analyseren van logs en gedragsdata om ongewenste activiteiten op te sporen. Wat neem jij mee? Met jouw gedrevenheid en unieke vaardigheden maak ...