1 to 25 of 51 Threat Detection Jobs in London

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … Mizuho information assets and services. Assess and recommend security controls during design and implementation of new projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

complex client environments across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer … network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such as CIS Benchmarks Supporting incident detection, response and threat intelligence activities Contributing to vulnerability management and endpoint security Supporting security improvements across complex client environments What We're Looking ...

Senior SOC Analyst - Detection Engineering (SC Cleared) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Senior SOC Analyst to join a high-profile cyber security programme supporting critical public sector services. This … role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents ...

support Security Operation Center (SOC) service delivery. Automation is a key target in our response activities, and your ideas will help drive our threat detection capabilities to a new dimension to secure our world-class enterprise.HOW YOU WILL CONTRIBUTE TO THE TEAMInvestigate SOC alerts and manage the full … technical host forensic analysis and reverse-engineering.Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.Drive the continuous improvement ...

busy cyber security operations team supporting a large-scale enterprise environment. This role will suit someone with a strong background in incident response, threat detection, investigation and remediation, who is comfortable operating as a senior escalation point within a Security Operations Centre. What You'll Be Doing: Acting … escalation point for complex security incidents and investigations Leading incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting activities across enterprise ...

with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing … experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security monitoring, threat detection and SOC operations. Ability to work independently ...

with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing … experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security monitoring, threat detection and SOC operations. Ability to work independently ...

Threat Analyst We are looking for a Threat Intelligence Analyst to join a high-performing Cyber Security team supporting a major UK Central Government programme. This is a unique opportunity to work on a nationally significant project that helps protect critical services and infrastructure used by millions … citizens. As a Threat Intelligence Analyst, you will play a key role in identifying, analysing, and communicating cyber threats that could impact government systems and services. Working closely with Security Operations, Incident Response, and wider Cyber Security teams, you will help build situational awareness, develop actionable intelligence, and support ...

Cheshire.As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security … integrated throughout the Software Development Lifecycle (SDLC).Create, maintain and review cyber security policies, standards, procedures and technical documentation.Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact.Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting.Conduct threat ...

closely with security engineers and SOC analysts, you will design, build and operationalise AI-powered workflows that integrate with security tooling and help accelerate threat detection and response. You'll bring strong AI engineering expertise, with hands-on experience building production-ready LLM applications, agentic workflows … exciting point in the evolution of defensive cyber operations, with AI playing an increasingly important role in responding to a rapidly evolving threat landscape. We're looking for innovative, practical engineers who want to apply their AI expertise to this challenge. ResponsibilitiesLLM Configuration: Configure, evaluate and tune large language ...

cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities. Key Responsibilities Monitor and triage security alerts within a SOC environment. Investigate and respond to cyber security incidents across endpoint, cloud … remediation activities. Document investigation findings, evidence, and response actions. Escalate complex incidents and collaborate with technical and security teams. Contribute to the development of detection rules, response playbooks, and process improvements. Essential Skills & Experience Proven experience within a Security Operations Centre (SOC) or Incident Response function. Hands-on experience ...

cloud workloads, microservices and containerised environments. You will work closely with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response capabilities. Key Responsibilities Monitor security alerts, perform triage and investigate potential incidents. Assess incident severity, scope, impact and required response … application environments. Maintain accurate incident records, investigation evidence and response documentation. Escalate significant incidents and collaborate with SOC and technical teams. Contribute to improving detection capabilities, investigation processes and incident response playbooks. Essential Skills and Experience Practical experience investigating cyber security threats and incidents across endpoints, cloud environments ...

helping configure solutions, explore technical capabilities, and validate how different systems connect and exchange security-related information. Key Responsibilities Configure and support SAP Enterprise Threat Detection (ETD) and associated SAP environments. Support the technical and functional implementation of SAP security monitoring capabilities. Explore and validate different configuration options … transition from initial testing and proof of concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding ...

Enablement: Define and govern data modelling standards and semantic layer design principles that enable consistent, discoverable and trusted data products, supporting self-service analytics, threat investigation and decision-making across security teams. Engineering Excellence and Documentation: Champion engineering excellence by driving coding standards, testing frameworks, peer review practices … communicate complex technical concepts, architectural decisions and data strategies to both technical and non-technical audiences. Knowledge of cybersecurity principles, security operations and threat detection use cases, with experience applying data and analytics solutions to support cybersecurity outcomes.Strong communication skills, both written and verbal to effectively engage with ...

data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear … data products for security users.Data Modelling: Design, build and manage logical and physical data models that are discoverable, accessible and reliable to support various threat detection, analysis and reporting capabilities. Coding, Quality and Documentation: Drive engineering excellence by developing high-quality data pipelines and reusable solutions, producing clear ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence … Experience Incident Response Leadership skills. Relevant experience in managing and oversee/coordinate Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment banking ...

opportunityWe are seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. In this role, you will take ownership of threat detection, response and prevention across our AWS-hosted SaaS platform. As part of our continued investment in security operations, you will serve … internal owner of both our Security Information and Event Management (SIEM) platform and our managed Security Operations Centre (SOC). You will define our detection strategy, hold our service provider to the highest standards and lead our response to security incidents. You will also be accountable ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

implementation and maintenance of IT security policies, standards and procedures. Monitor security alerts and incidents using security information and event management (SIEM) and endpoint detection and response (EDR) solutions. Maintain and improve endpoint protection and threat detection capabilities, including Microsoft Defender. Coordinate vulnerability scanning, patch management ...

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future … migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation and aggregation. Support log aggregation using ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. Youll contribute to meaningful security work while developing skills that support your longer-term career in cyber security. ...

Microsoft Defender; and exposure to Azure, AWS, PowerShell or Python. Why apply? This role offers the chance to build hands-on experience across threat detection, incident response and vulnerability management. Youll contribute to meaningful security work while developing skills that support your longer-term career in cyber security. ...