1 to 25 of 27 Threat Detection Jobs in the South East

World Class Defence Organisation is currently looking to recruit a Cyber Threat Operations Specialist subcontractor on an initial 12 month contract.You do not need to hold any current security clearance in order to apply. However, SC security clearance will be required prior to starting the position , with DV clearance … background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote working: Onsite ...

Lead integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry. . Design and optimise KQL queries to support effective threat detection and investigation. . Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases. . Develop … data normalisation logic. . Strong knowledge of KQL (Kusto Query Language), advanced query development and optimisation. . Experience designing, building and tuning analytic rules, detection logic and threat use cases. . Experience developing Logic Apps, Playbooks and SOAR automation workflows. . Experience implementing CI/CD pipelines using ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

decision-making challenges. Working with UX designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations … engaging with prospective customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution ...

utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

industry. You'll be part of a highly skilled team at the forefront of cyber defence, leading investigations into sophisticated threats, developing advanced detection capabilities, and helping shape the future direction of our security monitoring services. Why This Opportunity Stands Out This isn't just another SOC role. … have the opportunity to: Lead investigations into advanced cyber threats within highly secure environments. Drive threat hunting campaigns and uncover previously unseen attack techniques. Influence how security monitoring services evolve and improve. Mentor and develop junior analysts, helping shape the next generation of cyber talent. Work directly with customers ...

role in monitoring, investigating and responding to cyber security incidents across critical client environments. You will analyse alerts, investigate complex threats, improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities … support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre ...

activity across SIEM, EDR and other security platforms Identifying indicators of compromise, suspicious activity and emerging threats Supporting incident response and containment activities Performing threat hunting activities to proactively identify potential security risks Escalating significant or complex incidents where appropriate Working closely with Tier 1 and Tier 3 analysts … incident responders and other technical teams Tuning and improving detection rules and use cases to reduce false positives and improve threat detection Analysing logs and security events from endpoints, networks, cloud environments and other infrastructure Producing clear investigation reports and documenting incidents, findings and recommendations Maintaining awareness ...

role leads the design, implementation, administration, and optimisation of Proofpoint security solutions within a large enterprise environment, bringing deep expertise across email security, threat protection, DLP, and email authentication technologies to protect against phishing, malware, and advanced email-based threats. Key Responsibilities Serve as the engineer for the Proofpoint … platform, designing, deploying, configuring, and maintaining solutions including Proofpoint Email Protection (PEP), Targeted Attack Protection (TAP), Threat Response Auto-Pull (TRAP), Email Fraud Defense (EFD), and Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat detection rules, configuring and maintaining email authentication ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: Serve … platform and related email security technologies. Design, deploy, configure, and maintain Proofpoint solutions, including: Proofpoint Email Protection (PEP) Proofpoint Targeted Attack Protection (TAP) Proofpoint Threat Response Auto-Pull (TRAP) Proofpoint Email Fraud Defense (EFD) Proofpoint Information Protection/DLP Manage email security policies, spam filtering, malware protection, and threat ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: • Serve … email security technologies. • Design, deploy, configure, and maintain Proofpoint solutions, including: o Proofpoint Email Protection (PEP) o Proofpoint Targeted Attack Protection (TAP) o Proofpoint Threat Response Auto-Pull (TRAP) o Proofpoint Email Fraud Defense (EFD) o Proofpoint Information Protection/DLP • Manage email security policies, spam filtering, malware protection ...

/12/2026 Clearance: Active SC Role Description: SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like ArcSight, Splunk, or QRadar. Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats. Incident Response - Work with security teams to analyze and mitigate security incidents. … Custom Rule Creation - Develop and fine-tune detection rules and alerts to identify malicious activities. Security Reporting - Generate reports on security events, trends, and system performance. Collaboration - Work with IT and security teams to improve overall cybersecurity posture. Required Skills & Qualifications Technical Expertise - Strong knowledge of SIEM platforms, network ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...

Electronic Arts in Guildford, UK seeks a Senior Detection Engineer to advance our detection engineering strategy within the Enterprise Security team. This role is essential to safeguarding EA's cloud and production environments and will directly impact our ability to detect, respond to, and prevent cyber threats … scale. As a senior individual contributor, you will mentor junior engineers, help define engineering direction, and lead the development of scalable threat detection solutions, #J-18808-Ljbffr ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security. Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities. Integrate XSIAM with other security tools and information systems to automate security operations and workflows. Conduct continuous monitoring … analysis of security alerts and incidents to identify trends and potential threats. Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness. Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats ...

platforms and technologies, including but not limited to: SIEM (Security Information and Event Management) Network Packet Capture platforms Anti-malware and malicious-code protection Threat detection technologies Security monitoring and analysis platforms Core responsibilities include: Maintain accurate mapping and topology of SOC toolsets, including integrations, connections and data ...

across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects … environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme governance ...

Rapiscan Systems is an industry leader in detection technology, providing cargo and vehicle inspection systems and services for ports, borders, military, high-threat facilities, and checkpoints to help customers combat terrorism, drug smuggling, illegal immigration, and trade fraud. We offer a broad array of scanning system configurations that … Earth bond testing. Fault finding on HVPS, A/C, CT Tubes and associated hardware/software. Setup, configure and test image reconstruction and threat detection engine (SW&HW). Setup, configure and test PLC code and HMI functionality. Setup, configure and test Can bus systems. Conduct Image ...

Group's security strategy, policies, and governance framework Provide Board-level reporting on security posture, risks, and compliance activities Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept ...

most valuable asset, their data, and is backed by top-tier investors. Summary Menlo Security is hiring a Senior Software Engineer to join our Threat Protection and ShadowAI team in the UK. This team ensures that users can safely browse the web through Menlo's secure cloud - protecting them … incident analysis - so you will be using these tools alongside defending against their misuse. Outcomes & KPIs Key Outcome(s) Owned: Reliable, performant delivery of Threat Protection and ShadowAI services that detect and control risky web and generative AI application usage for Menlo customers. End-to-end ownership of assigned ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets. Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection. Manage boundary service P&L and resource allocation across multiple customer accounts. Establish and maintain boundary service quality standards and operational procedures. Boundary … Architecture & SecurityDesign and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection. Architect boundary security solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant ...

operations.Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets.Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection.Manage boundary service P&L and resource allocation across multiple customer accounts.Establish and maintain boundary service quality standards and operational procedures.Boundary Architecture & SecurityDesign and implement … boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection.Architect boundary security solutions aligned with security requirements and defence standards.Design boundary traffic inspection, content filtering and advanced threat protection.Lead boundary security assessments and vulnerability remediation.Incident Management & Threat ResponseLead boundary security incident detection, investigation ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets. Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection. Manage boundary service P&L and resource allocation across multiple customer accounts. Establish and maintain boundary service quality standards and operational procedures. Boundary … Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection. Architect boundary security solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content filtering and advanced threat protection. Lead boundary security assessments and vulnerability remediation. Implement ...