1 to 25 of 33 Intrusion Detection Jobs in the UK

CrowdStrike Falcon. You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities. What your days will look like Lead day‐to‐day operations across Analysis and Engineering teams delivering Managed Cyber Defence … support ongoing client interactions related to service delivery and performance. Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage). The role is for you if: You have experience of embedding AI tooling within ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures Boundary Architecture … Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement MOD-compliant ...

multiple customer accounts. Establish and maintain boundary service quality standards and operational procedures. Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection. Architect boundary security solutions aligned with MOD security requirements and defence standards. Design boundary traffic inspection, content … protection. Lead boundary security assessments and vulnerability remediation. Implement MOD-compliant boundary configurations and security baselines. Incident Management & Threat Response Lead boundary security incident detection, investigation and response. Manage security alerts, anomaly investigation and threat escalation. Coordinate incident response across boundary security team and customer security teams. Conduct post ...

Implementation: Implement and enforce network security best practices, including networkaccess control lists (NACLs), security groups, cloud firewalls (AWS WAF,GCP Firewall Rules), and network intrusion detection/prevention systems.Ensure compliance with Citi's policies, industry standards, and regulatoryrequirements. Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimizationacross hybrid … specific certifications (e.g.,AWS Certified Advanced Networking - Specialty, Google Cloud ProfessionalNetwork Engineer). Experience with network security tools such as WAF, DDoSprotection, and network intrusion detection/prevention systems. Familiarity with network virtualization and software-definednetworking (SDN) concepts. Experience with container networking (e.g., Kubernetes CNI,service mesh). ...

scripting a plus Multi‐Vendor Exposure - Cisco Advanced Security Appliances, Palo Alto Next‐Generation Firewalls, Prisma Access, Cisco Firepower, Checkpoint Firewalls, Cisco Switches, and Intrusion Detection/Intrusion Prevention Systems Skilled in engaging executive‐level stakeholders with clear technical communication Proven track record of effectively communicating technical ...

governance processes, audit requirements, and regulatory controls. Experience working within ITIL-aligned Incident, Problem, Change, and Service Management frameworks. Knowledge of network access controls, intrusion prevention systems (IPS), intrusion detection systems (IDS), DDoS protection, and secure web gateway technologies. Security Automation & Engineering Experience automating network security processes ...

solutions aligned with security and operational requirements Design network resilience, failover and disaster recovery capabilities Security & Compliance Integration Architect network security controls including firewalls, intrusion detection/prevention and advanced threat protection Design network segmentation and access control frameworks aligned with MOD Classification Guides Ensure network designs comply ...

overseeing SOC operations, managing a team of 8+ cyber security professionals and driving the continuous improvement of security monitoring, incident response and threat detection capabilities. The successful candidate will work across security operations, threat intelligence, incident management, stakeholder engagement and supplier management. The role is suited to an experienced … with a strong background in enterprise or high-security environments. Key responsibilities Lead, manage and mentor a team of cyber security analysts. Oversee the detection, triage, escalation and resolution of cyber security incidents. Act as a senior escalation point for critical security alerts and incidents. Develop and improve ...

experience designing, implementing, and supporting enterprise network environments. Strong expertise in network security, including firewalls, segmentation, encryption (IPsec/TLS), secure remote access, and intrusion detection/prevention systems. Deep knowledge of routing and switching technologies (e.g., Cisco, Aruba, Juniper, Meraki). Solid understanding of core networking protocols ...

Security Operations Centre (SOC) or enterprise security operations environment. Proven hands-on experience administering and optimising enterprise security technologies, including SIEM platforms, Endpoint Detection & Response (EDR), Secure Web Gateways, Email Security solutions, and Cloud Security platforms. Strong understanding of security operations, with experience in incident response, threat detection, investigation, and remediation. Solid knowledge of network security principles, including firewalls, intrusion detection and prevention systems (IDS/IPS), TCP/IP, routing, switching, and packet analysis. Experience identifying, assessing, and mitigating security risks through vulnerability management, security assessments, and penetration testing. Ability to investigate and troubleshoot ...

guidance on information security matters to various stakeholders across the organisation. Oversee the day-to-day operation of security systems and tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, anti-malware, SIEM (Security Information and Event Management), vulnerability scanners, and data encryption solutions. Manage … vulnerability management programs, including regular scanning, penetration testing, and remediation of identified weaknesses. Lead and manage security incident response, including detection, analysis, containment, eradication, recovery, and post-incident review. Develop and maintain robust disaster recovery and business continuity plans related to information security. Monitor security alerts, logs, and reports ...

obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM … emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. ...

Security Operations Centre (SOC). In this contract role, you will lead a team of 8+ security professionals, drive the department's threat detection and response strategy, and act as the principal escalation point for critical incidents. You will also oversee managed service providers (MSSPs) to ensure strict adherence … Profession career framework. Incident Response: Lead end-to-end incident triage, containment, escalation, and post-incident reviews. Security Operations and SIEM: Oversee SIEM operations, intrusion detection, rule tuning, and proactive threat-hunting capabilities. Threat Intelligence: Analyze OSINT and commercial threat intelligence to mitigate organizational risks. Vendor and Stakeholder ...

Security Operations Centre (SOC). In this contract role, you will lead a team of 8+ security professionals, drive the department's threat detection and response strategy, and act as the principal escalation point for critical incidents. You will also oversee managed service providers (MSSPs) to ensure strict adherence … Profession career framework. Incident Response: Lead end-to-end incident triage, containment, escalation, and post-incident reviews. Security Operations and SIEM: Oversee SIEM operations, intrusion detection, rule tuning, and proactive threat-hunting capabilities. Threat Intelligence: Analyze OSINT and commercial threat intelligence to mitigate organizational risks. Vendor and Stakeholder ...

security alerts, incidents and potential breaches. Analysing vulnerabilities and implementing measures to reduce risk. Managing and monitoring Identity and Access Management controls, including the detection of inappropriate access or privilege misuse. Researching emerging cyber threats and recommending proactive security improvements. Testing and evaluating security technologies and products. Producing reports … Information Security Analyst or similar cyber security role. Strong technical background with solid infrastructure, network and system security knowledge. Experience using vulnerability management tools, Intrusion Detection Systems (IDS) and SIEM platforms. Knowledge of cyber security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework and/ ...

driven Technical skills: Extensive knowledge of SIEM, EDR, Web Gateway, Email Gateway, Cloud Security, operating systems, network protocols and packet analysis tools, firewall and intrusion detection/prevention systems, TCP/IP, computer networking, routing and switching, penetration and vulnerability testing, scripting such as Python or PowerShell Certifications ...

emphasis on Kubernetes-based environments. You'll be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. This is a hands-on, engineering-centric role that requires deep technical expertise in cloud environments, Kubernetes … security, and platform automation. Responsibilities Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes ...

Identify, monitor, and define the requirements of the overall security of all systems. Maintain high patching status on all systems. Configure, maintain and implement intrusion detection systems and firewalls, virtual private networks, web protocols, and email security. Perform continuous penetration tests and follow up remediating vulnerabilities. Create … update all relevant Jira tickets and maintain system uptime and availability as close to 99.99%. Configure and install security infrastructure devices. Investigate intrusion and hacking incidents, collect incident responses, and carry out forensic investigations. Determine latest technologies and processes that improve overall security by staying up to date ...

encryption, authentication and access control technologies Understanding of security frameworks and compliance standards including ISO 27001 and GDPR Experience with SIEM technologies, firewalls or intrusion detection systems CyberArk Delivery Engineer (CDE) certification desirable TO BE CONSIDERED Please either apply through this advert or emailing me directly ...

live environments is highly desirable. Experience in deploying and supporting cyber security tooling such as security monitoring solutions (SIEM/logging platforms), network intrusion detection systems (IDS) and endpoint protection/EDR solutions. Knowledge of networking and infrastructure e.g. network architectures, firewalls and network segmentation. Knowledge of cyber ...

them Serving as the senior escalation point for network incidents, including those affecting remote locations Hardening the environment through VLAN design, firewall rule management, intrusion detection and a rigorous patching regime Producing and maintaining clear network diagrams, IP records and configuration documentation Supporting the wider infrastructure when required ...

Service Delivery, installation and support of IT Cyber Security Systems. You will have significant knowledge of cyber security principles and technologies, of firewalls and intrusion detection and prevention technologies along with strong experience of investigating and resolving cyber security incidents including threat hunting. Knowledge and experience of cloud ...

teamwork skills. Desirable C programming skills for low-level or performance-critical development. Experience with containerisation (Docker, Kubernetes). Familiarity with endpoint security, intrusion detection, or system hardening. Contributions to Linux or open-source projects. Experience with debugging, profiling, or performance optimisation tools. Why Join Us: Shape ...