23 of 23 Protective Monitoring Jobs in the UK

Head of Practice THE VACANCY: This Principal Security Design Consultant role is designed for an experienced security architecture specialist who can lead complex protective monitoring and Security Operations Centre (SOC) transformation engagements. Candidates are expected to have progressed through architecture, engineering, SOC or consultancy roles and to have … managed security service change. The role will initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours outsourced monitoring model to Microsoft Defender XDR and Microsoft Sentinel, transitioning into a Cyro-managed SOC. The successful candidate will own the engagement from discovery and target-state ...

Cleared Protective Monitoring Consultant | St Ives, Cambridgeshire | Outside IR35 | Onsite Please note: St Ives, Cambridgeshire (NOT Cornwall) CND are supporting a government organisation in securing critical systems and are seeking a DV Cleared Protective Monitoring Consultant with strong LogRhythm expertise to join a high-impact security … programme. What You'll Be Doing Monitoring and analysing security events using LogRhythm Investigating, triaging, and responding to security incidents Conducting deep-dive analysis and root cause investigations Producing detailed incident and threat reports Tuning and optimising LogRhythm detection rules and use cases Providing 2nd Line LogRhythm administration support ...

Cleared Protective Monitoring Consultant | St Ives, Cambridgeshire | Outside IR35 | Onsite Please note: St Ives, Cambridgeshire (NOT Cornwall) CND are supporting a government organisation in securing critical systems and are seeking a DV Cleared Protective Monitoring Consultant with strong LogRhythm expertise to join a high-impact security … programme. What You'll Be Doing Monitoring and analysing security events using LogRhythm Investigating, triaging, and responding to security incidents Conducting deep-dive analysis and root cause investigations Producing detailed incident and threat reports Tuning and optimising LogRhythm detection rules and use cases Providing 2nd Line LogRhythm administration support ...

Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours Support Major Incident Response activity, from a Protective Monitoring perspective, including supporting teams in identification, containment, and remediation of security related threat. Provide timely advice and guidance on the response action … improvements to procedures and processes, with the SOC Manager’s approval. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Stakeholder and Client Reporting, and engagement Assist in architectural design to facilitate the onboarding of new information systems, including ...

Computer Network Defence Ltd (CND) is seeking a DV Cleared Protective Monitoring Consultant to join a high-impact security programme in St Ives, Cambridgeshire. The role focuses on monitoring, analysing security events, incident response and reporting using LogRhythm in a government environment. You will provide 2nd line … LogRhythm administration, mentor junior analysts and drive continuous improvements in monitoring processes within an Outside IR35, onsite setting. #J-18808-Ljbffr ...

Computer Network Defence Ltd (CND) seeks a DV Cleared Protective Monitoring Consultant to join a high-profile government programme in St Ives, Cambridgeshire. The role centres on monitoring security events with LogRhythm, investigating incidents, and producing detailed threat reports for critical systems. You will tune log detection … rules, provide 2nd line LogRhythm administration, support SOC operations onsite, and mentor junior analysts to raise monitoring standards. #J-18808-Ljbffr ...

that can be deployed safely in operational settings. OT and industrial control systems, including ... Security architecture approaches including segmentation, zoning, secure remote access, monitoring, logging and telemetry. Recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 and related regulatory requirements. … security tooling and monitoring platforms such as Nozomi, Claroty, Dragos, Microsoft Defender for IoT or similar technologies. Architecture, modelling and delivery tools used to define target‐state designs, roadmaps and implementation plans. What you can expect As an OT Cyber Security Architect, you will lead the design and delivery ...

operational settings. OT and industrial control systems, including ICS, SCADA and OT network environments. Security architecture approaches including segmentation, zoning, secure remote access, monitoring, logging and telemetry. Recognised frameworks and standards such as IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2 and related regulatory requirements. … security tooling and monitoring platforms such as Nozomi, Claroty, Dragos, Microsoft Defender for IoT or similar technologies. Architecture, modelling and delivery tools used to define target-state designs, roadmaps and implementation plans. What you can expect ðAs an OT Cyber Security Architect, you will lead the design and delivery ...

shift handover brief is prepared and delivered to the incoming shift Monitor, triage, analyse and investigate alerts, log data and network traffic using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy ...

shift handover brief is prepared and delivered to the incoming shift Monitor, triage, analyse and investigate alerts, log data and network traffic using the Protective Monitoring platform and Internet resources to identify cyber-attacks/security incidents. Categorise all suspected incidents in line with the Security Incident policy ...

gaining a rounded understanding of how security supports the business. The purpose of this role is to build a working knowledge of security operations, protective monitoring, and incident handling by working closely with, and learning from, the wider InfoSec team. Reporting to the Associate Director - Cyber Security, with ...

levels, prepare monthly service reviews and maintain the detection improvement backlog. Track vulnerability remediation against contractual windows, record exceptions and report performance. Maintain the protective monitoring standard and the logging and monitoring evidence an assurance review will test. Keep a record of threat intelligence intake from NCSC ...

About the job you’re consideringCyber threats are evolving fast—and so are we. As part of our 24/7 Protective Monitoring team, you’ll be on the front lines defending critical systems and sensitive data for both government and commercial clients across the UK and Europe. … Monitor security systems for suspicious activity and emerging threats.Log and escalate incidents using our incident management platform.Ensure the health and performance of monitoring tools.Collaborate with other analysts and support teams during investigations.Document findings clearly and contribute to continuous improvement.Help produce regular service reports and insights.You can bring your whole ...

About the job you’re considering Cyber threats are evolving fast—and so are we. As part of our 24/7 Protective Monitoring team, you’ll be on the front lines defending critical systems and sensitive data for both government and commercial clients across … Monitor security systems for suspicious activity and emerging threats. Log and escape incidents using our incident management platform. Ensure the health and performance of monitoring tools. Collaborate with other analysts and support teams during investigations. Document findings clearly and contribute to continuous improvement. Help produce regular service reports ...

presented to key stakeholders. Stay updated on the latest security trends, threats, and technologies. Skills & Experience The preferred candidate will possess experience in protective monitoring or demonstrate a clear passion and eagerness to advance in the field of cyber security. Essential qualifications and skills Qualifications and/ ...

analyst services to aid the technical investigation of security incidents. Establishing root causes, patterns and solutions for re-securing systems and networks. Threat Hunting & Protective Monitoring - Assisting with investigating alerts generated by security systems and raising incidents based on indicators of compromise. Supporting the optimisation of monitoring … investments including but not limited IPS/IDS, firewalls and end user protections. Operational Improvement & Security Engineering Support – Participating in security operational activities including monitoring, incident response and on-call duties to identify opportunities for improvements in processes, detections, automation and security controls. Working with colleagues across Cyber Operations ...

Improvement Programme Chief Information Security Office Function (CISO) This role is for a Cyber Security Analyst in the Infrastructure and Networks teams within the Protective Monitoring area of the national CSOC. This is a Tier 2 role working with the Infrastructure and Networks team to help develop ...

trade-offs). Test & evaluation (appropriate metrics and acceptance thresholds; robustness, fairness, privacy, and safety testing; secure red-teaming where applicable). Operational governance (monitoring KPIs, drift detection, incident response, change control, and regular re-evaluation & re-training with realistic datasets). Author clear artefacts: governance frameworks, operating procedures … Configure/enable client tools (e.g., Microsoft Purview for governance/lineage/labels; Azure ML/Databricks/Fabric for MLOps, model registry, monitoring; Power BI governance). Contribute to assurance reviews and quality gates; maintain well-structured evidence for audits and approvals. Consulting & collaboration Work in multi ...

Security Wizardry Radar Page is seeking a Protective Monitoring Consultant to enhance the security posture of systems with hands-on LogRhythm experience. Candidates must possess strong monitoring and incident response skills, along with active DV clearance and experience in secure environments. The successful candidate will analyze security ...

Cyro Cyber Ltd is seeking a Principal Security Design Consultant to lead complex protective monitoring and SOC transformation engagements across enterprise environments. The role demands progression through architecture, engineering, SOC or consultancy roles and delivering enterprise-scale SIEM, EDR/XDR and managed security service changes. The successful ...

penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks Assessing your client’s' needs, understanding how their needs … through clearance You have experience working with security controls within cloud-based infrastructure (e.g Azure, AWS, GCP). This may include design, configuration, or protective monitoring. Knowledge of digital identity and authentication systems Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where ...

penetration testing inputs and interpretation of assurance evidence Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks Assessing your client’s' needs, understanding how their needs … through clearance You have experience working with security controls within cloud-based infrastructure (e.g Azure, AWS, GCP). This may include design, configuration, or protective monitoring. Knowledge of digital identity and authentication systems Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where ...

/2025 TheCyber Defence Analyst will join a rapidly growingsecurity team responsible for designing, delivering and maintaining operationalcybersecurity capabilities. Conducting pro-active, risk-based, protectivemonitoring on priority C4IS/networks in order to identify internal and externalcyber-threats/attacks. This position involves a broad range of skills,including … development and mentoring of the Level 2 Analyst, monitoringnetworks to actively remediate unauthorised activities. Requirements Tasks: Developand integrate security event monitoring and incident management services. Respond tosecurity incidents as they occur as part of an incident response team. Implementmetrics and dashboards to give visibility of the Enterprise infrastructure. Assistwith ...