276 to 300 of 413 Security Operations Jobs in the UK

Clearance: DV Role Type: Contract We are looking for DV-cleared L1 SOC Analysts to support a high-profile public sector programme delivering critical security operations capabilities. This is an opportunity to join a newly established team working in a fast-paced SOC environment, helping to protect vital … systems and infrastructure. Key Responsibilities Monitor and triage security events and alerts in real time. Investigate incidents and escalate threats appropriately. Produce operational reports and incident summaries. Support continuous service improvement and adherence to security standards. Work closely with internal teams and external stakeholders during security investigations. ...

Microsoft Workplace Discount Programme. Central Brighton office with social spaces, regular events and a Refer-a-Friend bonus scheme. About the Role The Lead Security Consultant leads the investigation, containment and resolution of complex cybersecurity incidents. Combining hands-on technical expertise with strategic client guidance, you will help Trident … clients identify threats, reduce risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators ...

IR35 | 6-Month Initial Contract | Immediate Start A major UK organisation is seeking an experienced Cyber Incident Response Lead to join a critical cyber security function and take ownership of major cyber incidents from day one. This is an urgent requirement for a hands-on incident response specialist with … teams, and providing clear leadership during high-pressure situations. Working within a fast-paced environment, you will play a key role in protecting business operations, managing cyber crises, and ensuring incidents are contained, remediated and communicated effectively. Responsibilities - Lead the response to major and critical cyber security incidents ...

Title: Security Technical Analyst/Security Consulting Practitioner Location: London, Birmingham, or Sheffield (Hybrid: 3 days per week in-office) Contract Duration: 6 months About the Role We are seeking an experienced Security Consulting Practitioner to guide clients on their business protection journey by shaping security … support, perfect for a subject matter expert who excels at cross-functional collaboration and complex problem-solving. Key Responsibilities Strategy & Consulting: Develop and refine security strategies that align seamlessly with business objectives and emerging cyber threats. Solution Design & Implementation: Lead the design of innovative security solutions and provide ...

Title: Security Technical Analyst/Security Consulting Practitioner Location: London, Birmingham, or Sheffield (Hybrid: 3 days per week in-office) Contract Duration: 6 months About the Role We are seeking an experienced Security Consulting Practitioner to guide clients on their business protection journey by shaping security … support, perfect for a subject matter expert who excels at cross-functional collaboration and complex problem-solving. Key Responsibilities Strategy & Consulting: Develop and refine security strategies that align seamlessly with business objectives and emerging cyber threats. Solution Design & Implementation: Lead the design of innovative security solutions and provide ...

month, building relationships with a close-knit local team Type: Permanent We are recruiting for an experienced Head of IT & DevOps to lead technology operations, cloud transformation and security within an established international software business. A key feature of this role will be an AI-driven mindset. This … from legacy infrastructure towards scalable cloud platforms and modern SaaS delivery. You will take ownership of three core functions DevOps & Cloud, Internal IT, and Security & Compliance providing strategic direction while remaining technically engaged and commercially focused. Key responsibilities will include: Leading the transition from on-premises infrastructure to secure ...

opportunities, driving the technical win on strategic and high-value deals. Lead discovery at the executive level to uncover, prioritise, and translate complex customer security and compliance requirements into end-to-end Qualys and partner-integrated solution architectures. Design and deliver executive architecture workshops, whiteboarding sessions, technical deep dives … current and target state; define solution patterns, adoption roadmaps, and long-term architectural strategy. Build and steward executive-level trusted relationships with technical and security decision-makers across customers and partners. Shape proposal strategy, providing senior technical differentiation and business value narratives for the most strategic pursuits. Lead partner ...

than technology alone. At GHD, we combine disciplined investigation, practical judgement and close collaboration to understand threats quickly, contain risk and continually strengthen our security operations. The opportunityWe are looking for an accomplished Senior SOC Analyst – Incident Response to lead and coordinate complex, high-severity incidents across a large … work, but calm judgement, investigative discipline and clear communication will matter just as much. What you will doLead and coordinate high-severity and complex security incident investigations from initial assessment through containment, recovery and review. Establish incident scope, business impact and likely root cause using Microsoft Sentinel, Defender ...

Identify innovation opportunities leveraging cloud, AI, IoT, advanced analytics, automation, and digital platforms. Enterprise Architecture & Solution StrategyDefine target-state enterprise architectures spanning applications, infrastructure, security, integration, data, and operations. Lead architecture assessments, capability maturity evaluations, and transformation planning. Develop reference architectures, modernization blueprints, and technology standards. Ensure alignment between … including: SAP (S/4HANA, SAP IS-U)Oracle Utilities,SalesforceMicrosoft DynamicsServiceNow Work & Asset Management platformsCustomer Information Systems (CIS)Enterprise Asset Management (EAM)Grid & Operations platformsDrive application rationalization and modernization initiatives. Establish API-first and event-driven integration strategies. Promote composable architecture and platform engineering practices. Cloud Native & Platform ...

Role Purpose Lead the design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership … enable attack-path analysis, threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations. Key Responsibilities Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/ ...

cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV CLEARED Red Team Operator or Offensive Security Specialist looking for your next challenge … national security and defence? Were looking for a technically strong offensive security professional to deliver red team operations, adversary simulations and advanced security assessments within complex defence and government environments. This is an opportunity to use your expertise to simulate realistic cyber threats, identify vulnerabilities ...

cleared Red Team Operator/Offensive Security Consultant Bristol HQ (3-4 days a week onsite) with travel to local sites Up to £86 p/h Inside IR35 Are you an experienced DV CLEARED Red Team Operator or Offensive Security Specialist looking for your next challenge … national security and defence? We're looking for a technically strong offensive security professional to deliver red team operations, adversary simulations and advanced security assessments within complex defence and government environments. This is an opportunity to use your expertise to simulate realistic cyber threats, identify vulnerabilities ...

days Location - London We are looking to engage an experienced Microsoft Defender XDR specialist to design and deliver practical operational training for an internal security team. This is not necessarily a dedicated trainer position. We are open to speaking with experienced security practitioners who have significant hands … confidence and capability within the team, enabling them to manage day to day alerts, investigate incidents effectively and make informed decisions when handling potential security events. Desired outcome: The overarching goal is to provide the team with a solid understanding of the Defender portals and day to day operations. ...

days Location - London We are looking to engage an experienced Microsoft Defender XDR specialist to design and deliver practical operational training for an internal security team. This is not necessarily a dedicated trainer position. We are open to speaking with experienced security practitioners who have significant hands … confidence and capability within the team, enabling them to manage day to day alerts, investigate incidents effectively and make informed decisions when handling potential security events. Desired outcome: The overarching goal is to provide the team with a solid understanding of the Defender portals and day to day operations. ...

GG08 Referral Bonus: £5,000 BAE Systems have been contracted to undertake the day to day operation of (and incremental improvement of) a dedicated Security Operations Centre (SOC) to support the defence of a major UK CNI organisation. The networks protected are predominantly hosted in Azure … will be staffed by a blend of customer and BAE Systems staff, based in multiple locations, but with the day to day operations based from our Leeds office (due to the need for customer network access available at this location). These roles require a minimum of SC clearance ...

services function that supports and contributes to the objective of the legal practice. The Technology department consists of service delivery, business systems, training, technical operations, security operations, legal products, engineering, eDiscovery and information security. The Technology department supports the business with strategic technology delivery. The department … standard operating procedures within the service desk knowledgebase. Ensure compliance with IT policies, processes, procedures, and best practices. Support continuous improvement of service desk operations by helping to identify recurring issues (Problems) and suggestion solutions/fixes. Advise and guide staff on new technology and IT procedures. Maintain ...

Incident Response Analyst £650 - £750 GBP Hybrid WORKING Location: Central London, Greater London - United Kingdom Type: Contract Cyber Security Incident Response Analyst London (Hybrid) | 6-Month Contract | Inside IR35 We're looking for an experienced Cyber Security Incident Response Analyst to join a high-performing cyber security team, helping defend a large enterprise against evolving cyber threats. This is an excellent opportunity to work on complex security incidents, investigate emerging threats and strengthen an organisation's overall cyber resilience. Working within a collaborative security function, you'll play a key role in identifying, analysing ...

DescriptionRole - Threat Modeler (TM)Technology - Threat Modeling, Cloud Security, Infrastructure as Code, PythonLocation – Belfast/LondonCompensation - Competitive (including bonus)Job DescriptionWe are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong … cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams. Key ResponsibilitiesPerform threat modeling using a documented and repeatable process. Identify threats and specify effective mitigating security controls while maintaining a high standard ...

Account Executive £85,000 + Double OTE Fully Remote (Client travel expected) About the Role We are working with an established cyber security business looking to appoint an experienced Managed Services Sales professional to drive continued commercial growth. This is an exciting opportunity for a commercially driven individual with … strong background in selling managed services, ideally within the cyber security or wider IT services market. The successful candidate will have a proven track record of winning new business, develop strategic client relationships and delivering significant financial results. Key Responsibilities New Business Development: Identify, engage and secure new customers ...

+ Double OTE \n Fully Remote (Client travel expected) \n About the Role \n We are working with an established cyber security business looking to appoint an experienced Managed Services Sales professional to drive continued commercial growth. \n This is an exciting opportunity for a commercially driven individual with … strong background in selling managed services, ideally within the cyber security or wider IT services market. The successful candidate will have a proven track record of winning new business, develop strategic client relationships and delivering significant financial results. \n Key Responsibilities \n \n New Business Development: Identify, engage ...

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world … emerging standards like Model Context Protocol (MCP) to define zero-trust access boundaries and runtime guardrails across client environments. SOC Efficiency & AI-Driven SecOps: Practical experience leveraging AI and automation to streamline multi-tenant SOC operations, accelerate incident triage, reduce alert fatigue, and automate remediation workflows. MDR & CNAPP Runtime ...

Security Engineer (Contract) | £600-£650 per day, Inside IR35 Location: London We’re recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract. The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running … both SIEMs in parallel through cutover. Beyond that, you’ll support the wider team on a mix of security engineering projects and work with a third party on detection rules. This is a broad engineering role, not a SIEM specialist or admin position. What you’ll be doing: Migrating ...

World Class Defence Organisation is currently looking to recruit a Cyber Security Engineer subcontractor on an initial 24 month contract. People from a background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer … SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be w click apply for full job details ...

Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below. Description The Associate Manager - Cyber Security Incident Response will play a pivotal role within WTW’s Global Information and Cyber Security Defence (ICSD) function, leading the response to complex … security incidents and driving initiatives to enhance WTW’s Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with strong expertise in incident response and cybersecurity. The individual will work as part of a global, multi-disciplined security community with strong support across ...

United KingdomEmployment type: full timeCategory: Consulting and Advisory ServicesIndustry: Professional ServicesPosted: 2026-09-12 The team you'll be working with: UK Sovereign SOC Security Analyst (Level 2) Role Description The SOC Analyst (L2) plays a critical role in the detection, investigation, and management of security alerts … incidents escalated from SOC Analyst (L1) teams. The position focuses on in‐depth analysis, incident validation, tactical response coordination, and continuous improvement of security monitoring and response capabilities. Operating within a 24/7 Security Operations Centre, the L2 Analyst serves as a technical escalation point ...