1 to 25 of 25 Threat Detection Jobs in the UK

security breaches and anomalies. Collaborate with SOC analysts for swift analysis and resolution. Adherence to Protocols: Ensure all investigative steps follow established protocols. Advanced Threat Detection and Response: Utilize and fine-tune advanced threat detection tools, including SIEM systems, IDS/IPS, and EDR solutions. Customer more »

the Job Leading the Response: Acting swiftly and decisively during security incidents to mitigate risks. Incident Lifecycle Management: Overseeing incidents from the moment of detection, through the containment and eradication stages, to the final resolution. Post-Incident Analysis: Conducting detailed investigations post-incident to understand the root cause and … to develop strategies to prevent recurrence. Continuous Monitoring: Keeping a vigilant eye on the organization's security systems to detect any suspicious activities early. Threat Analysis: Evaluating potential threats and vulnerabilities to ensure that the organization is prepared to defend against them. Strategic Defense Implementation: Putting in place robust … unified security strategy. This role demands a proactive mindset, deep technical expertise, and strong leadership skills to navigate the complex and ever-evolving cyber threat landscape. It's about being always prepared, constantly learning, and effectively communicating to maintain and enhance the organization's security posture. Tasks & Responsibilities Evaluate more »

security breaches and anomalies. Collaborate with SOC analysts for swift analysis and resolution. Adherence to Protocols: Ensure all investigative steps follow established protocols. Advanced Threat Detection and Response: Utilize and fine-tune advanced threat detection tools, including SIEM systems, IDS/IPS, and EDR solutions. Customer more »

large environments. Experience in tuning and optimizing OpenSearch or Elasticsearch indexers. Experience with incident response processes and forensic analysis to support investigations and improve threat detection. Experience with cloud-native security tools and services Desired Qualifications: Advanced coursework in Computer Science or Information Technology, or equivalent experience. Bachelors Degree more »

Role: Detection Engineer Duration: 6 Months Location: London Key responsibilities: Be someone who believes in continuous innovation, is curious and relentless in finding a better way every day Develop and maintain a deep understanding of the latest threat landscape, tactics, techniques, and procedures (TTPs) used by attackers Develop … and maintain expertise in threat detection tools and technologies, including SIEM systems, EDR (endpoint detection and response) tools, and network monitoring solutions Be a part of a Team to improve our security stance and implement your insights into rules Continuously evaluate and improve the effectiveness of existing … threat detection and response measures Key skills/knowledge/experience: Experience in development of cybersecurity attacks detection rules in complex corporate environments The ability to communicate with a broad spectrum of stakeholders effectively from cybersecurity analysts to threat intelligence experts A track record of successful more »

future? Step into a pivotal role where innovation meets impact! Role Highlights: Be part of our elite Cyber Security team, working on cutting-edge Threat Detection and Response platforms. Your mission includes: Building & Maintaining: Deploy and manage top-tier enterprise security tools and services. Protecting: Develop and enhance more »

for personal and career development. Key Responsibilities: Manage helpdesk resolutions efficiently at 3rd Line level Install, configure, and troubleshoot infrastructure hardware and virtual environments. Threat detection and prevention Continuously monitor and optimize system performance and security. Develop and update technical documentation. Contribute to project planning and implementation. Requirements more »

a Site Reliability Engineering Manager, you will lead a global team of talented SREs in the development, deployment, and continuous improvement of our Cyber Threat Detection Pipeline. Your leadership will ensure the delivery of a scalable, efficient, and highly reliable Threat Detection Engineering platform. Key Responsibilities … Security , Exabeam Advanced Analytics (UEBA), Security Data Lakes (e.g., Data Bricks or Snowflake), and Cribl for log ingestion. Drive the adoption and implementation of Detection as Code principles. Leveraging CI/CD pipelines to automate the deployment and management of detection rules and platform configurations, ensuring fast, reliable … great deal of SRE technical and managerial skills in a large enterprise environment, such as: A great background in theSRE field supporting a Cyber Threat Detection function, with demonstrable experience in a leadership or managerial role overseeing a team. Scripting and Automation Proficiency: Demonstrated expertise in scripting and more »

correct vetting procedures and the security management of visitors and contractors to meet HMG, UKSV and IPSA requirements. Review and manage security risk and threat assessments including regular practical exercises to assure effectiveness of measures to meet FSC and IPSA requirements, proactively managing threat detection and vulnerability more »

company's critical infrastructure, intellectual property and customer data, against evolving cyber threats, ensuring no interruption to their operations. The main duties span cyber threat management, real-time attack detection and prevention and swift remediation, integrated with advanced artificial intelligence and machine learning. Additionally, they leverage Cyber DevOps … automations to facilitate rapid deployment and threat mitigation, ensuring the resilience of the businesses Operational technology (OT), IT and digital infrastructure in the face of emerging challenges. Key Competencies Significant experience of Cyber Security engineering and delivery with a broad understanding OT and IT services Subject matter expert on … regulatory landscapes, such as, NERC CIP, NIST, NIS2, GDPR, EPCIP, etc. Virtualisation technology, including containerisation (eg. Docker, Kubernetes, Linux etc.) Host based security products (threat detection, mitigations, end user detection and response, micro segmentation, zero trust) Experience working within an ITIL environment, or a structured platform management more »

and has previously built user - facing privacy and security capabilities knows how to ensure the integrity and protection of data , i.e. encryption , access controls , threat detection , incident response, GDPR, etc has worked on large corporate accounts , and is confident with the longer-lifecycle enterprise selling process is excited more »

Join Police Digital Service as NMC Cyber Threat Intelligence Specialist (Hybrid/Lancashire) Starting salary £45,000 Police Digital Service are looking to hire a Cyber Threat Intelligence Specialist. This is a mid-tier role recommended for those with experience in cyber threat intelligence, or associated fields. … Veterans with an intelligence background and an interest in cyber are encouraged to apply. As a member of the Threat Intelligence team, you'll be involved with: Developing awareness for the policing community of the cyber risks to critical services by continually assessing the threat landscape and informing … mitigation decisions. Limiting the impact of known cyber risks by engaging forces in pre-incident planning and preparatory activities. Constraining attack surfaces through proactive threat intelligence working directly alongside the threat hunting and malware service. About Police Digital Service We exist to harness the power of digital, data more »

research to identify and implement new techniques and tools that can enhance the effectiveness and efficiency of the cybersecurity orchestration automation platform Collaborate with threat detection security engineers to develop and implement custom solutions for detecting and responding to emerging cyber threats Key skills/knowledge/experience … composure under pressure Strong communication, influencing, and collaboration skills Experience with cloud native technologies and environments Experience working with SOAR capabilities development Knowledge of detection rule development, covering tools (such as SIEM, EDRs) and industry frameworks (such as MITRE ATT&CK) Experience working as a security analyst or incident more »

Active Directory, Azure Storage, Security, and Network Components. Azure policies and governance tools for handling compliance and security Expertise in securing virtualized environments, including threat detection, incident response, and compliance frameworks. Automation tooling for example, Logic Apps, Functions, Azure Automation, Event Grid etc AVD architecture, deployment options, management more »

audit requirements. Contribute to the development of a Cybersecurity Operations Resource and Capacity planner managed through BDO's Azure DevOps environment. Oversee incident response, threat detection, and mitigation efforts You'll be someone with: A good understanding of monitoring frameworks eg MITRE ATT&CK and SIEM technologies eg more »

and management teams, ensuring Security principles are being upheld. Advanced knowledge of layer 7 firewall technologies and capabilities (e.g., Application awareness, user identities, advanced threat detection, etc.) Provides vulnerability assessment of cloud assets, delivers remediation recommendations, and provides knowledgeable assistance in resolving identified vulnerabilities. Develop and implement security … teams Hands-on experience with cyber security tools and solutions (ideally SOAR platforms) Understanding of the MITRE ATT&CK framework (or equivalent) and emerging threat actor tactics, techniques, and procedures Microsoft Sentinel Logic Apps or Power Automate Defender for Endpoint/Cloud/XDR/Identity Azure Security Centre … or belief, disability or age. Explore more InfoSec/Cybersecurity career opportunities Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below. more »

partners, suppliers and other stakeholders Experience of Support Desk Service Management Staff management and development experience Good understanding of Microsoft 365 Cyber security and threat detection experience, so that in the event of a security incident, you can manage the situation in accordance with the Business Continuity and more »

aggregation and collection. Customers now have dynamic and customizable prioritization, streamlined reporting, zero-copy analytics, and real-time incident mitigation, as well as advanced threat detection, auto data discovery, classification, and policy generation, all within the Zscaler cloud security platform. Responsibilites: You will work closely with the Zscaler more »

IT are currently working with a leading consultancy within the Public sector who are look for a SIEM engineer who has Elasticsearch experience. Responsibilities: Threat Detection and Analysis: Utilize your expertise in Elastic to monitor, detect, and analyze potential security threats and incidents. Incident Response: Lead or assist … and trends. Elasticsearch Expertise: Leverage your proficiency in Elastic tools and technologies to optimize search queries, build dashboards, and develop custom alerts for proactive threat detection. Collaboration: Work closely with other members of the SOC team, as well as cross-functional teams, to share insights, collaborate on incident response … and improve overall security posture. Continuous Improvement: Stay abreast of the latest cybersecurity trends, vulnerabilities, and threat intelligence to contribute to the continuous improvement of security processes and procedures. more »

leader in its field, and part of a globally successful UK-based business. They design, manufacture, sell and support a range of highly advanced threat detection and security products for global markets in commercial, aviation, defence and security sectors. The products range from small hand-held devices through more »

of data pipelines using NiFi, ensuring efficient data flow and integrity. Signature Updates: Implement and manage signature updates using Elastic/Kibana to enhance threat detection capabilities. System Administration: Perform system administration tasks on specific cyber defence applications and systems, including installation, configuration, maintenance, troubleshooting, backup, and restoration. … Threat Response Coordination: Coordinate with SOC Engineers and CTI Analysts to develop and implement rules and signatures in response to new or observed threats within the network environment. Operating System Administration: Conduct system administration for various operating systems, including Unix/Linux, IOS, Android, and Windows. Required Skills and … commute/relocate for work. Technical Skills: Proficient in data pipeline management using NiFi. Experienced in using Elastic/Kibana for signature updates and threat detection. Strong system administration skills for operating systems including Unix/Linux, IOS, Android, and Windows. Collaboration: Ability to effectively coordinate with SOC Engineers more »

leader in its field, and part of a globally successful UK-based business. They design, manufacture, sell and support a range of highly advanced threat detection and security products for global markets in commercial, aviation, defence and security sectors. The products range from small hand-held devices through more »

ECSA, LPT, OSCP, AWS certified security, or equivalent are highly desirable. You have an in-depth knowledge of security principles, technologies, and best practices, threat detection and mitigation strategies. Mature understanding/experience with cloud security architecture (AWS, Azure) with a proven track record and work ethic that … sure the organization is compliant with PCI DSS, ISO/IEC 27001, SOC & HIPAA & IRAP controls. Strong understanding of network protocols & practices, firewalls, intrusion detection/prevention systems and WAFs. Knowledge of security compliance standards relevant to the SaaS industry, such as PCI, GDPR, ISO 27001, SOC2, NIST. Experience more »

as Key Account Manager for one such interesting customer, for whom we significantly contribute to designing and developing conceptual models into the future of threat detection and countermeasures, influencing the EW domain. Whilst our main hubs of engineering activity are at our Cambridgeshire and Lincolnshire HQs, this role more »

IT infrastructure components, including databases, storage solutions, and backup systems Ability to translate business requirements into efficient IT solutions Proficiency in cybersecurity practices, including threat detection, prevention, and incident response Professional work ethic with a client-driven focus and attention to detail Familiarity with IT project management methodologies more »