1 to 25 of 26 Remote/Hybrid Threat Detection Jobs in the UK excluding London

international technology environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead … responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical teams across the business. ...

privileged access management services across the enterprise. The role will contribute to privileged account governance, identity lifecycle management, access controls, authentication technologies, and identity threat protection initiatives. Working closely with cybersecurity, infrastructure, and application teams, the individual will help ensure secure, compliant, and efficient management of identities, privileged access … Connect (OIDC), and Single Sign-On (SSO) solutions. Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise platforms. Support identity threat detection, incident response, monitoring, and automation activities through IAM and PAM integrations. Your Profile Essential skills/knowledge/experience: Experience in Identity ...

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments. As a Lead Threat Response Operations Analyst within Pfizers Global Cyber Defense organization … response to security incidents on a global scale, and provide technical guidance to analysts and partner teams. You will bring deep expertise in cyber threat analysis, incident response, malware investigations and adversary tradecraft, with the ability to operate confidently across complex business and technical environments. Working alongside Threat ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands … incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

integration of security controls across converged IT and OT networks Work with stakeholders to improve operational resilience and cyber maturity Contribute to incident readiness, threat detection and monitoring initiatives where required Keep up to date with developments in OT cybersecurity, industrial technologies and emerging threats Communicate progress, risks … Build your knowledge of technologies including SCADA, PLCs, RTUs, DCS and industrial communications Develop experience with OT security technologies supporting asset visibility, monitoring and threat detection Access mentoring, knowledge sharing and professional development opportunities to support your career growth Expand your understanding of industry standards and frameworks including ...

Join Police Digital Service as NMC Senior Cyber Threat Intelligence Specialist Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below. Salary £60,000 - £65,000 This is an opportunity to play your part and protect our company, our customers … Management Centre will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across ...

design, implementation, and ongoing effectiveness of security capabilities across IT and OT environments. You will engineer and maintain the technical capabilities that enable early threat detection, rapid and consistent response, and sustained cyber risk reduction , while translating cyber risk, regulatory, and business demands into practical, measurable, and operationally … implement and maintain security controls to meet business, compliance, and risk mitigation requirements, ensuring controls are effective, measurable, and operationally sustainable. Implement and maintain detection and response capabilities through SIEM integration with security controls and IT systems, with a focus on reducing time to detect and time to remediate ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house developers and providing some advice on SDLC security Performing vulnerability scanning … looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Experience tweaking/tuning endpoint detection and response tooling Strong knowledge of detection and response solutions, such as EDR, XDR and MDR. Experience handling ISO27001 or Cyber Essentials + certifications ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience working ...

operational security controls and procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation … hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow office, with a 3 day in-office ...

Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence … feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and proactively monitor SIEM infrastructure health. Security Engineering: Drive security projects, system transformations, and respond to emerging threats. What You Bring: Proven background ...

Salary: £80,000 - £100,000 Location: Coventry (Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage ...