26 to 47 of 47 Threat Detection Jobs in the UK excluding London

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. … including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational ...

better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house developers and providing some advice on SDLC security Performing vulnerability scanning … looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Experience tweaking/tuning endpoint detection and response tooling Strong knowledge of detection and response solutions, such as EDR, XDR and MDR. Experience handling ISO27001 or Cyber Essentials + certifications ...

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This … Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security ...

identity governance - Lead the design of Zero Trust network architectures to reduce attack surface and lateral movement risk - Provide architectural direction for security monitoring, threat detection, incident response and cyber resilience - Chair architecture review boards and lead security risk assessments and design assurance - Oversee compliance with ...

escalation point during UK working hours, reviewing and signing off escalation reports and supporting more advanced investigations when needed. Remaining involved in threat detection, investigation and incident response. Leading client service reviews and incident-related calls, explaining findings and recommended actions clearly. Producing and reviewing useful, accurate security … your experience develops. Maintaining consistent standards for ticket management, documentation, handovers and response quality. Improving investigation procedures, playbooks and operational processes. Contributing to threat intelligence research and reporting, with the team looking to use AI to support initial research and analysis. What are we looking for? Commercial experience working ...

emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. In this role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. … ability to obtain, a Developed Vetting (DV) UK security clearance. Preferred qualifications: Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP). Experience with Kubernetes threat detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline ...

operational security controls and procedures. Profile Previous experience working as L3 SOC Analyst or Security Engineer Demonstrated experience in security operations, incident response, threat detection Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies Experience in end to end cyber security investigation … hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

management, strengthening cloud security and reducing organisational risk through proactive security engineering. This is not a traditional SOC position. Whilst you'll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud … with infrastructure, cloud and project teams to embed security into new and existing technology solutions Contribute to incident response activities and ongoing improvements to detection capabilities Provide technical security guidance to both technical and non-technical stakeholders Support compliance against recognised security frameworks including NCSC CAF, ISO27001, NIST ...

secure configuration standards, system hardening baselines, and vulnerability management processes. Review OT network architecture, segmentation, data flows, and security dependencies. Enhance security monitoring, logging, threat detection, and incident escalation processes. Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements. Coordinate restoration testing, cybersecurity exercises ...

experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow office, with a 3 day in-office ...

Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and Kafka to boost our threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence … feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and proactively monitor SIEM infrastructure health. Security Engineering: Drive security projects, system transformations, and respond to emerging threats. What You Bring: Proven background ...

Centre Analyst | £30,000 - £40,000 | West Yorkshire Our client runs a 24x7x365 Security Operations Centre supporting customers across multiple industries against an evolving threat landscape. They're looking for a SOC Analyst to join the team on a shift basis, taking ownership of frontline threat detection … knowledge across firewalls, IDS/IPS, Active Directory, Windows Server, Linux, TCP/IP and cloud environments Foundational grasp of core security concepts and threat types Exposure to access/security administration tasks Familiarity with incident containment, remediation and recovery Confident communicator with solid customer-facing skills Sharp analytical ...

continuity; security assurance; tooling and operational capability; and the continued development of the team. You'll oversee areas including MDR/XDR, security monitoring, threat detection and vulnerability management, whilst operating across regulatory and contractual security requirements, including Cyber Essentials Plus. And when significant cyber incidents occur ...

continuity; security assurance; tooling and operational capability; and the continued development of the team. You'll oversee areas including MDR/XDR, security monitoring, threat detection and vulnerability management, whilst operating across regulatory and contractual security requirements, including Cyber Essentials Plus. And when significant cyber incidents occur ...

Salary: £80,000 - £100,000 Location: Coventry (Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs into effective detections Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage ...

maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. Essential: * Proven experience in Software Engineering roles * Experience in some of the following technologies: o Elasticsearch … Helm o Ansible o Basic networking * Strong analytical and troubleshooting skills * Willingness to learn new technologies * Attention to detail Advantageous: * Experience in SIEM Detection Engineering. * Experience of On Premise SIEM solutions * Experience with log source onboarding and normalisation * Knowledge of Linux, Windows and Network Administration * Knowledge and experience ...

incident response capability by developing, maintaining, and continuously improving cyber security playbooks, procedures, and associated documentation. You'll work closely with incident responders, detection engineers, and wider cyber teams to ensure processes are clear, repeatable, and aligned with best practice. You'll support the full incident lifecycle - from preparation … during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

Centre Analyst £30,000 - £40,000 West Yorkshire Our client runs a 24x7x365 Security Operations Centre supporting customers across multiple industries against an evolving threat landscape. They're looking for a SOC Analyst to join the team on a shift basis, taking ownership of frontline threat detection ...