1 to 25 of 96 Threat Detection Jobs in the South East

business need. The Role: Agentic AI for Security & Sentinel Advanced Capabilities Lead the adoption and integration of Agentic AI for Security to enable autonomous threat detection, adaptive response, and continuous security posture improvement. Architect and optimise Microsoft Sentinel for SIEM, UEBA, and threat intelligence integration, leveraging Microsoft … advanced context-aware analytics and automation. Develop and maintain security analytics and data pipelines within Sentinel Data Lake to support large-scale threat detection, incident response, and threat hunting, while optimizing cost and enabling Agentic AI-driven security operations. Integrate and automate security workflows using Microsoft Sentinel ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

that reduce risk with quantifiable results. We're comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of specialty insurance giant, Beazley, we've been … unique client challenges. Summary: The SOC Operations Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of Beazley Group's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms. Working within the IT Security function and in close collaboration with the Beazley ...

management of modern SIEM and EDR platforms. This role is ideal for someone with strong hands-on technical security expertise and a passion for threat detection, analysis, and automation. Key Responsibilities: Syslog experience and/or strong Linux skills SIEM Deployment & Management Configure, deploy, and maintain SIEM platforms … . Build and optimise log ingestion pipelines. EDR Deployment & Management Manage and maintain tools including Tanium , Trellix , FireEye , Microsoft Defender , or Elastic EDR . Threat Detection & Analysis Monitor security logs and alerts. Investigate anomalies, understand attack patterns, and provide actionable recommendations. Syslog Management Configure and maintain Syslog servers ...

Adword Job Title: SOC Threat hunting Analyst Location: Remote Duration: 04 months contract Active SC Clearance required Experience and knowledge Key Responsibilities: Threat Detection Use Case Development: Design and implement detection logic aligned to specific threat scenarios, using industry frameworks such as MITRE ATT&CK. … Maintain detection content throughout its lifecycle - from development and testing to deployment and tuning. Work with client Lead Analysts to ensure content relevance and effectiveness in detecting threats across various environments. Proactive Threat Hunting: Conduct hypothesis-driven threat hunts based on client telemetry, threat intelligence ...

Cybersecurity Analyst Stockley Park, England - work on implementing and analyzing security event logs from SAP solutions - operate and enhance SAP Enterprise Threat Detection solution - calibrate detections for SAP ABAP, SAP Java, SAP HANA, SAP Commerce (Hybris) and SAP BTP - assist with securing SAP on AWS implementation - help securing … least 1 year Is Required Application Security Testing At least 1 year Is Required SAP System Hardening 2-5 years Is Required SAP Enterprise Threat Detection 2-5 years Is Required Enterprise Key Management 2-5 years Is Required SAP Business Technology Platform 2-5 years Is Required ...

site** Key Responsibilities SIEM Management & Optimization: Design, implement, and maintain Microsoft Sentinel workspaces, connectors, analytics rules, and playbooks Develop advanced KQL queries for threat hunting and reporting Optimize SIEM performance, cost, and data retention policies Troubleshoot log ingestion and parsing issues Log Source Integration: Onboard and configure critical … sources (AD, firewalls, servers, cloud infrastructure) Manage event collection and forwarding infrastructure Implement data filtering and custom log parsing Threat Detection & Use Case Development: Develop and refine detection rules based on threat intelligence and attack patterns Continuously improve detection efficacy and reduce false positives Security ...

incident response (DFIR) readiness. While also advancing the organisation's Adversarial Exposure Validation (AEV)- including Red and Purple Team activities The role ensures detection, response, and control validation against real-world threat actor tactics, techniques, and procedures (TTPs). Salary : £50,000 - £60,000 depending on experience Dynamic … incident response (DFIR) readiness. While also advancing the organisation's Adversarial Exposure Validation (AEV)- including Red and Purple Team activities. The role ensures detection, response, and control validation against real-world threat actor tactics, techniques, and procedures (TTPs). This is a Next step role for an experienced ...

will play a pivotal role in securing critical national infrastructure. You will lead technical delivery across two primary workstreams: the deployment of Advanced Threat Protection (ATP) and the implementation of the broader VMware vDefend security suite. Key Responsibilities 1. vDefend Firewall (DFW) Implementation You will support the platform deployment … Operational Design: Establishing the operating model, standardisation goals, and capacity management frameworks. Technical Integration: Implementing Identity Firewalls, logging, monitoring, and visibility metrics. 2. Advanced Threat Protection (ATP) You will oversee the enablement and tuning of ATP features to ensure robust threat detection, including: Detection & Prevention: Enabling ...

access events. Monitor, analyse, and respond to alerts from client security platforms (MDR/XDR, SentinelOne, Huntress, Fortinet, Mimecast, Avanan, Defender) to ensure rapid threat mitigation. Conduct vulnerability assessments, risk analyses and security audits across client environments, providing actionable recommendations and remediation guidance. Implement and maintain security hardening across … alignment with best practices and frameworks such as ISO27001, NIST, and Cyber Essentials Plus. Lead and coordinate incident response efforts, including root cause analysis, threat containment and post-incident reporting for clients. Collaborate with the Project and Service Desk teams to embed security into deployments, migrations, upgrades, and automation ...

design, deployment, and optimisation of advanced security capabilities across a complex virtualised environment. You will work closely with technical leads to enhance firewall, threat protection, monitoring, and investigative capabilities within VMware security platforms. What You'll Be Doing Firewall & Platform Enablement (vDefend DFW) Supporting deployment of the platform … macro, meso, and micro-segmentation policies Assisting with Identity Firewall configuration Enhancing logging, monitoring, visibility, and operational metrics Supporting capacity management activities Advanced Threat Protection (ATP) Assisting with ATP enablement and configuration Supporting policy activation for IPS/IDS Participating in testing, validation, and malware prevention tuning Helping with ...

implementation of Azure security best practices, policies, and controls. Manage and optimise Microsoft Sentinel SIEM, including rule creation, use-case development, automation, and threat hunting. Oversee vulnerability management activities using Tenable, ensuring timely identification, prioritisation, and remediation of risks. Support incident response activities, including investigation, containment, and root-cause … Strong hands-on experience with Azure Security Centre, Azure AD, Defender for Cloud, and cloud security architecture. Proven expertise in Microsoft Sentinel SIEM administration, threat detection, and automation (KQL experience desirable). Solid understanding of vulnerability management with Tenable (Tenable.io/Tenable.sc). Knowledge of industry security frameworks ...

implementation of Azure security best practices, policies, and controls. Manage and optimise Microsoft Sentinel SIEM, including rule creation, use-case development, automation, and threat hunting. Oversee vulnerability management activities using Tenable, ensuring timely identification, prioritisation, and remediation of risks. Support incident response activities, including investigation, containment, and root-cause … Strong hands-on experience with Azure Security Centre, Azure AD, Defender for Cloud, and cloud security architecture. Proven expertise in Microsoft Sentinel SIEM administration, threat detection, and automation (KQL experience desirable). Solid understanding of vulnerability management with Tenable (Tenable.io/Tenable.sc). Knowledge of industry security frameworks ...

enable secure cloud and end-user services guided by our Zero Trust Security Model. Our teams specialise in Identity Verification, Managed Endpoints, Threat Detection, Secure Remote Access, and Adaptive Security Policies—balancing exceptional user experience with enterprise-grade security. We operate under an ISO/IEC 27001-certified … limited to, private hosted environment (VPC/Vnet), private connectivity (endpoint, VPN services, etc.) Physical/Virtual/WebApp Firewalls for access controls, and threat detection. Automate provisioning and configuration using Terraform, Ansible, Azure CLI, and PowerShell. Contribute to CI/CD integration for infrastructure as code. Support ...

protecting systems, networks, and applications from cyber threats. This internship is ideal for beginners looking to build strong foundational skills in cybersecurity practices, threat analysis, compliance, and risk management. No prior professional experience is required. Key Responsibilities Learn and assist in identifying security vulnerabilities across networks, systems, and applications. … Systems, or a related field. Basic understanding of computer networking fundamentals. Familiarity with operating systems such as Linux or Windows. Interest in cybersecurity concepts, threat detection, and system protection. Strong analytical mindset, curiosity, and attention to detail. Good written and verbal communication skills. Nice to Have (Bonus Skills ...

protecting systems, networks, and applications from cyber threats. This internship is ideal for beginners looking to build strong foundational skills in cybersecurity practices, threat analysis, compliance, and risk management. No prior professional experience is required. Key Responsibilities Learn and assist in identifying security vulnerabilities across networks, systems, and applications. … Systems, or a related field. Basic understanding of computer networking fundamentals. Familiarity with operating systems such as Linux or Windows. Interest in cybersecurity concepts, threat detection, and system protection. Strong analytical mindset, curiosity, and attention to detail. Good written and verbal communication skills. Nice to Have (Bonus Skills ...