1 to 25 of 32 Threat Detection Jobs in the South East

security operations across AWS and cloud-native environments. Working as a subject-matter expert within a Palo Alto security ecosystem, you will help improve threat detection, reduce security risk, enhance Zero Trust controls, and support the ongoing evolution of cloud security technologies. Key responsibilities will include: Operating … optimising Cortex Cloud and Cortex XSIAM platforms Developing and tuning threat detection rules and automated response playbooks Supporting incident response activities, including investigation and remediation Managing Cloud Security Posture Management (CSPM) capabilities Improving Kubernetes and container security posture Supporting Prisma Access and secure remote access technologies Driving security ...

World Class Defence Organisation is currently looking to recruit a Cyber Threat Operations Specialist subcontractor on an initial 12 month contract.You do not need to hold any current security clearance in order to apply. However, SC security clearance will be required prior to starting the position , with DV clearance … background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote working: Onsite ...

opportunity has arisen in the Active Defence Incident Response Team within Digital Excellence (DEX) for a Cyber Threat Operations specialist. Supporting the Active Defence & Incident Response Manger in assisting DEX meet the challenges and demands of countering the Cyber Threat. The successful applicant will drive a proactive ethos … ever-changing cyber security environment and provide robust threat hunting, detection Engineering and analysis within a high performing team environment. Responsibilities: To support the Active Defence Incident Response Manager in assisting Information Management UK meet the challenges and demands of countering the Cyber Threat. Support for the operational ...

Lead integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry. . Design and optimise KQL queries to support effective threat detection and investigation. . Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases. . Develop … data normalisation logic. . Strong knowledge of KQL (Kusto Query Language), advanced query development and optimisation. . Experience designing, building and tuning analytic rules, detection logic and threat use cases. . Experience developing Logic Apps, Playbooks and SOAR automation workflows. . Experience implementing CI/CD pipelines using ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

decision-making challenges. Working with UX designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations … engaging with prospective customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution ...

technical leadership role, combining day-to-day security operations with strategic leadership. You will work directly with security technologies, investigate threats and incidents, improve detection and response capabilities, and work closely with technical teams and senior stakeholders. The role is hybrid, with 3 days per week in the organisation … will be expected to work hands-on with these technologies, rather than simply manage their use. This will include security monitoring, alert investigation, threat hunting, detection engineering, vulnerability management and security automation. Key Responsibilities Lead on day-to-day cyber security operations and continuously improve the organisation ...

utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat Detection Analyst key responsibilities are: Accountable ...

organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response. Sophos offers … industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively ...

most critical organisations. This is your opportunity to work at the frontline of cyber defence, investigating real-world threats, shaping detection capabilities, and helping drive the evolution of a mature and high-performing SOC.You'll be joining a collaborative team of cyber specialists who are passionate about defending organisations … from evolving threats. You'll have the opportunity to influence SOC strategy, enhance detection capabilities, develop your expertise, and work with cutting-edge security technologies in a fast-paced operational environment.Ready to make an impact Join us and help protect systems that matter. Apply today and take your cyber ...

industry. You'll be part of a highly skilled team at the forefront of cyber defence, leading investigations into sophisticated threats, developing advanced detection capabilities, and helping shape the future direction of our security monitoring services. Why This Opportunity Stands Out This isn't just another SOC role. … have the opportunity to: Lead investigations into advanced cyber threats within highly secure environments. Drive threat hunting campaigns and uncover previously unseen attack techniques. Influence how security monitoring services evolve and improve. Mentor and develop junior analysts, helping shape the next generation of cyber talent. Work directly with customers ...

role in monitoring, investigating and responding to cyber security incidents across critical client environments. You will analyse alerts, investigate complex threats, improve detection capabilities and contribute to the ongoing maturity of the SOC. You will also: Monitor and investigate security events across enterprise environments Perform incident response activities … support remediation efforts Analyse network traffic, endpoint activity and system logs Improve detection rules using MITRE ATT and CK techniques Produce technical and customer facing reports Support threat intelligence activities and mentor junior analysts where required Senior SOC Analyst Essential Skills Previous experience within a Security Operations Centre ...

activity across SIEM, EDR and other security platforms Identifying indicators of compromise, suspicious activity and emerging threats Supporting incident response and containment activities Performing threat hunting activities to proactively identify potential security risks Escalating significant or complex incidents where appropriate Working closely with Tier 1 and Tier 3 analysts … incident responders and other technical teams Tuning and improving detection rules and use cases to reduce false positives and improve threat detection Analysing logs and security events from endpoints, networks, cloud environments and other infrastructure Producing clear investigation reports and documenting incidents, findings and recommendations Maintaining awareness ...

design, implementation, administration, and optimization of Proofpoint security solutions within a large enterprise environment. The ideal candidate will possess deep expertise in email security, threat protection, data loss prevention (DLP), and email authentication technologies, ensuring robust protection against phishing, malware, and other cyber threats. Your Key Responsibilities: • Serve … email security technologies. • Design, deploy, configure, and maintain Proofpoint solutions, including: o Proofpoint Email Protection (PEP) o Proofpoint Targeted Attack Protection (TAP) o Proofpoint Threat Response Auto-Pull (TRAP) o Proofpoint Email Fraud Defense (EFD) o Proofpoint Information Protection/DLP • Manage email security policies, spam filtering, malware protection ...

critical leadership role in protecting our technology estate, strengthening our cyber defences and ensuring we're ready to respond to an ever-changing threat landscape.This is an exciting opportunity for an experienced operational security professional who thrives in a fast-paced environment. You'll lead a team of Security … detect, respond to and recover from cyber threats.Your responsibilities will include:Leading and developing a high-performing team of Security Analysts, ensuring effective threat monitoring, investigation and incident response across NHBC's environments.Managing relationships with our Security Operations Centre (SOC), internal technology teams and third-party suppliers to ensure ...

Lead or support incident response activities in line with internal policies and procedures. Escalate significant incidents appropriately and provide clear, timely updates to stakeholders. Threat Detection & Prevention Proactively identify emerging threats, vulnerabilities, and attack patterns affecting the organisation. Tune and optimise security tools to reduce false positives … improve detection accuracy. Implement, manage, and maintain endpoint protection and security policies. Support vulnerability management activities, including remediation planning and risk tracking. Security Operations & Continuous Improvement Maintain and enhance security monitoring rules, alerts, and dashboards. Contribute to the development and maintenance of security runbooks and incident response playbooks. Support ...

enhancement projects Support incident investigations through advanced queries and custom scripting Maintain platform availability, resilience and performance Work closely with SOC analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security … tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies REST APIs HTTP/S JSON Infrastructure Active Directory LDAP Windows Server IIS SMB Storage Linux/Unix NFS Storage VMware Hyper-V Virtual Networking Security Engineering ...

reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps ...

Electronic Arts in Guildford, UK seeks a Senior Detection Engineer to advance our detection engineering strategy within the Enterprise Security team. This role is essential to safeguarding EA's cloud and production environments and will directly impact our ability to detect, respond to, and prevent cyber threats … scale. As a senior individual contributor, you will mentor junior engineers, help define engineering direction, and lead the development of scalable threat detection solutions, #J-18808-Ljbffr ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security. Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities. Integrate XSIAM with other security tools and information systems to automate security operations and workflows. Conduct continuous monitoring … analysis of security alerts and incidents to identify trends and potential threats. Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness. Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats ...

develop solutions. Support bids, proposals and contract opportunities through to successful delivery. Keep up to date with Cyber Security technologies, vendors and the evolving threat landscape. This is a true Account Management + Business Development role - you'll be expected to look after existing customers while continually hunting … understanding of the wider technology landscape. You'll ideally have some exposure to areas such as: Cyber Security/SOC environments, SIEM and threat detection, Network and endpoint security, Cloud Security, Vulnerability management, Major Cyber Security vendors and solutions. You'll be supported by experienced Cyber engineers ...

ensure a coordinated approach to security and compliance.Provide cyber security leadership and advice to senior management and key stakeholders.Drive continuous improvement across security monitoring, threat detection, vulnerability management, and security awareness.Why Join London Borough of Harrow At London Borough of Harrow, you will have the opportunity to shape ...

security risk analysis and resolution. Reporting to the DevOps Lead, you’ll help define security testing requirements, implement policy-as-code solutions, and integrate threat detection and gating into CI/CD pipelines to ensure secure and reliable software delivery. This role is currently completely remote from … first culture across development teams and the SDLC.• Lead the implementation of remediation efforts for identified risks and vulnerabilities, including patch management.• Collaborate on threat modeling exercises within development and DevOps teams.The skills and experience you needWe are looking for someone who:• Has knowledge of cyber security architecture within ...

platforms and technologies, including but not limited to: SIEM (Security Information and Event Management) Network Packet Capture platforms Anti-malware and malicious-code protection Threat detection technologies Security monitoring and analysis platforms Core responsibilities include: Maintain accurate mapping and topology of SOC toolsets, including integrations, connections and data ...

across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects … environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme governance ...