1 to 25 of 30 Threat Detection Jobs in the South East

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high … impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid/remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea to deployment Innovation-driven : Develop ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception … Copilot. The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery ...

Service Provider (MSP) to recruit a Security Analyst based in Reading. The successful candidate will play a key role in security operations, incident response, threat detection and automation, helping to protect customer environments while continuously improving security platforms and processes. Key Responsibilities Manage the full security incident lifecycle … from investigation through to resolution. Monitor, investigate and respond to security events across cloud, identity and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct ...

+ 15k Bonus | Hybrid UK A growing cyber security consultancy is seeking a Senior Cyber Consultant to help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating … security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned to MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation ...

response activities, ensuring effective containment, eradication, recovery, and lessons learned. Develop, maintain, and test cyber incident response plans, procedures, and playbooks. Oversee security monitoring, threat detection, threat intelligence, and vulnerability management activities. Provide enterprise-wide oversight of network security technologies, controls, and architectures. Ensure the effective management … optimisation of firewalls, network access controls, intrusion detection/prevention systems, secure remote access solutions, and related security platforms. Lead investigations into security breaches, suspicious activity, and emerging threats. Drive continuous improvement across security operations processes, tooling, and capabilities. Produce security reporting, metrics, and risk-based recommendations for senior ...

years of technical pre‐sales experience in cybersecurity 3+ years of people management experience, including remote teams Deep understanding of enterprise security architecture and threat landscape Proven track record of driving complex technical sales cycles Experience with security tools, malware analysis, and threat detection Strong executive presence … utilizing AI technologies to enhance decision‐making, streamline workflows and processes, improve efficiency and drive business outcomes. Technical Knowledge Advanced understanding of cyber security, threat detection and incident response. Familiarity with attack frameworks, exploitation techniques and threat actors. Knowledge of security tools, MITRE ATT&CK and industry ...

most critical organisations. This is your opportunity to work at the frontline of cyber defence, investigating real-world threats, shaping detection capabilities, and helping drive the evolution of a mature and high-performing SOC. You'll be joining a collaborative team of cyber specialists who are passionate about defending … organisations from evolving threats. You'll have the opportunity to influence SOC strategy, enhance detection capabilities, develop your expertise, and work with cutting-edge security technologies in a fast-paced operational environment. Ready to make an impact? Join us and help protect systems that matter. Apply today and take ...

Role Summary Sophos is seeking an experienced MDR Manager to support its Managed Detection and Response customers. The successful candidate will lead MDR analysts and day-to-day operations, ensuring operational quality, timely incident handling, effective customer communication, consistent reporting, and continuous service improvement. As part of the Managed … Detection and Response team, you will help deliver best-in-class monitoring, detection, and response services that proactively defend customer environments. You will guide investigations, review quality, coach analysts, manage escalations, and use operational insights to improve team performance, investigation consistency, and customer outcomes. What you will ...

available throughout the hiring process. This is an opportunity to play a key role in protecting critical customer environments, leading complex investigations, driving proactive threat hunting activities, and helping shape the future of our security monitoring services. Were looking for someone who enjoys solving difficult security challenges, mentoring others … leading the investigation and response to sophisticated cyber threats and incidents. Youll work closely with internal security teams, customers, and stakeholders to continuously evolve detection capabilities, improve operational maturity, and ensure DXC continues to deliver a world-class security monitoring service. This role operates on a Monday to Friday ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

Analyst - £500/day via Umbrella Short Term Contract - Hemel Hempstead (Onsite) - SCC Flex Contract We're looking for an experienced SOC Analyst/Detection Engineer to support the delivery of a prioritised detection engineering backlog across AWS, Azure, Microsoft 365, Defender XDR, Dynatrace, and ServiceNow environments. Your … responsibilities as the SOC Analyst: Designing, developing, testing, and deploying detection use cases aligned to MITRE ATT&CK. Creating and optimising detection rules, alerts, and correlation logic across multiple security platforms. Developing detections for credential compromise, privilege escalation, persistence, lateral movement, and data exfiltration. Performing validation, tuning ...

security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes and reporting emerging risks. Researching and recommending new security technologies, trends and best practices. … broad range of security technologies, tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with ...

looking for a Cyber Security Implementation Engineer to play a key role in delivering cutting-edge AI-powered Security Operations capabilities. Working alongside Cyber Detection & Response, Cloud, Infrastructure, Network and Platform teams, you'll help implement intelligent detection, investigation and response technologies that enhance security operations across … third-party platforms into the security ecosystem. Coordinate service accounts, permissions and connectivity with Cloud, Infrastructure, Identity and Network teams. Validate AI-assisted detection, investigation and automated response workflows. Design and execute testing scenarios, attack simulations and operational readiness exercises. Identify integration issues, deployment risks and workflow improvements. Troubleshoot ...

appropriately flowed down to suppliers, partners, and third-party service providers. 4. Operational Cyber Security Management Oversee operational security activities across multiple entities, including: Threat detection and monitoring Incident response and remediation Vulnerability identification and patch management Endpoint protection and hardening Network and boundary defence IDS/… research). Demonstrable experience managing cyber security in high-assurance and classified system environments. Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking ...

. The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated workflows, and help shape the future direction … telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point for complex security engineering issues. Mentor SOC analysts and engineers. Improve detection, response and operational processes through automation. Maintain engineering documentation, standards and best practices. Skills & Experience 3-5+ years' experience within ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards, reporting ...

capabilities and gaps Support development of bespoke solutions based on organisational exposure Work across network architecture to ensure secure design principles Contribute to improving detection and response capabilities (e.g. deception techniques) Key Experience: Strong background in network security engineering Experience with network traffic analysis and monitoring tools Solid understanding … network architecture and security principles Experience identifying vulnerabilities and implementing mitigations Ability to conduct independent security assessments Exposure to advanced detection techniques (e.g. deception, threat detection) Exposure to enterprise NetSec vendors - Palo Alto/Zscaler/Darktrace/Forescout #J-18808-Ljbffr ...

configure, and manage Palo Alto Networks XSIAM platform to ensure optimal performance and security Develop and maintain security policies, rules, and configurations to enhance threat detection and response capabilities Integrate XSIAM with other security tools and information systems to automate security operations and workflows Conduct continuous monitoring … analysis of security alerts and incidents to identify trends and potential threats Coordinate with internal teams and external partners to share threat intelligence and improve overall security awareness Provide technical support and guidance on cybersecurity matters to IT and business units. Stay up-to-date with emerging security threats ...

from incidents, operational activity and service development. Identify and manage technical security risks, vulnerabilities and appropriate mitigations. Develop and maintain security monitoring, vulnerability and threat-detection tooling. Provide technical guidance, assurance and mentoring to operational teams, projects and colleagues. Essential skills Strong experience designing and implementing technical security … Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure environments. Strong analytical and problem-solving skills, including threat analysis and security incident response. Ability to manage priorities, communicate technical risks clearly and demonstrate leadership through coaching or mentoring. Desirable criteria Experience working across both cloud ...

Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues … need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such ...

Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues … need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such ...

ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including LAN/… standards Support disaster recovery and business continuity planning, testing, and readiness activities Key Experience & Skills: Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing ...

provisioning of accounts. Implement and maintain identity governance controls aligned to corporate policy. Monitor authentication behaviour across all users and systems to support threat detection and response. Specialist Identity Capabilities Manage workload identities, including non-user accounts and credential rotation. Own privileged identity management processes, ensuring secure control … platforms such as Entra ID and Active Directory. Experience across identity lifecycle management, governance, and privileged access. Understanding of modern authentication methods and identity threat landscape. Extensive cybersecurity experience with a strong focus on identity management. Proven leadership experience managing global teams and security programmes. Relevant certifications such ...