1 to 25 of 27 Threat Detection Jobs in the South East

well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high … impact detection capabilities , shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid/remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy : Lead projects from idea to deployment Innovation-driven : Develop ...

career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats ...

Title: Threat Intelligence Analyst Type: Contract | ASAP START - 1/03/2027 Day Rate: £582.28 (Umbrella Equivalent Rate) Location: Remote MUST HAVE SC - SECURITY CLEARANCE! Our client a seeking a Threat Intelligence Analyst to join their security team. Responsibilities Collaborate with Incident Responders, Security Operations and other … teams to define and prioritise cyber threat indicators. Maintain a comprehensive understanding of the evolving threat landscape to provide high-level situational awareness and proactive warnings about emerging threats. Monitor and analyse intelligence sources, including internal data, open-source reports, online databases and restricted intelligence sources, to identify ...

strengthen our overall cyber security posture. If you are passionate about leading high-performing teams, influencing strategic decisions and staying ahead of an evolving threat landscape, this is an opportunity to make a significant impact at a European scale. What you will do As our Director, Cyber Security (CISO … report meaningful security metrics, risk indicators and maturity measures to executive stakeholders. Strengthen cyber defence and resilience Lead our cyber defence capabilities, including monitoring, threat detection, incident response, crisis management and continuous improvement. Oversee Security Operations Centre capabilities, ensuring effective protection against evolving cyber threats. Lead executive cyber ...

defending core infrastructure, enterprise networks, and critical data against modern cyber threats. Working closely with the Head of IT Security, you will oversee threat detection, manage security appliances, enforce compliance frameworks, and ensure that robust defensive postures are embedded across the technology stack. Key Responsibilities Security Operations: Oversee … network telemetry for suspicious activities, execute rapid threat detection and response, tune perimeter defenses (firewalls and virtual private networks), and direct proactive patch management cycles. Compliance & Audits: Drive internal control testing and maintain alignment with structured information security standards such as ISO 27001, supporting both internal evaluations ...

most critical organisations. This is your opportunity to work at the frontline of cyber defence, investigating real-world threats, shaping detection capabilities, and helping drive the evolution of a mature and high-performing SOC. You'll be joining a collaborative team of cyber specialists who are passionate about defending … organisations from evolving threats. You'll have the opportunity to influence SOC strategy, enhance detection capabilities, develop your expertise, and work with cutting-edge security technologies in a fast-paced operational environment. Ready to make an impact? Join us and help protect systems that matter. Apply today and take ...

Manage boundary security SLAs, ensuring 100% compliance with availability, performance and security targets Lead boundary security operations team, ensuring round-the-clock monitoring and threat detection Manage boundary service P&L and resource allocation across multiple customer accounts Establish and maintain boundary service quality standards and operational procedures … Boundary Architecture & Security Design and implement boundary security architectures including firewalls, intrusion detection/prevention and DDoS protection Architect boundary security solutions aligned with MOD security requirements and defence standards Design boundary traffic inspection, content filtering and advanced threat protection Lead boundary security assessments and vulnerability remediation Implement ...

Security Operations Centre (SOC) or enterprise security operations environment. Proven hands-on experience administering and optimising enterprise security technologies, including SIEM platforms, Endpoint Detection & Response (EDR), Secure Web Gateways, Email Security solutions, and Cloud Security platforms. Strong understanding of security operations, with experience in incident response, threat detection, investigation, and remediation. Solid knowledge of network security principles, including firewalls, intrusion detection and prevention systems (IDS/IPS), TCP/IP, routing, switching, and packet analysis. Experience identifying, assessing, and mitigating security risks through vulnerability management, security assessments, and penetration testing. Ability to investigate and troubleshoot complex ...

excellent opportunity for someone with 2-4 years' hands-on security experience to take the next step in their career, working across threat detection, incident response, and security operations in a collaborative, fast-paced environment. Key Responsibilities Monitor security alerts and investigate potential threats using SIEM tooling Support ...

drive key decisions, and oversee cybersecurity across corporate IT, Operational Technology (OT), and manufacturing environments. Supported by the IT Infrastructure team, you will lead threat detection and response, vulnerability and patch management, security awareness, and compliance. You'll also own the organisation's patching strategy, champion security best ...

. The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated workflows, and help shape the future direction … telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point for complex security engineering issues. Mentor SOC analysts and engineers. Improve detection, response and operational processes through automation. Maintain engineering documentation, standards and best practices. Skills & Experience 3-5+ years' experience within ...

over 6,000 users. This role combines ownership of security awareness initiatives and KnowBe4 administration with hands-on cyber security operations, including incident investigation, threat analysis, vulnerability management, and Microsoft Defender-based security monitoring. Client Details This company operates within the property industry. Description Administer and manage the KnowBe4 … audiences Support security incident investigations and response activities Collaborate with internal and external SOC teams Investigate security alerts and indicators of compromise (IOCs) Conduct threat intelligence research and reporting Support vulnerability management and remediation efforts Assist with access management and operational security processes Contribute to cyber security dashboards, reporting ...

guidance across the wider business Skill required Security operations and cyber defence Azure and AWS security Enterprise infrastructure and networking Identity and access management Threat detection and incident response Vulnerability management Security governance, risk and compliance Secure development and DevSecOps practices Experience with Splunk Enterprise Security would ...

hybrid environmentsdeveloping, implementing and maintaining cyber security strategy and governance (aligned to various frameworks e.g. ISO27001, NIST, Cyber Essentials)overseeing security operations (SOC, threat detection, vulnerability management etc.), and incident response plansrisk management and compliance, ensuring compliance with various standards and frameworksAbout youApplicants for the Cyber Security Engineer ...

hands-on experience with Microsoft Defender Experience monitoring and responding to security alerts in a SOC or security-focused environment Knowledge of endpoint security, threat detection, and incident response processes Understanding of cybersecurity principles, vulnerabilities, and attack techniques Ability to investigate and analyse security events effectively Experience identifying ...

risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions Oversee Patch Management ...

work closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management. The engagement will focus on three key areas: Security Monitoring & Threat Detection Review and assess … existing security configurations against Microsoft best practices and recognised industry standards. Evaluate alert quality, incident response processes, and overall monitoring effectiveness. Identify gaps in detection capability and security visibility. Assess coverage against MITRE ATT&CK techniques and tactics. Produce a prioritised remediation roadmap, balancing risk, effort, and business impact. ...

ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including LAN/… standards Support disaster recovery and business continuity planning, testing, and readiness activities Key Experience & Skills: Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing ...

security risk analysis and resolution. Reporting to the DevOps Lead, you’ll help define security testing requirements, implement policy-as-code solutions, and integrate threat detection and gating into CI/CD pipelines to ensure secure and reliable software delivery. This role is currently completely remote from … first culture across development teams and the SDLC.• Lead the implementation of remediation efforts for identified risks and vulnerabilities, including patch management.• Collaborate on threat modeling exercises within development and DevOps teams.The skills and experience you needWe are looking for someone who:• Has knowledge of cyber security architecture within ...

provisioning of accounts. Implement and maintain identity governance controls aligned to corporate policy. Monitor authentication behaviour across all users and systems to support threat detection and response. Specialist Identity Capabilities Manage workload identities, including non-user accounts and credential rotation. Own privileged identity management processes, ensuring secure control … platforms such as Entra ID and Active Directory. Experience across identity lifecycle management, governance, and privileged access. Understanding of modern authentication methods and identity threat landscape. Extensive cybersecurity experience with a strong focus on identity management. Proven leadership experience managing global teams and security programmes. Relevant certifications such ...

architectures within Microsoft Azure. Lead the deployment and integration of Microsoft Defender across the Azure estate. Design and deliver Microsoft XDR solutions to improve threat detection and response capabilities. Provide technical leadership and architectural guidance throughout the project lifecycle. Collaborate with infrastructure, security, and engineering teams to ensure ...

Knowledge of data protection, compliance and security assurance principles Experience assessing, prioritising and mitigating security risks within a business environment Familiarity with security monitoring, threat detection, incident response and vulnerability management activities Broad understanding of infrastructure, networks, identity management and application security concepts Ability to analyse complex information ...

across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects … environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme governance ...

Network & Security Engineering Implement, and support enterprise grade network and security solutions Deploy, configure, and troubleshoot Cisco Firepower firewalls, including policy configuration, VPNs, and threat protection Implement and maintain Cisco Identity Services Engine (ISE) for network access control, authentication, and authorization Work with Cisco Stealthwatch and other Cisco security … tools to provide visibility, monitoring, and threat detection Configure and support FortiGate firewalls where required, including firewall policies, VPNs, and security profiles Produce high quality technical documentation, including designs, implementation guides, and handover documentation Customer Engagement & Communication Serve as a trusted technical advisor to customers, clearly explaining solutions ...

Data Collection Test Technician Location: Salfords, Surrey Permanent, on-site role Company: Rapiscan Systems Rapiscan Systems is a world-leading provider of advanced detection and inspection technologies, helping airports, borders, ports, military facilities, and critical infrastructure organisations around the globe combat terrorism, smuggling, illegal immigration, and trade fraud. … operations. About The Role As a Data Collection Test Technician, you will play a key role in validating and improving cutting-edge X-ray detection systems. You will be responsible for planning and conducting test activities, collecting and analysing data, maintaining detailed records, and providing valuable feedback ...