254 jobs for “Threat Detection”
CrowdStrike Romania
Investigates emerging malware and cyber threats across the full attack lifecycle, validating Falcon's detection coverage and distinguishing genuine threats from background noise. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, and supports external security testing programmes such as AV-Test and SE Labs.
CrowdStrike London
Builds and operates an end-to-end validation pipeline for a cloud detections platform, verifying component, system and application-level features across processing, data and customer-facing layers. Involves CI/CD work with Jenkins or GitHub Actions, code and design reviews, and debugging race conditions and performance bottlenecks in large distributed systems.
eFinancialCareers Glasgow £60,000 pa
Hands-on security engineering role protecting cloud, hybrid and on-premises environments, covering SIEM log ingestion and automation, firewall and network security, and infrastructure assessments using CIS Benchmarks. The engineer also supports vulnerability management, endpoint security, IDS/IPS and SOC incident response, applying security to CI/CD pipelines and Infrastructure as Code.
Amazon London
Detect and mitigate invalid traffic and ad fraud across Amazon's advertising network by reverse-engineering malware, inspecting network traffic and hunting threats, including on the dark web. The role blends security engineering, botnet mitigation and intelligence sharing with teams across Amazon, requiring creativity and judgement in a highly ambiguous fraud landscape.
Palo Alto Networks United Kingdom
Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.
Avanti Recruitment London £60,000 – £100,000 pa
Advises clients on core security across cloud, identity, applications, data and governance while addressing AI-specific risks such as prompt injection, excessive agency and data leakage. Runs security assessments and architecture reviews, threat models agentic workflows and LLM applications, and helps establish guardrails and governance for AI systems from experimentation to production.
Palo Alto Networks London
Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.
Maxwell Bond London £115,000 – £135,000 pa
Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.
Via Match Leicestershire £30,000 – £60,000 pa
Builds security into the software delivery lifecycle for a major UK retail business, integrating tooling into CI/CD pipelines and securing multi-cloud AWS and GCP environments. Work covers CSPM/CNAPP controls, cloud security baselines and guardrails, threat modelling, security architecture reviews and incident response support, alongside detection engineering. Hybrid role with at least one office day per week, collaborating closely with engineering teams to make security an enabler.
Morgan Hunt Recruitment London £88,000 – £97,000 pa
Lead a regulatory organisation's cyber and information security function, shaping and delivering the organisation-wide security strategy and roadmap. Own the operating model, policies, risk management, security architecture, incident response and third-party testing, advising senior leadership on cyber risk. Hybrid role with two days a week in London and possible on-call duties.
Planet Recruitment Manchester £40,000 – £50,000 pa
Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.
Deloitte Edinburgh
Senior client-facing architect leading cyber resilience and recovery work, defining reference architectures across on-premises, hybrid and multi-cloud environments. Designs clean-room recovery, immutable backups and RTO/RPO-aligned restoration, advises senior stakeholders on regulatory resilience, and leads architecture workstreams on complex engagements while mentoring architects.
Netcraft Bath
Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating threat analysis to clients. The role involves customer feedback, process improvement, and regular weekend shift work to support 24/7 protection, with full training provided for those new to cybersecurity.
BRAINTREE DISTRICT COUNCIL Braintree £37,896 – £41,541 pa
Hands-on first point of contact for ICT security issues, monitoring systems, investigating threats and responding to incidents while maintaining documentation and response procedures. The role also covers firewall, IDS, anti-virus and log management controls, security awareness training, and wider ICT support including Microsoft 365 administration and network monitoring within ITIL frameworks.
Amazon London
Builds and operates AWS services that detect and automatically mitigate cybersecurity threats across Amazon's infrastructure at massive scale. Works with security engineers and data scientists on low-latency, big-data architectures using Lambda, Kinesis and DynamoDB, with shared ownership of operational excellence and on-call rotation.
