254 jobs for “Threat Detection”
CrowdStrike Jacksonville, United States £72,000 – £130,000 pa
Technical analyst role in a virtual security operations centre, monitoring and investigating security alerts in real time. Involves incident handling across Windows, Mac and Linux, malware analysis, remote remediation, and serving as escalation point and mentor for junior analysts while producing customer-facing findings.
CrowdStrike Reading
Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.
Darktrace Cambridge
Owns the end-to-end roadmap for Darktrace's Network Detection and Response product, deciding what gets built and in what order. Works directly with customers running zero-trust, cloud-connected and segmented estates, partners with R&D on prioritisation and testing, and supports Product Marketing on launches and go-to-market. Acts as internal subject matter expert for the NDR portfolio.
Darktrace London
Owns the end-to-end roadmap for Darktrace's Network Detection and Response product, deciding what gets built and in what order. Works directly with customers running complex zero-trust, cloud-connected and segmented estates, translating their needs into product decisions alongside R&D and Product Marketing. Acts as the internal subject matter expert for the NDR portfolio, with a hybrid working pattern based in London.
Spectrum IT Recruitment Southampton £65,000 pa
Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and remediation tracking, supporting penetration tests and audits while aligning with NIST CSF, NIS Regulations and Cyber Essentials alongside infrastructure and service delivery teams.
Akkodis West Midlands (Region) £65,000 – £75,000 pa
The role focuses on detection engineering and security automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. Day to day involves analysing workflows, creating automations and enrichments across security tools, and managing an engineering backlog. It is primarily remote with occasional travel to the Midlands head office.
Amazon London
Join a Security Operations Centre to build detections for suspicious and malicious behaviour, respond to security incidents, and engineer automation and AI-driven solutions that improve team efficiency. You'll collaborate with data scientists, software engineers and security experts to protect AWS infrastructure and UK customers at massive scale.
Risk Ledger London £90,000 – £100,000 pa
Owns and matures security operations across cloud, endpoint and SaaS environments, covering detection engineering, incident response, vulnerability management and AWS/GCP security posture. Over time shifts toward security engineering and architecture, designing scalable telemetry and detection platforms and embedding secure-by-design principles with engineering teams.
eFinancialCareers London
Engineering-led role building defensive capability against AI-driven threats, spanning AI-assisted vulnerability management, security architecture for agentic AI, and detection and response for AI-originated attacks. Sits within Citi's CISO organisation across four teams, with a mandate to ship production tooling rather than work in an innovation lab.
Palo Alto Networks London
Senior individual-contributor role bridging strategic customers, Product Management, Engineering and Sales across the Cortex platform. Sets technical strategy for XSIAM, XDR, XSOAR, CNAPP and AI Security, influences roadmap decisions, and mentors technical staff while acting as a trusted advisor to CISO-level executives.
Palo Alto Networks Seville, Spain
Senior individual-contributor role bridging strategic customers, Product Management, Engineering and Sales across the Cortex platform. Sets technical strategy, influences roadmap decisions, and mentors field teams while developing deep expertise in XSIAM, XDR, XSOAR, CNAPP and AI Security.
eFinancialCareers Belfast
Operational role running penetration tests, vulnerability assessments and Red Team adversarial evaluations across a global bank's application portfolio. The work is twofold: testing GenAI, agentic and LLM-backed systems for prompt injection, retrieval poisoning and tool misuse, and using AI tooling to speed up security testing. Involves building triage pipelines and containment architectures for AI agents at enterprise scale.
Deerfoot Recruitment Solutions London £500 – £550 pd
Hands-on contract role managing a broad estate of security tooling across network, email, endpoint and web, plus red team platforms for forensics, threat monitoring and deception. Day to day involves patching, upgrades, policy tuning, troubleshooting, and deploying and integrating new tools, including vendor replacements such as a new web proxy and email gateway. Works within an IT Security team at a financial services organisation, supporting audit and risk activity alongside engineering projects.
Randstad Technologies Recruitment London £450 – £460 pd
Act as the bridge between technical security architecture and senior business stakeholders, owning the cyber risk profile for critical Risk, Finance and Treasury domains. Embed security-by-design controls, oversee vendor and SaaS risk, lead control assessments and audits, and provide risk-based direction during major incidents. Hybrid role with three days on-site in London.
Alexander Mae HR Ltd Malmesbury £130,000 – £140,000 pa
A senior leadership role reporting to the CFO, owning the strategic and operational direction of the IT function across a diverse private group. The remit spans technology strategy, AI and emerging tech adoption, data governance, cybersecurity, cloud, infrastructure and service delivery, plus budget, supplier and team leadership. It is distinct for its board-level influence and mandate to define a new technology roadmap rather than inherit one.
