Latest Threat Detection Jobs

Spotlight

Senior Security Consultant (Delivery & Growth)

This role involves leading technical security consulting engagements, working closely with client stakeholders to solve complex security challenges and deliver high-quality consulting outputs. The consultant will also identify and develop opportunities for follow-on work, contributing to account growth and client value.

RiverSafe London, United Kingdom

Hybrid Permanent

Threat Analyst 2

Investigate and analyze security events using Sophos tooling, handle escalations from Tier I analysts, conduct threat hunting, and support customer threat neutralization. Collaborate with security teams to improve processes and provide recommendations to reduce customer risk. Work in a 24/7 environment with a focus on proactive threat detection and response.

Sophos United Kingdom

Remote

Detection Engineer

As a Detection Engineer, you will work in a small, global team to continuously develop and improve Darktrace's threat detection models. You will address customer requests, respond to cyber incidents, and collaborate with various internal teams to enhance the product and processes.

Darktrace United Kingdom

Sr. AI Threat Researcher

A senior individual contributor role focused on researching how threat actors exploit AI across the attack lifecycle, including LLM-powered social engineering, AI-generated malware, and attacks on agentic AI systems. The role involves analyzing telemetry and OSINT to detect adversarial AI use, developing detection strategies, automating research workflows using AI, and producing actionable intelligence for internal and external dissemination. Works cross-functionally with threat researchers, malware analysts, and engineers to integrate findings into protections and operational systems.

Sophos United Kingdom

Remote Permanent

Sr. SDET - Cloud, Detection Engineer , London)

Design and build scalable cloud detection systems that process billions of events to identify sophisticated threats across multi-cloud environments. Work at the intersection of distributed systems, data engineering, and security analytics, implementing custom query languages, event orchestration, and advanced correlation engines. Collaborate with security researchers to turn expertise into production-grade detection capabilities with low latency and high reliability.

CrowdStrike London, United Kingdom

Hybrid Permanent

SOC Lead

This role involves overseeing SOC activities, leading incident response, and mentoring a team of analysts. The focus is on cyber threat detection, incident investigation, and using the Splunk Enterprise Security platform.

NCC Group Remote, United Kingdom

Hybrid

Senior Solution Architect - Email & Collaboration Security

This role involves shaping the technical direction of Mimecast's core Email & Collaboration Security (ECS) product line by translating complex customer and business challenges into durable, scalable architectures. The Senior Architect will lead problem-framing workshops, own critical integration contracts, and ensure engineering teams have a stable foundation to innovate quickly—while navigating two decades of legacy systems and AI-augmented threats. The position demands deep collaboration across product, engineering, and architecture leadership, with a strong emphasis on AI-first design practices and cost-aware, customer-centric decision-making.

Mimecast London, United Kingdom £124,000 – £186,000 pa

On-site Permanent Clearance Required

Cyber Security Engineer

This role involves hands-on security engineering within a mature cyber resilience function, focusing on Microsoft security stack (Defender, Sentinel, Entra ID), Azure cloud security, identity protection, and data controls via Purview. The engineer will enhance threat detection, support incident response, manage vulnerabilities, and ensure alignment with standards like NCSC CAF, ISO 27001, and NIST CSF, while acting as a security SME across technical and business teams.

Yolk Recruitment Cardiff, Cymru / Wales, CF10 2AF, United Kingdom £62,000 – £72,000 pa

Senior Security & Cyber Operations Manager (Financial Services)

This role involves leading and optimizing the end-to-end security operations and cyber defense ecosystem, including incident response, threat detection, and AI integration. The manager will drive the practical application of AI and SOAR to enhance the SOC's capabilities and ensure rapid detection and response to security incidents.

LMA Recruitment London, United Kingdom

Hybrid Permanent

SecOps Engineer

The SecOps Engineer will play a critical role in implementing and maintaining security controls, monitoring threat detection tools, and collaborating with external SOC teams. Responsibilities include triaging security alerts, conducting vulnerability scans, managing patching compliance, and automating security tasks using scripting.

Context Recruitment London, United Kingdom

Manager, Data Science

Lead a team of data scientists focused on developing machine learning systems for cybersecurity threat detection and agentic AI. Drive technical strategy, mentor team members, and collaborate across security research, engineering, and product teams. Work with massive-scale data to build and deploy advanced models for malware detection, behavioural analysis, and AI-driven security automation in a production environment.

CrowdStrike England

Remote Permanent

Head of Information Security

This role involves leading the information and cyber security strategy, setting security policies, and working closely with technical teams to identify and remediate security gaps. The position focuses on hands-on technical expertise and influencing senior stakeholders to manage security risks effectively.

Endeavour Recruitment London, United Kingdom £115,000 – £125,000 pa

Group Head of Information Security & Cyber Operations

This role involves leading the Group Information Security and Cyber Operations function, developing and delivering a cyber security strategy, and overseeing areas like incident management, risk governance, and security assurance. The position requires a hands-on leader with significant experience in transforming and maturing security operations within a complex, regulated environment.

William Scott Consulting Ltd Gerrards Cross, Buckinghamshire, United Kingdom £115,000 – £125,000 pa

Malware Researcher

The role involves in-depth analysis of cyber threats, malware, and adversary TTPs using data science and analytical techniques. You'll proactively hunt for emerging threats, develop threat intelligence reports, and refine detection methodologies based on research. Collaboration with security researchers and product teams helps strengthen Darktrace’s AI-driven threat response capabilities.

Darktrace London, UB8 1LQ, United Kingdom

Head of Information Security

This role involves leading the development and implementation of the company's cyber security strategy, including ISO 27001 and Cyber Essentials Plus. Responsibilities include managing security operations, incident response, and mentoring the security team, while working closely with senior stakeholders across various departments.

MJA (London) Ltd Barbican, City And County Of the City Of London, EC2Y 8DT, United Kingdom

On-site Permanent