Threat detection engineer Work, Jobs in Worcester (with Salaries)

Threat Detection Engineer
Fluidone —Gloucester
- £40,000 - £45,000 a year
- Hybrid work
- Azure
- Analysis skills
- Communication skills
- Annual leave
Quick apply
Security Operations Engineer
AFH Financial Group —Bromsgrove
- Full-time
- Azure
- AWS
- Financial services
- Employee discount
AD - Global Detection Engineering
NCC Group —Cheltenham
- Full-time
- Hybrid work
- Communication skills
- Annual leave
Quick apply
Join the Growing Cyber Security Practice at Methods
Methods Business and Digital Technology —Birmingham
- Full-time
- Hybrid work
- Annual leave
- Employee assistance programme
Quick apply
Senior ANPR Engineer
Driver and Vehicle Standards Agency —Birmingham
- £44,241 a year
- Part-time
- Hybrid work
- Presentation skills
- Travel
- Annual leave
- Employee assistance programme
3d
Engineer - Splunk
NCC Group —Cheltenham
- Hybrid work
- Azure
- AWS
- Scripting
- Annual leave
Quick apply
Senior AI Security Engineer
Obsidian Security —Cheltenham
- £91,000 - £106,000 a year
- Master's degree
- SQL
- APIs
Quick apply
DevOps Engineer
Ripjar —Cheltenham
- Full-time
- Remote
- Azure
- AWS
- JavaScript
- Annual leave
- Employee assistance programme
Quick apply
Senior Security Data Engineer
Obsidian Security —Cheltenham
- £91,000 - £106,000 a year
- Hybrid work
- SQL
- Scripting
- APIs
Quick apply
Staff Engineer - Labyrinth Screening
Ripjar —Cheltenham
- Remote
- JavaScript
- Leadership
- Annual leave
- Employee assistance programme
Quick apply
Product Manager
Ripjar —Cheltenham
- Remote
- Product management
- IT
- Communication skills
- Annual leave
- Employee assistance programme
Quick apply
Security Engineer
NTT Ltd —Birmingham
- Azure
- Analysis skills
- Scripting
Marketing Automation & Operations Specialist
Ripjar —Cheltenham
- £45,000 - £55,000 a year
- Full-time
- Remote
- SQL
- Travel
- APIs
- Annual leave
- Employee assistance programme
Quick apply
Information Security Engineer
Rider Levett Bucknall —Birmingham
- Full-time
- Hybrid work
- Azure
- Organisational skills
- Gym membership
Quick apply
Data Engineer
Ripjar —Cheltenham
- Full-time
- Remote
- Computer Science
- Linux
- Python
- Annual leave
- Employee assistance programme
Quick apply
Senior Cloud Security Engineer
Reapit UK —Solihull
- Hybrid work
- Azure
- DevOps
- AWS
- Annual leave
Quick apply
Senior IT Support Engineer
METCloud —Birmingham
- £40,000 - £60,000 a year
- Full-time
- Azure
- Customer service
- Windows
- Life insurance
Quick apply

More jobs to discover

Find similar jobs that you might be interested in.

Security Operations Engineer
AFH Financial Group —Bromsgrove
The purpose of this role is to operate, optimise, and continuously improve core security operations and data governance capabilities within a financial services…
Senior Security Engineer - Operations
Holland & Barrett —Nuneaton
We're looking for a Senior Security Operations Engineer to help protect our customers, colleagues and digital platforms.

I want to receive the latest job alerts for threat detection engineer in worcester

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Threat Detection Engineer

Fluidone -
Gloucester

Quick apply

Job details

£40,000 - £45,000 a year

Benefits

Annual leave
Company pension

Qualifications

Elasticsearch
Azure
Software deployment
Information security
Analysis skills
SIEM
Business requirements
Cybersecurity
Communication skills
Network Security

Full job description

Company Overview

Cyber Security Associates Limited (CSA), established in 2013, provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. CSA has built its team from a foundation of UK Government (ex-Military) and commercially experienced specialists all holding current and relevant cyber certifications. Today CSAs core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester and our penetration testing and red team capabilities.

CSA is backed by FluidOne, a market leading connected cloud solutions provider, who provide support and funding firepower for our ambitious growth plans. Our vision is to be the best quality UK cyber security managed service provider.

Our mission is to grow to over £35m revenue over the next 5 years adding to our reputation as the go to experts in our field and providing a full range of cyber services to our clients enabling them to focus on running their businesses.

Role Overview

As a Detection Engineer, you will play a pivotal role in our Security Operations Centre (SOC) team, collaborating closely with the SOC analysts to enhance our clients security posture.

You will specialise in the creation of detection and response capabilities, using technology such as Kusto Query Language (KQL), Lucence, YARA, Sigma, Azure Logic Apps and more.

You will be responsible for planning and managing development, testing and implementation activities delivering new / updated rules and analytics for the SIEM and SOAR platforms. The day-to-day focus of the Detection Engineer is working with SOC Operations Teams to scope and define the requirements for tuning existing security use cases and creating new detection content. This includes planning each release and overseeing all design, development, testing and implementation activities.

The role also includes being the primary point of contact for CSAs AppGuard Service, a zero trust protection product. Key elements of this involves general management and ownership of AppGuard, ongoing maintenance, implementing improvements and managing the implementation of customer requests, and being the primary escalation point of contact with AppGuard.

The strategic focus of the Engineer is to ensure that the detection and monitoring technology remains optimised, current and tailored to the changing threat landscape and technology in use.

You will contribute to the overall development of the Security Operations Center (SOC), that will shape the future of CSAs Success.

This is a unique and exciting opportunity for a highly motivated and experienced security professional to make a significant impact in the field of Detection Engineering / Security Operations. If you're ready for a challenge and eager to make a difference, we'd love to hear from you.

This role requires SC clearance.

Responsibilities:

Develop, test and deploy updated and new content across the monitored estate in liaison with the Operations teams.
Take playbooks from the Ops teams, develop and deploy.
Maintain existing detection content to ensure it remains current and relevant.
Assess the effectiveness of new / updated rules and analytics to feed into future development activities.
Management of the implementation and maintenance of AppGuard policies
Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides.
Knowledge of SIEM/SOAR tools (Microsoft Sentinel and ELK) and other appropriate tooling e.g. SOAR, Threat Intelligence, traffic analysis tools etc. to identify signs of an intrusion and advise where new/improved tooling could enhance the SOC operation.
Analysing security data to identify patterns and trends.
Conducting research on emerging threats and vulnerabilities.
Produce Use Case Rules.
Turn CTI information into actionable Use Cases.
Maintain Use Case Library.
Maintain documentation.
Openness to learning and managing new technologies as business requirements change.

Essential Skills:

Experience in a similar role.
Experience of working with SIEMs (ideally Microsoft Sentinel).
Knowledge of cyber security frameworks with an active interest in software systems/engineering and/or secure communications and Information systems and malware analysis.
Knowledge of network security.
Excellent communication skills, both written and verbal.
Able to manage sensitive and sometimes confidential information.
Self-motivation and able to take responsibility.
Able to manage and prioritise and tasks and time efficiently.
Personal interest and passion for cyber or information security.

Desirable Skills:

Experience developing SIEM/SOAR content.
Experience with Microsoft Sentinel, LogRhythm, ELK stack (Elastic Search, Logstash, Kibana).
Strong understanding of security architecture, in particular networking.
Strong Knowledge of cybersecurity principles and practices.
Strong analytical and problem-solving skills.
Experience working alongside or within a SOC environment.
Strong understanding of security technologies and frameworks such as MITRE ATT&CK.
Experience building custom connectors/parsers etc. to point devices or IT assets that are not supported out of the box.

Benefits:

Hybrid ways of working, with mixture of office and home-based working.
Paid on call, when required
Competitive annual training grant for professional development.
Workplace Health and Benefits Package.
Access to online cyber training courses and packages.
Workplace Pension Scheme (if applicable and payable from start date).
26 days paid holiday in addition to all bank holiday and public holiday per year.
Additional paid holiday day per year for Birthday.
Fantastic company culture including regular team building and social events.

Quick apply

Refine Your Search

threat detection engineer jobs in worcester

Threat Detection Engineer

Security Operations Engineer

AD - Global Detection Engineering

Join the Growing Cyber Security Practice at Methods

Senior ANPR Engineer

Engineer - Splunk

Senior AI Security Engineer

DevOps Engineer

Senior Security Data Engineer

Staff Engineer - Labyrinth Screening

Product Manager

Security Engineer

Marketing Automation & Operations Specialist

Information Security Engineer

Data Engineer

Senior Cloud Security Engineer

Senior IT Support Engineer

More jobs to discover

I want to receive the latest job alerts for threat detection engineer in worcester

Explore jobs in more locations

Jobseeker tools

Employer Tools

Browse

Stay Connected