Threat detection Work, Jobs in Aston Cross, Gls (with Salaries)

Threat Detection Engineer
Fluidone —Gloucester
- £40,000 - £45,000 a year
- Hybrid work
- Azure
- Analysis skills
- Communication skills
- Annual leave
Quick apply
Threat Hunting and Detection Engineering Analyst - Cheltenham
Accenture —Cheltenham
- Full-time
SOC Analyst
NCC Group —Cheltenham
- Full-time
- Hybrid work
- Windows
- Computer networking
- IT
- Annual leave
Quick apply
AD - Global Detection Engineering
NCC Group —Cheltenham
- Full-time
- Hybrid work
- Communication skills
- Annual leave
Quick apply
8d
Data Scientist - Cybersecurity Analyst (Position located in Cheltenham, United Kingdom)
KnowBe4 —Cheltenham
- Master's degree
- Bachelor's degree
- Machine learning
- Referral programme
Quick apply
Cyber Security Analyst
Field Effect —Cheltenham
- Weekend availability
- Remote
- Computer Science
- Windows
- Analysis skills
Quick apply
Product Manager
Ripjar —Cheltenham
- Remote
- Product management
- IT
- Communication skills
- Annual leave
- Employee assistance programme
Quick apply
7d
Engineer - Splunk
NCC Group —Cheltenham
- Hybrid work
- Azure
- AWS
- Scripting
- Annual leave
Quick apply
DevOps Engineer
Ripjar —Cheltenham
- Full-time
- Remote
- Azure
- AWS
- JavaScript
- Annual leave
- Employee assistance programme
Quick apply
Security Operations Engineer
AFH Financial Group —Bromsgrove
- Full-time
- Azure
- AWS
- Financial services
- Employee discount
Marketing Automation & Operations Specialist
Ripjar —Cheltenham
- £45,000 - £55,000 a year
- Full-time
- Remote
- SQL
- Travel
- APIs
- Annual leave
- Employee assistance programme
Quick apply
Technical Architect - On site (SC Cleared)
Methods Business and Digital Technology —Ross-on-Wye
- £80,000 - £110,000 a year
- Full-time
- Azure
- IT
- In-person
- Annual leave
- Employee assistance programme
Quick apply
Data Engineer
Ripjar —Cheltenham
- Full-time
- Remote
- Computer Science
- Linux
- Python
- Annual leave
- Employee assistance programme
Quick apply
Senior Security Data Engineer
Obsidian Security —Cheltenham
- £91,000 - £106,000 a year
- Hybrid work
- SQL
- Scripting
- APIs
Quick apply
7d
Senior AI Security Engineer
Obsidian Security —Cheltenham
- £91,000 - £106,000 a year
- Master's degree
- SQL
- APIs
Quick apply
7d
Senior OT Security Engineer
Synapri —Lower Lemington
- £80,000 - £90,000 a year
- Programmable logic controllers
- Communication skills
Staff Engineer - Labyrinth Screening
Ripjar —Cheltenham
- Remote
- JavaScript
- Leadership
- Annual leave
- Employee assistance programme
Quick apply

More jobs to discover

Find similar jobs that you might be interested in.

Threat Hunting and Detection Engineering Analyst - Cheltenham
Accenture —Cheltenham
Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically…

I want to receive the latest job alerts for threat detection in aston cross, gls

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Threat Detection Engineer

Fluidone -
Gloucester

Quick apply

Job details

£40,000 - £45,000 a year

Benefits

Annual leave
Company pension

Qualifications

Elasticsearch
Azure
Software deployment
Information security
Analysis skills
SIEM
Business requirements
Cybersecurity
Communication skills
Network Security

Full job description

Company Overview

Cyber Security Associates Limited (CSA), established in 2013, provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. CSA has built its team from a foundation of UK Government (ex-Military) and commercially experienced specialists all holding current and relevant cyber certifications. Today CSAs core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester and our penetration testing and red team capabilities.

CSA is backed by FluidOne, a market leading connected cloud solutions provider, who provide support and funding firepower for our ambitious growth plans. Our vision is to be the best quality UK cyber security managed service provider.

Our mission is to grow to over £35m revenue over the next 5 years adding to our reputation as the go to experts in our field and providing a full range of cyber services to our clients enabling them to focus on running their businesses.

Role Overview

As a Detection Engineer, you will play a pivotal role in our Security Operations Centre (SOC) team, collaborating closely with the SOC analysts to enhance our clients security posture.

You will specialise in the creation of detection and response capabilities, using technology such as Kusto Query Language (KQL), Lucence, YARA, Sigma, Azure Logic Apps and more.

You will be responsible for planning and managing development, testing and implementation activities delivering new / updated rules and analytics for the SIEM and SOAR platforms. The day-to-day focus of the Detection Engineer is working with SOC Operations Teams to scope and define the requirements for tuning existing security use cases and creating new detection content. This includes planning each release and overseeing all design, development, testing and implementation activities.

The role also includes being the primary point of contact for CSAs AppGuard Service, a zero trust protection product. Key elements of this involves general management and ownership of AppGuard, ongoing maintenance, implementing improvements and managing the implementation of customer requests, and being the primary escalation point of contact with AppGuard.

The strategic focus of the Engineer is to ensure that the detection and monitoring technology remains optimised, current and tailored to the changing threat landscape and technology in use.

You will contribute to the overall development of the Security Operations Center (SOC), that will shape the future of CSAs Success.

This is a unique and exciting opportunity for a highly motivated and experienced security professional to make a significant impact in the field of Detection Engineering / Security Operations. If you're ready for a challenge and eager to make a difference, we'd love to hear from you.

This role requires SC clearance.

Responsibilities:

Develop, test and deploy updated and new content across the monitored estate in liaison with the Operations teams.
Take playbooks from the Ops teams, develop and deploy.
Maintain existing detection content to ensure it remains current and relevant.
Assess the effectiveness of new / updated rules and analytics to feed into future development activities.
Management of the implementation and maintenance of AppGuard policies
Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides.
Knowledge of SIEM/SOAR tools (Microsoft Sentinel and ELK) and other appropriate tooling e.g. SOAR, Threat Intelligence, traffic analysis tools etc. to identify signs of an intrusion and advise where new/improved tooling could enhance the SOC operation.
Analysing security data to identify patterns and trends.
Conducting research on emerging threats and vulnerabilities.
Produce Use Case Rules.
Turn CTI information into actionable Use Cases.
Maintain Use Case Library.
Maintain documentation.
Openness to learning and managing new technologies as business requirements change.

Essential Skills:

Experience in a similar role.
Experience of working with SIEMs (ideally Microsoft Sentinel).
Knowledge of cyber security frameworks with an active interest in software systems/engineering and/or secure communications and Information systems and malware analysis.
Knowledge of network security.
Excellent communication skills, both written and verbal.
Able to manage sensitive and sometimes confidential information.
Self-motivation and able to take responsibility.
Able to manage and prioritise and tasks and time efficiently.
Personal interest and passion for cyber or information security.

Desirable Skills:

Experience developing SIEM/SOAR content.
Experience with Microsoft Sentinel, LogRhythm, ELK stack (Elastic Search, Logstash, Kibana).
Strong understanding of security architecture, in particular networking.
Strong Knowledge of cybersecurity principles and practices.
Strong analytical and problem-solving skills.
Experience working alongside or within a SOC environment.
Strong understanding of security technologies and frameworks such as MITRE ATT&CK.
Experience building custom connectors/parsers etc. to point devices or IT assets that are not supported out of the box.

Benefits:

Hybrid ways of working, with mixture of office and home-based working.
Paid on call, when required
Competitive annual training grant for professional development.
Workplace Health and Benefits Package.
Access to online cyber training courses and packages.
Workplace Pension Scheme (if applicable and payable from start date).
26 days paid holiday in addition to all bank holiday and public holiday per year.
Additional paid holiday day per year for Birthday.
Fantastic company culture including regular team building and social events.

Quick apply

Refine Your Search

threat detection jobs in aston cross, gls

Threat Detection Engineer

Threat Hunting and Detection Engineering Analyst - Cheltenham

SOC Analyst

AD - Global Detection Engineering

Data Scientist - Cybersecurity Analyst (Position located in Cheltenham, United Kingdom)

Cyber Security Analyst

Product Manager

Engineer - Splunk

DevOps Engineer

Security Operations Engineer

Marketing Automation & Operations Specialist

Technical Architect - On site (SC Cleared)

Data Engineer

Senior Security Data Engineer

Senior AI Security Engineer

Senior OT Security Engineer

Staff Engineer - Labyrinth Screening

More jobs to discover

I want to receive the latest job alerts for threat detection in aston cross, gls

Explore jobs in more locations

Jobseeker tools

Employer Tools

Browse

Stay Connected