Senior Cyber Threat Detection and Response Analyst

Reference: 70n9wvxcelx6plhhnmi7

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure.

Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity; and managing incidents from initial triage through to remediation and post-incident review. You will contribute to the development of playbooks, response procedures and threat models, while identifying opportunities to automate repetitive tasks and improve investigation efficiency. The role will also require clear documentation of findings, production of threat and incident reports, participation in vulnerability and risk discussions, and mentoring less experienced analysts. You may be required to support security operations outside standard hours through an agreed on-call or escalation rota.

You will bring significant experience in cyber threat detection, incident response, security operations or a closely related discipline, together with a strong understanding of attack techniques, adversary behaviours and frameworks such as MITRE ATT&CK. Practical experience with SIEM, EDR, SOAR, network monitoring and threat intelligence platforms is essential, as is the ability to investigate using endpoint, network, identity and cloud logs. Scripting or automation skills in languages such as Python or PowerShell are desirable. Relevant professional certifications, such as CISSP, GIAC, GCIH, GCIA or equivalent, would be advantageous. Strong analytical, communication and problem-solving skills are required, along with the ability to explain technical risk clearly to both specialist and non-specialist audiences.

COMPETITIVE SALARY
Added 14/09/2026
Reference: 70n9wvxcelx6plhhnmi7

Senior Cyber Threat Detection and Response Analyst

Portsmouth, England, United Kingdom Permanent Threat Management

Other similar jobs

Senior Cyber Threat Intelligence Analyst

Added 14/09/2026

We are seeking a Senior Cyber Threat Intelligence Analyst to lead the collection, analysis and dissemination of intelligence that supports the protection of critical systems, data and business operations. You will assess threats across the cyber landscape, identify activity relevant to the organisation’s risk profile, and translate complex technical findings into clear, actionable recommendations for security and business stakeholders. The role will involve working closely with incident response, security operations, vulnerability management, detection engineering and wider technology teams. Key responsibilities include monitoring open, closed and technical intelligence sources; tracking threat actors, campaigns, malware, vulnerabilities and emerging attack techniques; and producing...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more

Senior Security Engineer, Detection and Response

Added 09/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen a mature security operations capability and help protect critical systems, applications, and data. In this role, you will design, implement, and continuously improve detection and response processes across cloud, endpoint, identity, network, and application environments. You will work closely with security operations, infrastructure, engineering, and risk teams to identify threats, reduce exposure, and improve the organisation’s ability to respond quickly and effectively. Your responsibilities will include developing and tuning detection logic, correlation rules, alerts, dashboards, and automated response workflows across SIEM, EDR, SOAR, and related security platforms. You...

Learn more

Senior Security Engineer, Detection and Response

Added 08/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen the capability to identify, investigate and contain cyber threats across a complex technology environment. In this role, you will design, implement and improve detection strategies across cloud, endpoint, identity, network and application layers. You will work closely with security operations, infrastructure, engineering and risk teams to develop resilient monitoring and response processes that reduce attacker dwell time and protect critical systems and data. Your responsibilities will include developing and tuning detection rules, use cases and correlation logic within security monitoring platforms; analysing alerts and conducting advanced investigations; leading...

Learn more

Senior Detection & Response Engineer, Cyber Defense

Added 04/11/2026

We are seeking a Senior Detection & Response Engineer, Cyber Defense to strengthen and mature our security operations capability. This is a hands-on role for an experienced cyber security professional who can identify emerging threats, develop effective detection content and lead the response to complex security incidents across a diverse technology environment. You will design, build and continuously improve detections across cloud, endpoint, identity, network and application platforms. Working with security operations and engineering teams, you will translate threat intelligence and adversary behaviours into practical use cases, analytics and alerting within SIEM, EDR and related security tooling. You will tune...

Learn more

Senior Security Engineer - Detection & Response

Added 23/09/2026

We are seeking a Senior Security Engineer – Detection & Response to strengthen and evolve our security operations capability. In this role, you will design, implement and maintain detection and response systems that identify, investigate and contain threats across cloud, endpoint, identity, network and application environments. You will work closely with security operations, infrastructure, engineering and risk teams to improve visibility, reduce response times and support the continuous improvement of the organisation’s security posture. Your responsibilities will include developing and tuning detection rules, analytic queries, dashboards and automated response workflows; investigating complex security alerts and incidents; leading technical response activities...

Learn more

Security Expert-Detection & Response

Added 23/10/2026

We are seeking an experienced Security Expert – Detection & Response to strengthen cyber defence capabilities and help protect critical systems, data and services. This role will lead the identification, investigation and resolution of security incidents, while improving the organisation’s ability to detect and respond to emerging threats. You will monitor and investigate alerts from security information and event management, endpoint detection and response, network monitoring and cloud security platforms. Working across technical and business teams, you will assess potential threats, perform triage, contain incidents and coordinate remediation. You will also contribute to forensic investigations, root-cause analysis and post-incident reviews,...

Learn more

Security Detection & Response Specialist

Added 21/10/2026

We are seeking a Security Detection & Response Specialist to help protect critical systems, data and services from evolving cyber threats. Working within a collaborative security function, you will monitor, investigate and respond to security events across cloud, network, endpoint and application environments. You will play a key role in improving detection capability, reducing risk and supporting the organisation’s wider security objectives. Your responsibilities will include monitoring alerts from security information and event management (SIEM), endpoint detection and response (EDR), identity and cloud security platforms, as well as triaging and investigating suspected incidents. You will lead or support incident response...

Learn more

Security Engineer (Detection & Response)

Added 07/10/2026

We are seeking a Security Engineer (Detection & Response) to strengthen our ability to identify, investigate, and contain cyber threats across a complex technology environment. In this role, you will design, implement, and continuously improve security monitoring and detection capabilities across cloud, endpoint, network, identity, and application platforms. You will work closely with security operations, infrastructure, engineering, and risk teams to reduce exposure, improve visibility, and support a resilient security posture. Your responsibilities will include developing and tuning detection rules, analytics, and alerting logic within SIEM, EDR, SOAR, and related security platforms. You will investigate suspicious activity, conduct threat hunting,...

Learn more

Security Detection & Response I

Added 07/09/2026

We are seeking a Security Detection & Response I professional to support the monitoring, investigation, and resolution of cybersecurity events across a varied technology environment. In this role, you will help protect systems, applications, networks, and data by reviewing security alerts, identifying potential threats, and coordinating timely responses. You will work with experienced security specialists and technology teams to assess risk, contain incidents, and contribute to continuous improvements in security operations. Your responsibilities will include monitoring alerts from security information and event management, endpoint detection, identity, network, and cloud security tools; performing initial triage and investigation of suspected incidents; documenting...

Learn more

Threat Hunting & Detection Analyst

Added 07/10/2026

We are seeking a Threat Hunting & Detection Analyst to identify, investigate and help disrupt advanced cyber threats across a complex technology environment. You will proactively search for indicators of compromise, suspicious behaviours and emerging attack techniques that may evade traditional security controls. Working closely with security operations, incident response, engineering and infrastructure teams, you will turn intelligence and investigative findings into practical improvements to monitoring and defensive capabilities. Your responsibilities will include developing and refining threat-hunting hypotheses, analysing security telemetry from endpoint, network, identity, cloud and application sources, and conducting detailed investigations into anomalous activity. You will create, test...

Learn more

Cyber Security Engineer - Threat Detection

Added 11/09/2026

We are seeking a Cyber Security Engineer specialising in Threat Detection to help protect critical systems, applications and data from evolving cyber threats. You will join a security-focused team responsible for improving detection capabilities, investigating suspicious activity and supporting the ongoing development of a resilient security monitoring function. This role is suited to an analytical security professional who enjoys working across technology, operations and incident response. Your responsibilities will include designing, developing and tuning detection rules, alerts and use cases across SIEM, endpoint detection and response, network monitoring and cloud security platforms. You will monitor security events, investigate potential threats,...

Learn more

Cyber Security Engineer - Threat Detection

Added 09/09/2026

We are seeking a Cyber Security Engineer – Threat Detection to strengthen security monitoring and incident detection capabilities across a complex technology environment. In this role, you will design, develop and maintain detection use cases that identify suspicious activity across endpoints, networks, cloud platforms, applications and identity systems. You will work closely with security operations, infrastructure, engineering and risk teams to investigate threats, improve visibility and reduce the time required to detect and respond to security incidents. Key responsibilities include creating and tuning detection rules, alerts, dashboards and correlation logic within security monitoring and analytics platforms; analysing security events and...

Learn more

Threat Detection Engineer

Added 30/10/2026

We are seeking a Threat Detection Engineer to design, develop and maintain effective security detections across a complex technology environment. You will work as part of a collaborative cyber security function, helping to identify suspicious activity, reduce exposure to emerging threats and improve the organisation’s ability to detect and respond to incidents. Your responsibilities will include creating and tuning detection rules across SIEM, endpoint, cloud and network security platforms. You will investigate alerts, assess their relevance and accuracy, and use threat intelligence, adversary techniques and incident findings to improve detection coverage. You will also support the development of use cases...

Learn more

Threat Detection Engineer

Added 30/10/2026

We are seeking a Threat Detection Engineer to strengthen the organisation’s ability to identify, investigate and respond to cyber threats. You will design, develop and maintain detection capabilities across cloud, on-premises and endpoint environments, helping to protect critical systems, applications and data. In this role, you will create and tune detection rules using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and cloud security platforms. You will analyse logs and telemetry, develop queries and correlation logic, and reduce false positives while ensuring genuine threats are identified quickly. You will also contribute to threat hunting activities...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.