26 to 50 of 85 Permanent SIEM Jobs in London

looking for a SOC Manager to help them grow their Security Operation department from the ground up.Key skills required for this role Security Operations, SIEM, SOC Important SOC, Security Operation, SIEM, SOAR Job descriptionTitle: Cyber Security Operations ManagerLocation: Either Crawley or London (Hybrid)Salary: Up to 80,000 base plus … and developing incident response playbooks/processes, Security Orchestration, Automation and Response (SOAR), running red-team exercises and tabletop crisis war games.Working knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss Prevention technologies preferably including FortiSIEM, Q-Radar, Sentinel, Darktrace, Microsoft Defender.Experience managing suppliers for an more »

Firewalling principles generally) - virtual and physical, IDS/IDP, CASB and SASE concepts, network segmentation as well as experience in network packet analysis and SIEM log analysis (advantageous). The Perimeter Security Engineer will be an SME and act as a platform owner for perimeter security technologies and will need … virtual and physical Extensive experience in secure network perimeter design including network segmentation Packet capture and analysis experience using vendor and open-source tooling SIEM log analysis and anomaly detection experience (preferable) Coding and automation experience Python and/or Terraform (preferable) CISSP certifications or familiarity with CISSP concepts Hybrid more »

its security suite. A good understanding of Security Operations You're a fast learner, passionate about emerging security trends. Experience with security tools like SIEM, IDPS, Cloud Security, and EDR is a big plus. Experience with Zscaler, CrowdStrike, or Qualys Web3 and DeFi Experience with ISO27001 and SOC2 If you more »

and engineering experience Experience of an enterprise Linux, preferably Red Hat Enterprise Linux, CentOS or Oracle Linux. Recent involvement in implementing IDAM, PAM or SIEM tooling. Experience with monitoring and reporting software – Prometheus, Nagios or similar. Solid scripting experience with one of the following: Python, Shell, Bash or Ruby Familiarity more »

issues. Key Responsibilities Experience with enterprise networks including next generation firwalls, network segmentation technology (Forescout preferred) and internet connectivity. Experience with EDR, M365 security, SIEM, Vulnerability management, MITRE attack framework and Incident response. Experience of providing knowledge transfer to Service Delivery teams and developing other cybersecurity team members. Having an more »

a security operations centre (SOC) and responding to security alerts. Experience in creating response playbooks and handling escalations. Additional experience in EDR, M365 security, SIEM, Vulnerability management, MITRE attack framework, and Incident response. Strong stakeholder engagement skills and the ability to promote a secure mindset within an organisation. Previous experience more »

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS more »

expertise in securing cloud environments such as AWS, Azure, or GCP.Proficiency in security technologies and tools such as firewalls, intrusion detection/prevention systems, SIEM, and vulnerability management.Experience with IaC tools like Terraform, CloudFormation, or ARM templates.Deep understanding of IAM, encryption, network security, and data protection strategies in the cloud. more »

Information Security. In-depth knowledge of information security frameworks, standards, and best practices. (ISO27001) Hands-on experience with security technologies and tools, such as SIEM, IDS/IPS, firewalls, and encryption. Strong analytical and problem-solving skills, with the ability to make decisions under pressure. Excellent communication and interpersonal skills more »

to technical and nontechnical people.Experience engaging 3rd party security specialists to provide additional assurance.Experience and knowledge with IT Security software e.g. NGAV, EDR, XDR, SIEM etc.Be willing to deploy to clients sites at short notice to direct recovery and rebuild activity and strategy.Ability to Build successful working relationships with team more »

or related field AND 5+ years sales and negotiation experience or related work or internship experience. 3+ years' experience selling Security Solutions (EDR, XDR, SIEM, SOAR) to MSSP and MSP customers. Additional Or Preferred Qualifications (PQs) Bachelor's degree in business management, Information Technology, Marketing (or equivalent) or related field more »

week, although if you're based further afield, they mentioned there is some flexibility. They're looking for the following experience: Strong understanding of SIEM systems Experience working with IT Security Management, Policies, Procedures, Standards and Guidelines Experience with the following tech (they don't expect you to have experience more »

experience Confident advising on secure operating system and network device configuration standards Organised and proactive Excellent communication skills Knowledge of tools such as IDS, SIEM, Secure Gateways etc is ideal Experience evaluating threats and vulnerabilities Ability to create reports on cyber security vulnerabilities, organisational posture, and other indicators of cyber more »

systems with a mix of both BAU and project work. Your role will involve the following, Using your knowledge of security tools such as SIEM, Firewalls and Cloud Security to monitor systems Providing Windows Server and Network Support Assess and respond to external threat intelligence reports Support ISO27001, Cyber Essentials more »

Cybersecurity Analyst or similar role Experience in information security or related field Experience with computer network penetration testing and techniques Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts Ability to identify and mitigate network vulnerabilities and explain how to avoid them Professional ...Discipline(s): TechnologyJob type: Permanent more »

project milestones as part of Service Transition activitiesWhat we need from you:Experience in the use of management information from the following Security tools : SIEM, EDR, Vulnerability Intelligence or Behavioural Analysis.Project Management Experience (PRINCE2, AGILE etc)CompTIA Security.Understanding of incident response and Cyber Kill Chain.ITIL Foundation Level (v3 or v4 more »

Tier 1 Analysts to improve detection/analytical capabilities within the SOC and monitor SOC Tier 1 Analyst performance. Qualifications: Skills: Proficiency in using SIEM tools, especially Microsoft Sentinel and the Microsoft Defender suite. Proficiency in Kusto Query Language (KQL). Experience with the creation, configuration and use of Playbooks more »

in conducting thorough investigations and root cause analysis of incidents.Security Monitoring: Oversee security monitoring and threat detection processes, leveraging security information and event management (SIEM) and other security tools to proactively identify and address potential security threats.Vulnerability Management: Coordinate vulnerability assessments and penetration testing activities. Work with relevant teams to … are preferred.Proven experience in security operations management and cybersecurity, with a track record of successful incident response and security incident management.Strong knowledge of security technologies, including SIEM, intrusion detection/prevention systems, endpoint protection, and security analytics tools.Experience with vulnerability assessment tools and vulnerability management processes.Understanding of security best practices more »

security tools. Familiarity with intrusion detection/prevention systems (IDS/IPS), firewalls, and anti-virus software. Experience with security information and event management (SIEM) systems. Strong analytical and problem-solving skills. Excellent communication and teamwork abilities. Relevant certifications such as CISSP, CEH, or CompTIA Security+ are a plus. Preferred more »

to the Security Operations Manager, your key tasks may involve: Managing vulnerability scanning tools - SAST, SCA, IaC, Containers & DAST for all Egress products Investigate SIEM alerts, working with the Engineering and Operations teams to resolve issues Managing vetting applications, supplier onboarding and security awareness programmes Plan and manage 3rd party … Reviewing vulnerabilities found in code analysis tools and liaising with development/engineering to prioritise the resolution SOC investigation of security events in a SIEM (e.g. Azure Sentinel, Splunk etc) A basic knowledge and desire to learn python, to automate day to day tasks. You should have good prioritisation and more »

external and internal threats is a top priority which makes this role very challenging.Principal ResponsibilitiesResponsible for the daily operation of enterprise security systems including SIEM, SOAR, Elastic, ticketing, alerting, and messaging systems.Manage junior level analysts in the daily operation of enterprise security systems including shift rotations and hand-offs.Work closely … procedures, and consume available threat intelligence.Utilize detective controls to develop rules and alerts to drive security monitoring.Perform hunt activities across our log aggregation and SIEM platforms.Recommend, test, tune and implement SIEM and other tooling correlation rules.Identify false-positives from alerting, and perform incident response, triage, incident analysis and remediation tasks.Recommend … and develop new SIEM use cases/rules with engineering teams.Maintain documentation for the SOC function, including training program for new Security Operations personnel.Participate in Information Security Incident Response activities for the Firm’s environment.Enforce security policies and procedures by administering and monitoring appropriate systems, events and answering client queries.Perform more »

robust security controls including IAM, network security, data protection, and security monitoring. - Implement and manage cloud security tools and services like Azure Security Center, SIEM solutions (Splunk, ELK, Azure Sentinel), and conduct regular security assessments and penetration testing. - Develop and enforce cloud security policies, procedures, such as NIST, ISO … understanding of cloud security controls, tools (Azure Security Center), and services. - Familiarity with security testing methodologies like penetration testing and vulnerability assessments. - Experience with SIEM tools (Splunk, ELK, Azure Sentinel) and incident response/forensics. - Knowledge of security frameworks (NIST, ISO 27001, SOC 2) and relevant certifications (CISSP, CCSP). more »

Cyber Security Engineer, M&A, £635(inside) 10 months +Extension – SIEM, SOAR, IdAM, Vulnerability Management, Trellix Are you a Cyber Security Engineer and ready to take on a pivotal role in a global business? Working on a M&A, the largest in its sector. You will be joining the team … maintain cyber action plan. Track and communicate progress, risks, and issues. Review, report, and sign-off Infrastructure designs. Security Tooling (EDR, Vulnerability Management, IdAM, SIEM, SOAR). Input/review into cyber security design artefacts (HLD/LLD) and provide security engineering consultancy. Implementation cyber security support activities (configuration, connectivity more »

security operations and incident management Good knowledge of various security operations tools, technologies and processes including security device management tools, IDs/IPS and SIEM tools You'll also be well versed in security concepts such as threat vectors, event and incident management, cyber threats and attacks etc. Experience with … security device management and SIEM solutions Experience in global delivery operations support model (e.g. 24-7/16-8) You'll also have experience in leading security operational meetings with key internal and external stakeholders and managing relationship with service providers Any Information Security and/or Information Technology industry more »

to your skills to include Google Chronicle. As such this role will require somebody with experience of managed cyber security products/services stacks (SIEM, Endpoint, Cloud Security, Network Security, EDR/XDR, Vulnerability etc). HOWEVER.. if you just have the Microsoft Security stack this unique opportunity will also … in an MSSP already, or have worked in a shared service model as an inhouse cyber security engineer/consultant across a range of SIEM (Sentinel), Endpoint Services, Cloud Security, EDR/XDR, and Network Security. Plus you will ideally hold industry and vendor certifications. Vendors include: Microsoft, Google, CrowdStrike more »