26 to 50 of 76 Permanent SIEM Jobs in London

Cyber Security Analytics Analyst City/hybrid £45K-£54K + bonus and strong benefits Splunk SIEM Cyber Security Analytics Analyst is required to join the security division of prestigious financial services organisation with offices in the heart of the city. Within this role you will join a high-functioning in … an event are documented and remediated. Monitoring and analysing security relevant logs, events, and alerts including, but not limited to, logs from systems, applications, SIEM, AV, Firewalls, and IPS; document relevant incidents and suggest/co-ordinate appropriate remedial actions. Designing and managing security logging and SIEM programs and working more »

industry standard accreditations and a keen interest in cyber security best practices including but not limited to firewalls, Intrusion protection systems, protected monitoring solutions (SIEM), privileged access management, SharePoint, servers, laptops, desktops, tablets, and mobile phones. Interviews to be held Tuesday 18th June2024 Main duties of the job Please refer … Prince 2 Foundation ITIL Foundation Specific Skills Essential Advanced knowledge of security technologies including firewalls, anti-malware, IDS/IPS, web filtering, email filtering, SIEM, patch management, MDM, DLP, PKI and cryptography, IAM (Identity and access management) including MFA (multi-factor authentication) Advanced knowledge of ICT infrastructure including; networking and more »

mostly on-premises financial environment. Key Responsibilities: Lifecycle management of security, covering tools and technology platforms Supporting and managing security tools e.g. CyberArk , Qualys, SIEM tools Python Scripting for various purposes Automation/Build & Deployment of CI/CD pipelines (Ansible/Atlassian Stack) Implementation & integration of security technologies Use … case development and onboarding for Security Incident and Event Monitoring (SIEM) Maintain software version and patch management for security products Essential Candidate Requirements: Strong background in Financial/Banking environments Python Scripting (advanced level) Expert in Automation ( Ansible ) Strong knowledge of 2 or more of the following tools: CyberArk, Qualys … Carbon Black, ArcSight, McAfee, SIEM tools etc. Extensive general knowledge of Cyber Security Relevant Security Certification/Educational qualification (e.g. CISSP) KEY SKILLS: Python, CyberArk, Qualys, CI/CD Pipelines, Automation, Deployment, Integration, Ansible, SIEM, On-Prem Technology, ArcSight, Carbon Black, McAfee To be considered, please ensure you complete your more »

responsibilities will include: Incident triage and investigation. Analysis of all suspicious email activity. Participating in threat hunt and offensive security exercises. Analysis of all SIEM logs, and the opportunity to get involved in some threat detection. Working with technical infrastructure teams on controls. You will need the following background. At … role Experience in a varied technical security role Experience of managing high priority security incidents Demonstrable business facing skills Experience of working with a SIEM platform – Splunk, QRadar, Elastic Security certifications highly desirable Experience of scripting/automation, threat hunting and offensive security highly desirable Please send your CV for more »

Benefits: 10% pension contributions, flexible working, in house L&D, 28 days holiday +BH Skills required for this role: - Experience working with SIEM solutions (ideally Sentinel) - Vulnerability management (Nessus) - Incident Response - Implementing appropriate mediation Desirables: - SC Clearance - Large guideline expérience (ISO27001, Cyber Essentials, etc) This role gives the right candidate more »

degree. Cloud experience, ideally with MS Azure though open to AWS, GCP, Oracle Cloud. Experience with security tools such as WAF, IPS/IDS, SIEM, Data Leakage. Familiarity with network protocols, encryption techniques, and access control models. more »

time, budget and quality. Experience/essential and desired for successful job performance • Extensive experience in delivery of Security projects like Data loss prevention, SIEM, Identity access management and Privileged Access management. • Significant practical experience of leading and managing Corporate/Infrastructure change programmes across an end-to-end project more »

Dell, Cisco, Pure, Palo Alto) Microsoft Exchange, Microsoft SQL Networking Cisco, Palo Alto, Big IP (FW, SDWAN, VLAN’s, Routing, Switching) Security (Splunk, APM, SIEM) Login/Monitoring (Splunk, Elastic, Prometheus, PRTG, Netbox, IPAM, CMDB) Mattermost, Atlassian The role As a Site Reliability Engineer you will work on projects relating more »

direction in all aspects of security operations. Develop and implement robust security strategies and policies to protect company assets and data. Configure and maintain SIEM tools to monitor and analyze security events across the organization. Collaborate with DEVOPS teams to ensure security best practices are integrated into the development and … improvement. Qualifications: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). Extensive hands-on experience configuring and managing SIEM tools (e.g., Splunk, ArcSight, QRadar). Proficiency in working within a DEVOPS environment, with strong knowledge of AWS services and security best practices. Proven experience more »

OT security solutions. Assist in the deployment and configuration of security technologies, such as firewalls, intrusion detection systems, and security information and event management (SIEM) solutions. Conduct vulnerability assessments and penetration tests to identify potential weaknesses in OT environments. Participate in incident response activities, including monitoring and analysis of security more »

Cyber Security Engineer/SIEM Engineer (ArcSight) Day Rate: Excellent Day Rate IR35 Status: Inside IR35 Contract Length: Initial 6-months (likely to be extended multiple times) Office Location: Central London Hybrid Location: 3 days per week in office, 2 days remote About the Client and the Role: My client … an major ongoing ArcSight integration project . Main Responsibilities: Act as point of contact for ArcSight (integration, deployment, configuration etc.) Implementing and integration of SIEM/security tools and processes Automate build, configuration, and updates for security tools Integration of security capabilities - Scripting with Python, PowerShell etc. Candidate Requirements: SME more »

Protection (AIP). Ability to develop and implement strategies for compliance with data protection regulations. Knowledge and experience in security technologies such as EDR, SIEM, and Vulnerability Management is a plus. Relevant security certifications (CISSP, GCIA, CISM, etc.) and/or product certifications (Azure, Windows, AD, etc.) are desirable. This more »

with firewall configuration, Next Gen Firewalls, Load-Balancers, and intrusion detection/prevention platforms. Proficiency in Python, PowerShell scripting, and Shell scripts. Familiarity with SIEM platforms is preferred. Security certification such as CISSP, GCIA, or CISM is a plus. Our client is an equal opportunity employer who are committed to more »

and mentoring to data, security, and network engineers. Technical Scope: Security Domains : Architecture and strategy across IT security areas such as Identity & Access Management, SIEM/SOAR, Threat Prevention, Network Security, Application Security, Data Privacy. Compliance : Ensure data security and compliance with relevant regulatory and security standards (e.g., NIST, CyberEssentials more »

of staff · Minimum two years experience working within Secuirty Engineering · Understanding of Security Operations · Experience with security toolsets such as (but not limited to) SIEM, cloud security (zero trust, CASB ect), SOAR, CVM tools. Desirable skills: · Experience with using Zscaler · Experience with using CrowdStrike. · Experience with using Qualys CVM. If more »

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate, and contain security issues. You will also support the initial … activity, from a Protective Monitoring perspective, including supporting teams in identification, containment, and remediation of security related threat. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Assist in architectural design to facilitate the onboarding of new information systems, including the … Analyst/Senior Cyber Security and security operations experience Microsoft MDE, MDI, Sentinel, Lighthouse and DevOps experience Experience of onboarding, tuning, reporting, and configuring SIEM solutions Experience of threat intelligence Leadership and mentoring experience and skills Understanding of low-level concepts including operating systems and networking Commercial experience in Penetration more »

Senior SOC Analyst, SIEM - Cloud based: Sentinel/ManageEngine Log360/QRadar, Splunk, Incident Response Management, Hybrid London 1-2 days per week. We are hiring a Senior SOC Analyst to help build a new SOC function. The role will initially be very hands on, responsible for monitoring and triaging … focus on small client environments and the corporate sector, this role oversees security monitoring for the company delivered solutions and ensures the integration of SIEM platforms into a new Private Cloud solution. As the first recruit into the SOC Team, you will collaborate with management to establish and expand the … service according to business requirements. Main Duties and Responsibilities Monitoring & Investigation: Monitor SIEM tools to assure high security levels, analyse potential security incidents, conduct real-time analysis, support investigations, and document findings to improve incident response procedures. Response: Lead and coordinate incident response activities, develop and maintain incident response plans more »

Our partner are one of the UK's largest insurance companies, offering a wide range of general insurance products across motor, travel, commercial, home, pet and rescue. They have an exciting opportunity for a Senior Security Operations Analyst to join more »

threats, threat actors, and the tactics and techniques adopted. Proven experience with programming - Python, Rust, C++ or other major languages Knowledge of SecOps tooling (SIEM, SOAR, TI). more »

eager to continue their success, supporting a fast-pace, dynamic, trading organisation. The successful candidate will have recent involvement in implementing PAM, IDAM or SIEM tooling and have a range of technical knowledge and be able to add value around scripting, low balancing network infrastructure and an expert around installation … policies and procedures. Skills and requirements: Proficient working experience/knowledge of Linux operating systems including configurations, installation, and troubleshooting. Recent involvement in implementing SIEM tooling, IDAM or PAM. Previous experience managing F5 load balancers. Previous experience of diagnosing, trouble shooting and resolving technical issues TCP/IP, DNS, LDAP more »

Requirements : Hands-on experience in vulnerability management, and configurating and tuning vulnerability management tools e.g. Qualys, Microsoft Defender Hands-on experience configurating and tuning SIEM solutions e.g. Microsoft Sentinel Hands-on experience securing and hardening cloud-based services e.g. M365, Azure, Salesforce Experience working withing global standards and best practices more »

mostly on-premises financial environment. Key Responsibilities: Lifecycle management of security, covering tools and technology platforms Supporting and managing security tools eg CyberArk , Qualys, SIEM tools Python Scripting for various purposes Automation/Build & Deployment of CI/CD pipelines (Ansible/Atlassian Stack) Implementation & integration of security technologies Use … case development and onboarding for Security Incident and Event Monitoring (SIEM) Maintain software version and patch management for security products Essential Candidate Requirements: Strong background in Financial/Banking environments Python Scripting (advanced level) Expert in Automation ( Ansible ) Strong knowledge of 2 or more of the following tools: CyberArk, Qualys … Carbon Black, ArcSight, McAfee, SIEM tools etc. Extensive general knowledge of Cyber Security Relevant Security Certification/Educational qualification (eg CISSP) CORE SKILLS: Python, CyberArk, Qualys, ArcSight, Carbon Black, McAfee, CI/CD Pipelines, PowerShell, Automation, Deployment, Integration, Ansible, SIEM, On-Prem Technology To be considered, please ensure you complete more »

threat Recommend, configure, implement, and maintain all security platforms and any other related software. Plan and appraise ongoing assessment of antivirus, application control, Firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other cloud and network component policies Ensure cloud and network security best practices are executed through assurance … Teams & Azure with the capability of designing and implementing solutions that integrate these. Technical know-how of security network devices (Switches, antivirus, Firewalls, cryptography, SIEM) and any other security networking hardware or software tools Minimum, two years' experience identifying threats and developing appropriate protection measures Demonstrable experience reviewing system changes more »

Windows systems . Knowledge of Networks (LAN/WAN/VPN etc) · Understanding of enterprise security · knowledge/Understanding of multiple security technologies e.g. SIEM, EDR · Good communication skills If you think that this could be a good fit for you, then please apply by submitting a copy of your more »

its security suite. A good understanding of Security Operations You're a fast learner, passionate about emerging security trends. Experience with security tools like SIEM, IDPS, Cloud Security, and EDR is a big plus. Experience with Zscaler, CrowdStrike, or Qualys Web3 and DeFi Experience with ISO27001 and SOC2 If you more »