1 to 25 of 27 QRadar Jobs in the UK

reverse engineering experience. Python, PowerShell, Bash, Perl or C++ scripting skills. CySA+, Blue Team Level 2 or other SOC-focused certifications. Experience with QRadar alongside Sentinel and Splunk. If you are interested in this role but not sure if your skills and experience are exactly what we're looking ...

clearance Experience working within a SOC environment (Level 2 or Level 3 preferred) Strong knowledge of SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or ArcSight Understanding of network protocols, attack techniques, and cyber threat methodologies Experience investigating security incidents across Windows and Linux environments Knowledge of MITRE ...

clearance Experience working within a SOC environment (Level 2 or Level 3 preferred) Strong knowledge of SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or ArcSight Understanding of network protocols, attack techniques, and cyber threat methodologies Experience investigating security incidents across Windows and Linux environments Knowledge of MITRE ...

modules), either in a vendor, partner, or customer capacity Minimum 5 years technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Minimum 5 years experience with enterprise security ...

adjacent modules), either in a vendor, partner, or customer capacityMinimum 5 years technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementMinimum 5 years experience with enterprise security architectures ...

endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experiencewith at least two of the following: SIEM platforms (Splunk,QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experiencewith enterprise security architectures, including identity infrastructure ...

protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity ...

protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity ...

protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures, including identity ...

Engineer to strengthen its security operations capability and drive continuous improvement across detection, response, and automation. This pivotal role requires deep expertise in IBM QRadar, with a strong focus on playbook development, analytical rule creation, and threat modelling. The Senior SOC Engineer will play a key role in building … optimising detection and response strategies, ensuring robust protection against evolving threats. Key Responsibilities SIEM Engineering & Management Deploy, configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis. Playbook ...

Security Platform Refresh Activities End of Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details ...

Azure Key Vault Google Cloud KMS Thales CipherTrust Manager Operating Systems Linux (RHEL, CentOS, Ubuntu) Windows Server Security & Monitoring Splunk Microsoft Sentinel QRadar Dynatrace Datadog Infrastructure & Automation PowerShell Python Bash/Shell Scripting Ansible Terraform Git All profiles will be reviewed against the required skills and experience. ...

Exchange Server, SMTP routing, and mail flow architecture within enterprise environments. SIEM & incident management - Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, with strong analytical, troubleshooting, and incident management capability; PowerShell or Python Scripting is a desirable advantage. Contract Details: Rate: £450 per day Inside IR35 ...

Cyber Security Engineers, SOC Engineers and Security Engineers who have experience with some of the following: SIEM technologies such as Microsoft Sentinel, Splunk or QRadar Security Operations Centre (SOC) environments Threat detection, threat hunting or incident response Scripting and automation using Python, PowerShell or similar Security tooling, integrations ...

implementing security controls, mitigating risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions ...

Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection gaps, duplicate content … investigation, threat analysis, and threat hunting. Experience reviewing, tuning and validating detection rules and security alerts within SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, or LogRhythm . Experience working with Microsoft Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR, SentinelOne, Carbon Black , or similar ...

need: Proven experience working as a SIEM Engineer, Cyber Security Engineer, or Security Monitoring Engineer. Previous SIEM migration experience, particularly migrations from Rapid7, Splunk, QRadar, ArcSight, or similar platforms. Experience working within large, complex enterprise environments. Strong hands-on experience with Microsoft Sentinel. Experience onboarding and integrating security ...

review) and work with engineering teams to prioritise remediation. What you’ll bring: Hands-on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) considered. Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture management. Experience writing infrastructure-as-code using ...

working in a startup environment: adaptable, proactive, and eager to build new processes. Nice to have Experience using or administering security tools (e.g., Splunk, QRadar, Chronicle, Sentinel, SOAR platforms) Reading and editing Python code (even if not from scratch) Previous experience in customer success or account management roles Interest ...

detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience with cloud security platforms (e.g. ...

security operations What they're looking for: Experience in a SOC or Security Operations environment Hands-on exposure to SIEM tools (e.g. Sentinel, Splunk, QRadar) Understanding of incident response, alert triage, and escalation processes Familiarity with EDR tools and general security tooling Ability to work in a structured, process ...

security operations What they’re looking for: Experience in a SOC or Security Operations environment Hands-on exposure to SIEM tools (e.g. Sentinel, Splunk, QRadar) Understanding of incident response, alert triage, and escalation processes Familiarity with EDR tools and general security tooling Ability to work in a structured, process ...

Job Title: Proofpoint SME- SC Cleared or SC Eligible Location: Wokingham UK (3Days/Week Onsite) Duration: 6Months+ Contract Rate: 550 Inside IR35 The Role We are seeking an experienced Proofpoint Subject Matter Expert (SME ...

cleared SOC Analyst to support our defence/aerospace client on a short term contract. The successful candidate will have proven experience using IBM QRadar SIEM in a monitoring and incident response capacity. Key Responsibilities: Monitor and analyse security events using IBM QRadar SIEM Investigate and respond … Investigate non-standard Cyber requests and provide appropriate responses Job Requirements: Active SC clearance Experience within a Security Operations Centre (SOC) Proficiency with IBM QRadar SIEM for monitoring and incident response Familiarity with common query languages, preferably KQL Understanding of security processes and controls in enterprise environments Ability ...

busy cyber security team within a large enterprise environment. Key Requirements: 2-3+ years' SOC experience Strong hands-on experience with IBM QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable … Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication ...