1 to 25 of 33 QRadar Jobs in the UK

reverse engineering experience. Python, PowerShell, Bash, Perl or C++ scripting skills. CySA+, Blue Team Level 2 or other SOC-focused certifications. Experience with QRadar alongside Sentinel and Splunk. If you are interested in this role but not sure if your skills and experience are exactly what were looking ...

great if you also had: Hands‐on experience engineering and administering Microsoft Sentinel. Experience with LogRhythm or other enterprise SIEM technologies such as Splunk, QRadar, ArcSight or Elastic. Experience implementing security automation and orchestration capabilities. Knowledge of Microsoft Azure security services and cloud-native security monitoring. Experience working within ...

Security+, CEH, or similar. Familiarity with regulatory compliance standards like GDPR, ISO 27001, and PCI DSS. Hands‐on experience with SIEM technologies such as QRadar, Azure Sentinel, or Elastic SIEM. Understanding of endpoint security, IAM, and data protection best practices. Knowledge of both Microsoft Windows and Linux‐based operating ...

such as SC-100, SC-200 or AZ-500. Hands‐on experience with other SIEM and EDR/XDR platforms such as CrowdStrike, Splunk, QRadar, Rapid7 or Elastic. Experience with KQL, Sigma, Logic Apps, PowerShell or other automation and detection‐as‐code approaches. Knowledge of MITRE ATT&CK, NIST ...

clearance Experience working within a SOC environment (Level 2 or Level 3 preferred) Strong knowledge of SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or ArcSight Understanding of network protocols, attack techniques, and cyber threat methodologies Experience investigating security incidents across Windows and Linux environments Knowledge of MITRE ...

management principles. Excellent stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. ...

management principles. Excellent stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. ...

support out of hours service delivery (paid) Preferred Qualifications: CompTIA Security+, CySA+, or other relevant certifications. Experience with tools like MS Defender, Splunk, QRadar, or Sentinel. Knowledge of MITRE ATT&CK framework. Exposure to scripting (e.g., Python, PowerShell) is a plus. Methods is passionate about its people; we want ...

OIDC/OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional desired ...

stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications ...

stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications ...

Security Platform Refresh Activities End of Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details ...

with product management principles, agile methodologies, or requirements gathering processes. Experience presenting to executive leadership or external stakeholders. Knowledge of multiple SIEM platforms (Splunk, QRadar, Sentinel, Chronicle, etc.) and their operational strengths/weaknesses. Understanding of SOC metrics, KPIs, and performance measurement frameworks. Security certifications (e.g., GCIH, GCIA, GCFA ...

with incident, problem, or change management.Understanding of security principles and best practices.Strong communication and multitasking skills.Nice-to-Have Skills:Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel).Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS).Certifications like CompTIA Security+, Splunk certified user, Microsoft SC900 ...

change management. Understanding of security principles and best practices. Strong communication and multitasking skills. Nice-to-Have Skills: Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel). Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS). Certifications like CompTIA Security+, Splunk certified user, Microsoft ...

platforms. Experience with managing and operating EDR platforms i.e. Crowdstrike, SentinelOne, or Microsoft Defender for Endpoint. Experience developing and using a SIEM platform e.g. QRadar or Azure Sentinel. Strong knowledge of cybersecurity concepts, tools, and techniques. Ability to work well under pressure in high-stress situations. Strong attention ...

root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDRMicrosoft Sentinel (essential) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise ...

contain security issues. You'll also guide and mentor two analysts, without direct line management, and support the rollout and management of IBM QRadar, Microsoft Sentinel, Defender for Endpoint, Defender for Identity and Defender for Cloud. Key responsibilities Handle security incidents escalated by L1 and L2 analysts, carry … Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender for Endpoint, Identity and Cloud Other SIEM platforms, such as IBM QRadar and LogRhythm Certifications such as Network+, Security+, CySA+, CISMP or CISSP ...

identify, isolate and contain security issues. You will support the initial implementation and management of security related technologies, including (but not limited to) IBM QRadar, Microsoft Sentinel, MDE, MDI and Defender for Cloud. Successful candidate must hold - SC-200 Certification Successful candidate must be eligible for SC clearance Company … Security Certifications, including CISMP, CISSP Experience with various Microsoft Technologies, including Microsoft Defender for Endpoint, Identity and Cloud Experience with SIEM platforms, including IBM QRadar, Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/ ...

/PIM) principles and enterprise Endpoint Detection & Response (EDR/XDR) tooling. Experience managing security tooling such as Microsoft Defender XDR, Sentinel, CrowdStrike, Splunk, QRadar, SentinelOne or similar enterprise-grade SIEM/XDR platforms. Direct experience securing Microsoft 365 tenants and standard corporate SaaS environments. Proven experience interfacing with ...

Glasgow. You will monitor and respond to cybersecurity incidents, analyze threats, and strengthen the security posture for customers. You will work with SIEM tools (QRadar, Azure Sentinel, Elastic) in a fast-paced, hybrid role requiring collaboration with internal teams and clients, while maintaining thorough incident records and escalating where ...

support continuous improvement. You should have a background in IT or cybersecurity, strong analytical thinking, and good communication. Nice-to-have SIEM experience (QRadar, Splunk, Sentinel) and knowledge of TCP/IP and common threats. #J-18808-Ljbffr ...

incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding of new systems. ...

detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience with cloud security platforms (e.g. ...

Meet the team Splunk, a Cisco company, is building a resilient digital world with an end-to-end platform designed for hybrid, multi-cloud environments. We approach our work with kindness, valuing the unique talents ...