5 of 5 SIEM Jobs in Cambridge

Hands‐on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data. Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts ...

looking for:Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data.Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations.Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts ...

bear in a tailored response to a major incident.Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.“Nice To Have” Skills and Experience:BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer ...

capability around the SOC. What you’ll be doing: Proactive security monitoring and threat hunting Investigating and responding to security incidents Engineering and improving SIEM environments Building and tuning detection rules Developing detection coverage around MITRE ATT&CK Supporting and maintaining client security platforms Scripting and automating SOC processes Helping … develop and mature the UK SOC capability What we’re looking for: Strong SOC/Security Operations experience Hands-on SIEM engineering experience Detection engineering and alert tuning Experience with KQL, SQL or similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and ...

Requirements Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data. Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security … MITRE ATT&CK and enhancing security telemetry through automation and tooling. Highest-signal resume keywords Incident Investigation Detection Logic Development MITRE ATT&CK Framework SIEM Tooling Cloud Security Practices ATS Optimization Keywords Hard Skills Security Incident Investigation Detection Rule Development Threat Hunting Forensic Investigation Scripting (PowerShell, Python) Industry Keywords Adversary ...