5 of 5 SIEM Jobs in Cheshire

promote secure development practices. Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation. Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response. Understanding of cyber incident response, including triage, investigation, containment and recovery. Knowledge of Cyber Essentials, Cyber Essentials Plus ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking knowledge of identity and access systems and common attack paths, including credential theft, privilege escalation, and session ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...