14 of 14 SIEM Jobs in the East Midlands

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

methodologies and tools, enabling the seamless integration of security into the development process.* Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.* In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

Monitorbackup systems, conduct regular restore testing, and support annual external audits and DR testing initiatives. Proactive Monitoring: Manage system uptime, antivirus/EDR, and SIEM tools to quicklyidentifyand resolve performance anomalies. Network Admin: Support Azure VPN connectivity and applied IP routing and subnetting fundamentals to resolve complex connectivity issues. User ...

and out of hours coverage.* You will keep the lights green on all Security Toolkit Infrastructure within our remit and support various toolsets including SIEM, IDPS, GVM and Malware Protection.* You will record and respond to health alerts from the Security Infrastructure we maintain.* You will learn how to tune ...

control environments. Experience with SDN, network virtualisation, data-centre technologies or network automation . Knowledge of cyber-security technologies such as next-generation firewalls, SIEM, IAM and OT security monitoring. Experience planning design packages and preparing deliverables for formal client submissions. Why This Opportunity? This is an opportunity to work ...

role focuses on incident response, tool health, and triaging requests, with on-call coverage as needed. You will handle ITSM incidents, maintain security tooling (SIEM, IDPS, GVM, malware protection), and learn to tune policies while delivering reliable security operations in a dynamic environment. #J-18808-Ljbffr ...

bring You’ll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. ...

reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering … and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder ...

similar cyber security roles. Strong understanding of security controls, detection logic, identity systems and endpoint security. Experience working directly with engineering teams (EDR, SIEM, Identity, Cloud, Networks) to embed intelligence into controls. Proven ability to convert intelligence into detection logic, engineering requirements and hardening improvements. Demonstrable experience analysing adversary … tooling, CTI feeds, enrichment tools, and automated intelligence pipelines. Ability to produce concise, actionable intelligence summaries for engineering and leadership. Experience with Microsoft Sentinel SIEM/Defender automations and logic apps to support the engineering team. About us Did you know we're a FTSE-250 retail company employing nearly ...