151 to 175 of 394 SIEM Jobs in England

management. Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology ...

programme across Asta & its client base. This is a Technical and leading a team of Engineers and provides authoritative security direction across PAM, EDR, SIEM, DLP, identity governance, vulnerability management, and regulatory compliance.The role requires the individual to take responsibility and strengthen Asta’s security posture through hands‐on security … implementing & Integrating security controls into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS/IPS, & other security tools. Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using ...

used to address problems and realise opportuni ties.Strong understanding of cloud networking and architecture principles, Identity and access management models, security monitoring and SIEM integra tion.Proven hands-on experience of at least two cloud environments inclu din g:AWSMicrosoft AzureVMware Cloud Found ationGoogle CloudExperience securing multi-cloud or hybrid environments ...

capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries … advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure critical security log sources with a focus on critical infrastructure services such as Active Directory (Domain Controllers, ADFS), network devices, firewalls, servers ...

/Istio), API Security, IaC security (e.g. Terraform, ARM templates).Network Security: Zero Trust, firewalls, segmentation, DDoS Protection.Security Logging and Monitoring: Security logging, SIEM integration, event correlation.And any of these would be great: CISSP, CCSP, or equivalent certifications.Azure Security Engineer Associate, Google Professional Cloud Security Engineer.Microsoft Certified: Azure Solutions Architect ...

/Istio), API Security, IaC security (e.g. Terraform, ARM templates).Network Security: Zero Trust, firewalls, segmentation, DDoS Protection.Security Logging and Monitoring: Security logging, SIEM integration, event correlation.And any of these would be great: CISSP, CCSP, or equivalent certifications.Azure Security Engineer Associate, Google Professional Cloud Security Engineer.Microsoft Certified: Azure Solutions Architect ...

operations center dashboards for anomalous activity.Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc.Minimum qualifications:Bachelor's degree or equivalent practical experienceCompleted relevant industry course/certification offerings such as CEH, GIAC or CompTIA Sec+.5 years of experience ...

ideally having led or owned a successful certification programmeStrong working knowledge of SOC 2, NIST CSF and other recognised security frameworksStrong technical understanding across SIEM, EDR, IAM, vulnerability management and DevSecOpsProven GDPR and data protection experience, ideally within a multi-jurisdiction environmentStrong understanding of AI security and governance, including prompt ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will be a satellite site in Hampshire, with occasional travel ...

understanding of; Networking (TCP/IP, firewalls, segmentation), Operating systems (Windows/Linux), Identity and access management concepts, Cloud Fundamentals. Exposure to security tooling (SIEM, IDS/IPS, EDR) Strong understanding of core security principles such as: Defence in depth, Least privilege, Zero trust concepts An understanding of designing and ...

their practical application.SSDLC: Experience building Secure Software Development Lifecycle phases into engineering workflows.Bonus PointsExperience with security monitoring and event correlation systems (IDS/IPS, SIEM, AWS-native tooling).Knowledge of Zero Trust Architecture and its implementations (e.g., Cloudflare).Familiarity with secret management processes and tools.Experience in multi-cloud environments ...

resilience and ransomware recovery solutions. Strong knowledge of hybrid cloud environments (Azure, AWS and/or GCP). Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR and IAM/PAM. Strong understanding of disaster recovery and business continuity principles. Excellent stakeholder management and communication skills. Desirable Experience ...

experience and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Strong teamwork skills and attention to detailAbility to work independently as needed yet always thinking as part of a teamSelf-motivation and ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

solutions on at least one major vendor stack, with Cloud Security Operations depth (e.g. Microsoft Sentinel Datalake/Defender XDR, CrowdStrike Falcon Next-Gen SIEM, Splunk Enterprise Security, Google Chronicle Security Operations, Elastic Security or Nozomi Networks across hybrid/multi-cloud integration patterns)Additional InformationOur commitment: Wavestone values and ...

Gain hands-on exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. •Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. •Support security assessments, threat modelling, technical testing and client projects. •Assist with modernising legacy VPN, proxy and firewall environments. •Work ...

Experience in Ops Sec roles, carrying out threat and vulnerability monitoring and risk assessment Strong skills working with Wazuh (essential), as well as other SIEM tools (preferably Splunk) Experience working with StreamAlert (or similar) Excellent knowledge of ISO27001, NIST or Cyber Essentials Extensive knowledge of security threats, controls, processes and ...

/Entra ID, Group Policy, O365, IntuneSolid networking foundations:TCP/IP, VLANs, DNS, VPNs, Wi-FiSecurity engineering knowledge:System hardening, endpoint security, SIEM, incident handlingISO27001, GDPR or PCI compliance exposureCertificates (SSL/TLS), WAF/DDoS, email securityAzure engineering background:Governance, networking, identity and security configurationOwnership mindset and strong ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

compliant environment, and you're comfortable in security audits and risk conversations. You're comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC.Observability ownership with Datadog (or equivalent) - you've defined SLOs, built the dashboards, and set the alerting culture.Experience leading or mentoring a DevOps team ...

and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre (SOC) and SIEM capabilitiesLead security technology evaluation, selection and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and governance processesDrive … solutionsStrong understanding of network security, micro-segmentation and secure access technologiesProficiency in cloud security across Azure, AWS or equivalent platformsKnowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewallsUnderstanding of cryptography, encryption standards and secure communication protocolsFamiliarity with MOD security requirements, defence standards and accreditation ...