176 to 200 of 394 SIEM Jobs in England

phishing, BEC, and identity-related attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging ...

phishing, BEC, and identity-related attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging ...

hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities and security information and event management (SIEM)Lead security technology evaluation and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and operational governanceDrive technical … application securityStrong understanding of threat models, attack vectors and defence-in-depth strategiesProficiency in cloud security (AWS, Azure security, or equivalent)Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.)Understanding of cryptography, encryption and security protocolsFamiliarity with MOD security requirements, Classification Guides and defence standardsKnowledge of compliance frameworks ...

required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Engineer, Cyber Security, IAM, PAM, RBAC, DevSecOps, SIEM, Vulnerability Management, Active Directory ...

Technology (or related discipline) or significant equivalent industry experience. * Advanced expertise across at least three security technologies or disciplines, including PAM, ADFS, Firewalls, Entra, SIEM, EDR/XDR, CTEM, WAF/DDoS, PKI, SASE, IDS/IPS, security assurance frameworks, incident response or cryptographic systems. * Advanced experience assessing security controls ...

them to a high standard on threat hunting, threat intelligence utilisation, and automated response, not just SLA compliance.Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves.Build the internal team into a trusted escalation layer, with clear incident response ...

toolset. Key Requirements:5+ years’ experience in Security Engineering or Security Architecture.Strong hands-on experience across cloud security (AWS/GCP), IAM (Entra ID), SIEM, Zero Trust and vulnerability management.Experience designing and delivering security improvements, not just operating existing controls.Comfortable influencing stakeholders and working autonomously in a fast-paced environment.Experience ...

Integrations: Build and maintain high-leverage integrations between cloud providers, SaaS platforms, and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform.Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and ...

Security Operations working within or alongside Security Operations Centre(s)Experience working in all hyperscaler environments, preferably holding Professional Cloud Architect CertificationExperience with multiple SIEM & SOAR Tooling, preferably Google SecOps (formerly Chronicle/Simplify)Experience with EDR/XDR and NDR Tooling, preferably Crowdstrike, Corelight, Microsoft Defender XDRConnect to your ...

and build relationships with C-suite and VP-level stakeholders (CIO, CISO, CTO)- • Strong knowledge of cybersecurity frameworks and technologies (e.g., NIST, Zero Trust, SIEM, EDR, MDR, IAM, threat detection, data protection)Preferred qualification - • Experience working in a matrix/overlay sales model, influencing strategy and collaborating cross-functionally with ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

skills and professional demeanour Proficient in Microsoft Office Applications Capacity to use analytical thinking to draw reasonable conclusions from various data sources, such as SIEM platform, Threat Intelligence and a spectrum of data logs, in support of a cyber incident. Desirable Experience Experience working in a fast-paced operational environment ...

access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer and internal stakeholders ...

networking integration (vSphere, vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

and audit logging.Connector ecosystems – Experience designing secure integrations with enterprise systems such as JIRA, Azure DevOps, OpenPages/GRC, ServiceNow, SharePoint, Confluence, Git, IAM, SIEM or observability platforms.Developer enablement – Experience training, certifying or enabling distributed engineering communities, citizen developers or function-aligned delivery teams.Production AI operations – Experience with MLOps, LLMOps ...

remediation toolingThe confidence to work independently, make risk-based decisions and support junior engineersExperience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful.Relevant certifications such as AZ-500, AZ-400, Security+, CySA+, CEH or OSCP would also ...

confidence to work independently, make risk-based decisions and support junior engineers Experience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful. Relevant certifications such as AZ-500, AZ-400, Security+, CySA+, CEH or OSCP would also ...

passionate about identifying sophisticated threats and improving security operations. You'll ideally have experience with: Threat Hunting Detection Engineering Security Operations Centres (SOC) SIEM technologies MITRE ATT&CK Framework Threat Intelligence Detection rule creation and tuning Security telemetry analysis Incident detection and investigation Writing detection use cases and playbooks Developing ...

hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions … knowledge of CI/CD pipelines and DevSecOps practices. Strong understanding of cloud security controls, security frameworks, and compliance requirements. Hands-on experience with SIEM platforms and cloud security tooling. Experience with incident, problem, and change management processes. Working knowledge of Wiz Cloud and Wiz Defend security platforms. Strong containerisation ...

continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network environments. Analyse security events to determine impact, severity, and appropriate … experience working within a Security Operations Centre (SOC) environment. Strong experience in security monitoring, alert triage, and incident investigation. Hands-on experience with: Splunk SIEM technologies Endpoint security tools Security monitoring platforms Experience developing and improving detection content and alert logic. Strong understanding of incident response processes and cyber security ...

threat modeling, code review), Identity & Access Management, Network Security, Data Protection, Incident Response. Hands-on experience implementing enterprise security solutions (Data Loss Prevention, WAF, SIEM, etc.)Preferred qualification - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or CISSP-ISSAP (Certified Information Systems Security Professional-Information Systems ...

testing, reporting and evidence collection.Develop command line tools, APIs, integrations and workflows that simplify assurance activity.Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools.Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities.Use data to identify control ...

implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder ...