201 to 225 of 394 SIEM Jobs in England

GitHub Advanced Security, SAST/DAST, secrets management, API security Endpoint: CrowdStrike, SentinelOne Network: WAF, CDN security, Zero Trust Network Access Data Security: DLP, SIEM/SOAR, logging & monitoring Vendor Security: Risk assessments, secure configuration baselines Who were looking for: Experience leading global security programmes in SaaS environments. Comfortable working ...

toolingComfortable writing and reviewing code (Python, Go, TypeScript, or similar)Experience building integrations and automating security workflowsExperience with security tools at scale — SAST, DAST, SIEM, endpoint, cloud, identity, AI/ML, vulnerability management platformsAI and agentic security knowledgeUnderstanding of AI/ML security risks, attack vectors, and vulnerabilitiesFamiliarity with agentic ...

playbooks and runbooksIdentifying systemic weaknesses that increase incident likelihood or blast radius, including:Unpatched or inconsistently patched systemsExposed services and misconfigurationsDegraded or ineffective controlsUsing SIEM and security tooling to prioritise patching and vulnerability risk based on real exposure and exploitability, not CVSS scores alonePartnering with IT, Cloud, and Engineering teams ...

house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...

Azure AD), and Azure Monitor, automating security controls and compliance checks, developing playbooks, policies and technical processes and improving Azure logging within the SIEM (Sentinel).The successful candidate will have strong security engineering skills, hands-on Azure experience (ideally supported by relevant certifications such as AZ-500) and solid scripting ...

and disaster recovery management.Proven ability to analyse industrial networks and SCADA/DCS environments across vendors such as ABB, Siemens, Yokogawa, GE, Honeywell.Experience with SIEM platforms (e.g., Splunk) for security monitoring.Excellent communication skills, including the ability to explain security issues clearly to technical teams and stakeholders in both Italian and ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

bear in a tailored response to a major incident.Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.“Nice To Have” Skills and Experience:BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer ...

incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM, EDR, cloud security, and detection technologies A methodical approach, strong technical judgement, and the ability to remain calm during high-pressure incidents This is a hybrid ...

implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder ...

supporting customers through security events, and helping to continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor … Security Operations Centre or similar cyber security role Experience investigating and responding to cyber security incidents within agreed SLAs Hands-on experience with SIEM, EDR and email security technologies Experience mentoring or supporting analysts at different stages of their careers A strong understanding of cyber threats, attack techniques and compromise ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity.Security Operations & Incident ResponseMonitor and investigate security … improve the detection stackWhat You'll Bring:Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

resilience. You will sit at the heart of our cyber defence operations, working daily with technologies including Microsoft O365 Defender, Entra ID, Intune, Rapid7 SIEM, and Sophos Antivirus. Youll be responsible for monitoring security events, investigating suspicious activity, responding to incidents, and continuously improving our security posture. This … cyber security What you will do: Security Monitoring & Incident Response Actively monitor alerts and telemetry across endpoints, identities, email, and cloud services using Rapid7 SIEM, Microsoft Defender, and Sophos AV. Investigate suspected cyber attacks including malware infections, phishing campaigns, identity compromise, and unauthorised access attempts. Perform triage, root cause analysis ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

technical security infrastructure and policies.Develop technical solutions and new security toolsets to mitigate security vulnerabilities and automate repeatable tasks.Build, implement and tune SIEM event correlation rules/logic, and content, to filter out security events associated with known network behaviour, known false positives and/or known errors.Build, implement and ...

securing DLG’s environments in line with compliance commitmentEnsuring security technical platforms are configured to optimise the overall security offered to DLG.Improving SIEM coverage of DLG’s overall environmentMaking sure that all changes to the production environment have been reviewed and approvedCommunicating and building relationships at various levels with ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

engineering, which means its ideal for someone who enjoys solving problems and building security processes. Key Areas include: Build and refine detection logic across SIEM, EDR and related tooling Create automated SOAR workflows and playbooks to streamline response Lead investigations into complex or high severity incidents Carry out deep-dive ...

Observability & Security Implement and optimize network monitoring using Elasticsearch for SNMP-based telemetry, providing visibility into device health, interface utilization, and performance trends. Leverage SIEM platforms for Syslog aggregation, event correlation, and security alerting, contributing to the organization's overall security posture. Report on infrastructure activity logs, performance, availability, operational ...

Conditional Access) Azure IaaS and networking (VPN Gateway, routing, connectivity design) Strong working knowledge of: Enterprise networking (routing, switching, firewalls) Security operations, logging, and SIEM integration Proven experience leading engineering teams across infrastructure/network/security transformations Strong data handling capability, including advanced Excel for engineering control and analysis ...

skills. Ability to translate technical trade-offs into business-focused decisions supported by clear pro-and-con analyses. Experience integrating security tool outputs into SIEM platforms, engineering workflows, and adjacent security tooling. Prior experience with tools such as SafeBreach, BloodHound, Microsoft EASM, or similar technologies. ...