626 to 650 of 690 SIEM Jobs in England

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat ...

orchestration and knowledge retrieval Developing AI solutions using Python and modern AI frameworks Working with vector databases and retrieval technologies Integrating AI capabilities with SIEM, SOAR and wider cyber platforms Designing prompts and optimising LLM performance Building proofs-of-concept and technical prototypes Developing evaluation frameworks to test model performance … systems Python development Vector databases and knowledge retrieval AI evaluation and model testing API integration and secure software engineering Cyber Security/SOC environments SIEM/SOAR technologies Rapid prototyping and PoC development You don't need to have done everything above. Strong practical GenAI engineering experience combined with ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

have created content, make sure to share with us some details along with your application. Technology tools & weapons you’ll be using: SIEM, EDR, Wireshark, Windows, Linux, VMware, Cloud Platforms Interesting resources you should check Explore our insights on Threat Ranges to understand the core environments you will be building. … unlock the role of the Senior Defensive Content Engineer at Hack The Box: Tooling & Technical Mastery: Expert proficiency with defensive security tools (e.g., SIEM, EDR, Wireshark, Volatility, Autopsy, IDA) and core domains such as detection engineering, digital forensics, and malware analysis. Content Engineering Experience: Proven track record of designing content ...

Stevenage on a 24-month contract, onsite. The role focuses on implementing, maintaining, and optimising security technologies across complex environments. Key tasks include SIEM administration, log ingestion, automation via PowerShell/Python, and API integrations. This is a hands-on engineering position within the Defence sector, with strong emphasis ...

IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft ...

quality requirements. Establish relationships between business services, applications, infrastructure, OT systems, information assets and accountable owners. Coordinate integration with asset-discovery, ITSM, vulnerability management, SIEM, network management, cloud and other enterprise platforms. Oversee asset discovery and reconciliation across corporate, operational and field environments. Develop safe and proportionate approaches … . Experience with enterprise CMDB/ITSM platforms. Experience with OT asset-discovery or industrial cyber-monitoring technologies. Experience integrating CMDB, vulnerability-management, SIEM and enterprise architecture platforms. Knowledge of the NCSC Cyber Assessment Framework, IEC 62443, ISO 27001, ISO 55001 or ITIL . Experience developing information asset registers, data ...

broad generalist security engineering role in a Microsoft environment. You'll work across identity and access management, cloud security, vulnerability management, and SIEM/detection, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional VPN access and improving … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be beneficial. A great opportunity for a Security Engineer ready to take broader technical ownership ...

broad generalist security engineering role in a Microsoft environment. You’ll work across identity and access, Zero Trust, cloud security, vulnerability management, SIEM/detection and application security, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be particularly relevant.A great opportunity for a strong Security Engineer ready to take broader technical ownership ...

Vinted Pay builds, not a parallel workstream. Find and close the operational blind spots: run deep technical reviews of our AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling (e.g. Wiz), and fix what you find - prioritised by exposure, not by finding count. Own PCI DSS and data … and translate technical risk into business consequence for senior audiences, internal and external. Comfortable in our stack - Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM and CSPM tooling - or eager to learn it, with a real interest in security and privacy as a field and the appetite to keep growing ...

advisors for sophisticated, multi-functional security initiatives at regional and global scale. We lead the compose, planning, and delivery of tailored Splunk solutions—including SIEM, SOAR, and AI-driven security operations—that address critical customer security needs. We partner with senior customer leaders to guide security adoption journeys, optimize threat … response, and ensure solutions deliver measurable business value. Your Impact Technical Leadership: Provide authority guidance within the Splunk security domain, exhibiting deep expertise in SIEM, SOAR, and Observability integrations. Strategic Advisory: Lead sophisticated, multi-functional security projects, acting as a trusted partner to CISO and IT leadership. Solution Delivery: Lead ...

advisors for sophisticated, multi-functional security initiatives at regional and global scale. We lead the compose, planning, and delivery of tailored Splunk solutions—including SIEM, SOAR, and AI-driven security operations—that address critical customer security needs. We partner with senior customer leaders to guide security adoption journeys, optimize threat … response, and ensure solutions deliver measurable business value. Your Impact Technical Leadership: Provide authority guidance within the Splunk security domain, exhibiting deep expertise in SIEM, SOAR, and Observability integrations. Strategic Advisory: Lead sophisticated, multi-functional security projects, acting as a trusted partner to CISO and IT leadership. Solution Delivery: Lead ...

security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop custom parsers, transformations and KQL queries, and design SIEM detections aligned to evolving threats. CI/CD pipelines with Azure DevOps/Git enable controlled deployments. #J-18808-Ljbffr ...

London, United Kingdom | Posted on 05/13/2026 The Security Operations Analyst is a member of the Security Operations team,reporting to the Security Operations Lead. The purpose of this role is tomaintain ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

including VPNs, VLANs, and Wi-Fi. Monitor and support servers, storage, backups, and virtual environments. Assist with patching, vulnerability remediation, endpoint security, MDR, and SIEM solutions. Support ITIL service desk processes, change management, and major incident management. Essential Skills & Experience Microsoft 365 and Entra ID administration. Intune MDM and Conditional … UniFi, Aruba, Veeam, Bitdefender, PRTG, SQL Server, MySQL, IIS, Apache, WSUS, and related technologies. Desirable ITIL Foundation. Microsoft certifications. VMware experience. Exposure to cybersecurity, SIEM, and MDR solutions. This is an excellent opportunity for a motivated IT professional looking to broaden their experience across infrastructure, cloud services, networking, and security ...

looking for? Commercial experience working within a SOC. Practical experience investigating security alerts and responding to incidents. Hands-on experience with a SIEM platform and familiarity with endpoint security tools. Some exposure to Microsoft 365 environments. Excellent written and verbal communication, including the ability to explain technical findings clearly … Sentinel and Microsoft Defender XDR, but experience with these specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

seeking a Senior Security Engineer in London with strong Microsoft, Azure, cloud and enterprise security experience. The role involves building security controls for SIEM and PKI/BYOK integrations, and configuring Defender for Cloud and Purview across a complex environment. You will lead technical delivery, often guiding a small team ...

project delivery, and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

compliant to industry standards.This role covers information protection, including data loss protection and data classification, and threat protection, including security information and event management (SIEM), user and entity behaviour analytics (UEBA), point products like anti-virus (AV) and intrusion detection system/intrusion prevention system (IDS/IPS) and penetration … ISO27001, PCI and GDPR. Possibly a certified ethical hackerKnowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferredGood exposure of user environment management, including desktops ...

Data Analytics Engineer | Splunk & Cribl | SIEM Pipelines We're hiring a Data Analytics Engineer to lead the migration, optimisation and secure operation of log ingestion and observability pipelines, with a focus on moving log sources from Splunk ingestion to Cribl Stream/Edge. The role Lead the migration … and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection Monitor and resolve pipeline and SIEM issues, and report on ingest reduction, cost savings, pipeline health and event loss ...

asset visibility, application discovery, and ownership tracking Driving zero trust and identity-aware access controls Improving identity lifecycle management and access governance Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise What they're looking for: Strong infrastructure or networking background with progression into … security engineering Hands-on experience implementing Zero Trust, SSO, IAM, and security controls from scratch Experience with Entra ID, SIEM/EDR platforms, vulnerability management, and asset visibility programmes Good understanding of Microsoft environments, endpoint security, and SaaS-heavy estates Comfortable operating autonomously in a lean, fast-moving environment where ...

proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

doing? Driving awareness, adoption and revenue growth across Phoenix's Security Platform offerings. Acting as a subject matter expert for solutions including Endpoint Security, SIEM/SOAR and Endpoint Management. Supporting Account Managers and wider sales teams to identify, qualify and progress security opportunities. Leading customer discovery sessions, workshops and … and a passion for helping customers solve business and technology challenges. Good knowledge of security technologies and platforms, including areas such as Endpoint Security, SIEM, SOAR and Endpoint Management. Experience conducting discovery conversations and translating customer requirements into effective security solutions. Strong communication, presentation and stakeholder management skills with ...