2 of 2 SIEM Jobs in Erskine

escalated triage and analysis on security events identified by Tier 1 Analysts, determining threat severity and advising on initial response actions. Apply expertise in SIEM solutions utilizing Kusto Query Language (KQL), to perform log analysis, event correlation, and thorough documentation of security incidents. Identify and escalate critical threats to Tier … with Tier 3 Analysts and management to refine detection and response workflows, contributing to continuous SOC maturity. Collaborate with Tier 3 Analysts on tuning SIEM and detection tools to reduce false positives and improve alert fidelity, submitting tuning requests and testing configurations when necessary. Identify gaps in current detection content … flows within a network. Advanced knowledge of Windows and Linux operating environments, including standard commands, file systems, and user authentication mechanisms. Competence in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms. Able to demonstrate proficient More ❯

your skills, curiosity, creativity, and authentic self to your work. Due to continued growth, DXC Technology offers a great opportunity for an experienced Lead SIEM Engineer to join our Microsoft and Cloud Security Practice, based in either our Erskine or Farnborough locations. Successful candidates will be required to be based … in the UK and hold or be eligible for SC/DV clearance. Job Essentials: SIEM Engineer skills, preferably with ArcSight. Office-based role, 5 days a week, from either Erskine or Farnborough. Security clearance level of DV must be obtained; it is an essential requirement for this role. Job … Functions: Drive technical and architectural improvements of the ArcSight SIEM managed service and related tools. Manage operations involving support, incident response, and change control. Handle version management to ensure appropriate ArcSight version levels within vendor support. Develop and update use case content. Onboard new technologies, manage certificate renewals, license usage More ❯