13 of 13 SIEM Jobs in Farnborough

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

Security 1+ years of experience with either programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM's such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

Architect endpoint protection, DLP and advanced threat protection solutions Design application security, API security and secure SDLC integration Architect Security Operations Centre (SOC) and SIEM capabilities Lead security technology evaluation, selection and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture … network security, micro-segmentation and secure access technologies Proficiency in cloud security across Azure, AWS or equivalent platforms Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewalls Understanding of cryptography, encryption standards and secure communication protocols Familiarity with MOD security requirements, defence standards and ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody, and technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

with proven capability in SOC deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/ ...

techniques and procedures (TTPs). Indicators of Compromise (IOCs) and Indicators of Attack (IOAs). Cyber Threat Intelligence (CTI). Elastic Stack or other SIEM technologies. Open-Source Intelligence (OSINT) methodologies. Communicating technical information clearly to varied audiences. Coaching, mentoring or supporting less experienced analysts. Desirable Experience CompTIA Security+, SecurityX … CISSP, CISM or similar certifications. Experience working within highly secure or government environments. Advanced SIEM engineering and detection content experience. What You'll Gain At DXC, you'll join a team where learning, innovation and career development are actively encouraged. You'll benefit from: Exposure to cutting-edge cyber security ...

techniques and procedures (TTPs). Indicators of Compromise (IOCs) and Indicators of Attack (IOAs). Cyber Threat Intelligence (CTI). Elastic Stack or other SIEM technologies. Open-Source Intelligence (OSINT) methodologies. Communicating technical information clearly to varied audiences. Coaching, mentoring or supporting less experienced analysts. Desirable Experience CompTIA Security+, SecurityX … CISSP, CISM or similar certifications. Experience working within highly secure or government environments. Advanced SIEM engineering and detection content experience. What You’ll Gain At DXC, you'll join a team where learning, innovation and career development are actively encouraged. You’ll benefit from: Exposure to cutting-edge cyber security ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands‐on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling Basic understanding of threat frameworks, such as ATT&CK Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

and improve security platforms controlling privileged access, credentials and administrative activity across critical infrastructure. There is also a requirement within the team for Elastic SIEM capability, so if you have strong Elastic experience alongside your security engineering background, that would also be relevant. The role You'll work across identity … group access. Monitoring privileged sessions and investigating failed authentication activity. Maintaining, patching and upgrading security platforms. Reviewing audit logs and integrating security events with SIEM tooling. Troubleshooting firewalls, load balancers and connectivity issues. Key experience Hands-on Security Engineering within complex environments. Privileged Access Management (PAM) or identity security solutions. ...