1 to 25 of 347 SIEM Jobs in London

Entra ID security concepts. Experience investigating security alerts and suspicious activity. Understanding of endpoint security, malware protection and EDR/XDR technologies. Familiarity with SIEM technologies, log analysis and security monitoring. Understanding of vulnerability management and remediation processes. Good knowledge of fundamental security concepts including least privilege, MFA, network segmentation ...

Control 7. EDR/XDR Integration: Expert‐level deployment of tools (e.g., CrowdStrike, SentinelOne) to achieve full visibility across endpoints (CIS Control 6). SIEM/SOAR: Experience designing log aggregation and automated response playbooks in platforms like Splunk, Microsoft Sentinel, or Google Chronicle to satisfy monitoring requirements (CIS Control ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

stakeholders. Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable ExperienceSecurity Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

Competitive Advantage Experience within FMCG, manufacturing, supply chain, or consumer goods environments. Hands-on experience with Microsoft Azure security technologies. Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms. Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications ...

Entra ID and/or Ping Security Operations Vulnerability management Tenable.io, Qualys and/or Rapid7 EDR/XDR CrowdStrike and/or SentinelOne SIEM/SOAR Splunk, Microsoft Sentinel and/or Google Chronicle Automated security response and monitoring Infrastructure & Network Security CIS Benchmarks Linux and Windows Server hardening ...

experienceGood knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Role Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

understanding of network security- Firewalls etc. Solid understanding of good information security, cyber security practices and policiesHands on experience with different security platforms, including SIEM and EDR platformsBasic understanding and implementation experience with encryption technologies (SSL, PKI)Working knowledge of scripting or automation using Python, PowerShell, or similar languagesWorking knowledge ...

Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards. Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data-loss prevention, certificate management, or network-access control. Experience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems. ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code.Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access.Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and certificationsYou will ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale). Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001. ...

systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.)You have strong experience in Information Security, Security Assurance ...

ability to interpret events and drive effective remediation. Working knowledge with security technologies and controls (e.g., Perimeter/edge security controls, data protection controls, SIEM/monitoring controls) and cloud security. Exposure to operational resilience, business continuity (ISO 22301) and IT disaster recovery, with awareness of FCA/PRA operational ...

/IEC 27001, CIS Controls, COBIT or Cloud Security Alliance guidance. Experience with DevSecOps, CI/CD controls, cloud security posture management, vulnerability management, SIEM, DLP, endpoint security, infrastructure as code or security automation. Experience applying AI responsibly to customer intelligence, technical support, security operations or risk management, and creating ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments. Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms. Develop containment, eradication, and remediation strategies aligned to business risk. Produce executive briefings, technical reports, board-ready updates, and ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ...

configuration management and cloud service protection. Identity and access management: Directory services, multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security ...

Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment. You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools. You're proficient in scripting languages (e.g. Python) for automating security processes and customizing ...

qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...