126 to 150 of 349 SIEM Jobs in London

IPAM (DDI) platforms SD‐WAN and secure internet breakout architectures Network automation and orchestration tooling IoT and smart‐building connectivity Enterprise observability, logging and SIEM integrations Managed service and third‐party connectivity environments Experience with policy‐based networking principles Qualifications Degree‐level qualification in Computer Science, Networking, Engineering ...

hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with: Cyber security incident investigation and response Threat hunting and detection SIEM, security monitoring and log analysis Cloud or hybrid environments Modern attack techniques and adversary behaviour Security automation or scripting Threat modelling or adversary simulation Working ...

understanding of Policing relationships to Government, security and intelligence agencies and legislative process including their governance arrangements Experience of working in Central Government Kubernetes SIEM ToolsRabbitMQ Big Data, e.g. Elastic Search Docker Experience of developing SPA (Single Page Applications) #J-18808-Ljbffr ...

Operations Centre (SOC) transformation engagements. Candidates are expected to have progressed through architecture, engineering, SOC or consultancy roles and to have delivered enterprise-scale SIEM, EDR/XDR and managed security service change. The role will initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours … Cyro's propositions and pre-sales activity. Primary responsibilities: soc architecture and Transformation: Lead discovery, current-state assessment and target-state design for SOC, SIEM, SOAR, EDR/XDR and protective monitoring engagements. Define monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans ...

What youll be doing Design and implement security tools, systems and processes. Work across cloud, on-premises and hybrid environments. Automate security processes, including SIEM and log ingestion. Manage firewalls and network security. Carry out infrastructure security assessments using standards such as CIS Benchmarks. Work with engineering and security teams … practice. Support security monitoring, incident response and threat intelligence. What were looking for Experience in some of the following: Cyber security and platform engineering. SIEM: Splunk, Sentinel, Cribl or ELK. Cloud: AWS, Azure or GCP. Scripting: Python, Bash or PowerShell. Networking, IDS/IPS, vulnerability management or endpoint security. ...

weeks. This rotation ensures uninterrupted monitoring and response capability across all time zones and handoff points. Key ResponsibilitiesTriage and analyze security alerts from SIEM, EDR, and other detection tooling, prioritizing based on severity, risk, and business impact. Investigate security incidents and cases end-to-end, from initial detection through containment … Capabilities, and SkillsDemonstrable experience in a SOC, incident response, or security analyst role (typically 2+ years).Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling. Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Strong understanding ...

weeks. This rotation ensures uninterrupted monitoring and response capability across all time zones and handoff points. Key Responsibilities Triage and analyze security alerts from SIEM, EDR, and other detection tooling, prioritizing based on severity, risk, and business impact. Investigate security incidents and cases end-to-end, from initial detection through … Skills Demonstrable experience in a SOC, incident response, or security analyst role (typically 2+ years ). Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling. Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Strong understanding ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling ...

and communicating status to leadership Expert-level threat investigation experience in enterprise and production environments, taking ownership from identification to resolution Deep understanding of SIEM, EDR, IDS/IPS, NDR, and SOAR tooling, and experience extending or building these tools Proficiency applying NIST IR Lifecycle, Cyber Kill Chain, and MITRE ...

technical authority and SME for security data within the Elastic Security ecosystem Design, implement and maintain scalable security data ingestion pipelines into Elastic SIEM Own the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources Define and continuously improve data quality standards ...

Minimum 1 years proven experience in a Tier 1 Cyber Security SOC Support Analyst role Working knowledge of Microsoft Defender XDR and Microsoft Sentinel SIEM technologies Working knowledge of Microsoft Defender suite including Endpoint Detection and Response Understanding of key Microsoft 365 Cloud Technologies from a threat landscape perspective Cyber ...

and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.* Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.* Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities … security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, etc.).* Hands-on experience with security technologies including Microsoft Defender, Zscaler, SIEM platforms (e.g. Google SecOps), and identity platforms (e.g. Azure/Entra, Okta).Hands on experience in incident response, threat detection, and vulnerability management within an enterprise ...

and evidence collection. Develop command line tools, APIs, integrations and workflows that simplify assurance activity. Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools. Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities. Use data ...

and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands-on SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...

monitor threats, investigate incidents, and drive improvements in security posture with advanced tooling and automation. Role requires hands-on expertise with firewalls, WAFs, VPNs, SIEM/SOAR, and Zero Trust. Hybrid working with in-office presence in Osterley is expected as part of Sky’s campus culture. #J-18808-Ljbffr ...

with SOC 2 and ISO‐27001 Strong understanding of cloud security principles (networking, IAM, secrets management, logging, monitoring) Experience implementing security tooling such as SIEM, EDR, and CSPM security platforms Track record of building scalable, pragmatic security programs in high‐growth environments Ability to balance strong security practices with usability ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

Customer Experience, Engineering, Sales, and MarketingNice to HaveFamiliarity with adjacent security infrastructure such as Crowdstrike, Netskope, or Palo Alto mail/gateway solutions, EPP, SIEM, or DLPFamiliarity with AI tools (e.g., Claude) to aid in day-to-day enablement and content developmentRelevant industry certifications (vendor-specific, CompTIA Security+, CISSP ...

industry standards for log source onboarding. Ready to take your expertise to the next level? Get in touch today! Responsibilities: Onboard clients to the SIEM platform and integrate relevant log sources to detect and investigate security intrusions Measure and improve the quality of security telemetry, identifying insufficient logging levels and ...

protect infrastructure, applications, and data. Partnering with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments … cyber security and platform engineering such as networking, Cloud security, CI/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity. Security Operations & Incident ResponseMonitor and investigate … improve the detection stackWhat You'll Bring: Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing … updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. ...

and deployment guardrails. Software supply-chain security: SBOMs, artifact signing, provenance, dependency controls, and build integrity. Observability and security monitoring: Prometheus, Grafana, CloudWatch, OpenTelemetry, SIEM, tracing, logging, and event correlation. API security: OAuth2/OIDC, mTLS, service mesh, gateway security, rate limiting, token validation, and service-to-service authorization. Financial ...

penetration tests, disaster recovery, and business continuity planning. Ensure vulnerability and patch management services meet service levels. Oversee and manage the effectiveness of MDR, SIEM, and SOAR services. Own security risk assessments for applications, infrastructure, and network architecture. Understanding the Business Develop a deep understanding of council, partners and local ...