176 to 200 of 349 SIEM Jobs in London

philosophy. Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure. Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform — this role inherits live systems, it isn't a blank canvas. ...

privacy, risk, and business stakeholders. You will drive incident response programs and mentor junior team members. The role requires extensive incident response, forensics, and SIEM experience across Windows and Unix/Linux, with strong communication and diplomacy. On-call rotation applies, providing global opportunity within EY’s diverse culture. #J ...

establish and lead a new backend team responsible for several key the company products, including: The Integration Layer , which enables customers to integrate their SIEM platforms with the company data NSI , which supports engagement with criminals conducting conversational scams at scale The Web and SSL Server Survey Spam , which analyses ...

ensure that CLS is equipped with appropriate industry best of breed tools and solutions Operational Operate and maintain CLS Security controls related to SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, Endpoint Protection, Network Protection, etc. Review and help refine CLS Security procedures to ensure compliance with cyber resilience requirements …/IP, network IDS/IPS, host-based IDS/IPS, endpoint and network-based DLP, web proxies, email protection, endpoint protection software, SIEM Sound knowledge of enterprise security concepts/frameworks and products, secure design principles and patterns Monitor, tune and develop technical CLS Security controls and frameworks ...

role You will evolve Checkout.com’s security posture across our multi-cloud environments and SIEM platform. This role sits at the intersection of cloud security engineering and detection capability — responsible for both hardening the infrastructure we operate on and ensuring we can see what's happening across it. You will … security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking on the most complex cloud security and detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

attribution analysis. Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries. Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defence teams with intelligence‐driven context and prioritisation. Develop and refine … individual contributor or functional lead. Strong knowledge of system, network, and application security, including Windows and Linux internals. Experience analysing threats using telemetry from SIEM, EDR, and TIP platforms, and familiarity with CTI tools and sources such as OSINT, dark web sources, ISACs, Recorded Future, Mandiant, Flashpoint, Anomali, ThreatConnect ...

EFG (ESL FACEIT Group) in London is seeking a Senior Security Engineer to lead the evolution of the group’s information security posture. You will architect and oversee security tooling, platforms, and frameworks across the ...

JPMorganChase is seeking a Senior Security Architect to lead SecOps and Vulnerability Management across International Consumer. You will drive secure-by-design architecture, threat modeling, and SBOM governance, with a focus on cloud platforms and ...

Cisco Systems, Inc. in London seeks a senior Splunk security consultant to lead technical leadership and strategic advisory across SIEM, SOAR, and AI-driven security operations. You will design and deliver tailored Splunk security architectures, mentor teams, and collaborate with CISO and IT leadership to maximize technology investments and risk ...

equivalent technical leadership Direct experience in people management or team leadership - direct reports, mentoring, performance management Working knowledge of cybersecurity solutions (Endpoint, Cloud, Network, SIEM, threat intelligence) Experience managing distributed, multi-region teams Strong cross-functional influence and stakeholder management skills Fluent English required Desired: Understanding of partner business models ...

Cisco Systems, Inc. is seeking a senior Splunk security specialist to provide technical leadership and strategic advisory across SIEM, SOAR, and AI-driven security operations. You will guide multi-functional security projects, design tailored Splunk architectures, and partner with CISOs to maximize technology investments. The role emphasizes collaboration with security ...

Jobtailor, based in Greater London, seeks a Senior Cyber Security Operations Manager to drive performance across Shared Service's Cyber Services. You will act as a technical escalation point and line manager, guiding teams through ...

recommendations to secure scale. Candidates should have active SC clearance, extensive experience in large multi‐tier programmes, and strong knowledge of Microsoft security tooling, SIEM, and #J-18808-Ljbffr ...

Cisco seeks a senior security consultant within its Professional Services team to provide technical leadership in Splunk SIEM/SOAR, guide multi-functional projects, and deliver tailored security architectures across regional and global customers. You will leverage AI-driven operations, automate incident response, mentor teams on PDIO methodologies, and drive ...

deeply understand SOC and IT pain points, validate priorities, and ensure measurable customer impact. Requirements: 4+ years of B2B product management experience in cybersecurity, SIEM, XDR, observability, or IT operations platforms. Cross functional work with mutliple teams across R&D, Marketing, Sales, Customer Success Hands-on familiarity with SOC workflows ...

protocols such as TLS, HTTP and DNS. Desirable Skills/Experience Some knowledge of big data technologies and associated tool sets e.g. Elastic search, SIEM etc Either qualified to degree level with some experience as a Technical Engineering professional, or significant experience of technical delivery. Our Package Tailored benefits make ...

Counsel, Data Privacy, and Risk Management to protect EY’s information assets. The role requires deep incident response knowledge, forensics capability, and experience with SIEM tools (Splunk/Sentinel). #J-18808-Ljbffr ...

successful candidate will operate as a market-facing leader and trusted advisor for enterprise clients. They will help clients modernise their SOC, consolidate SIEM and XDR capability, improve response outcomes, and realise the value of Microsoft Security investments through practical, scalable and commercially strong solutions. Key ResponsibilitiesThe AMBG Senior Cyber ...

attack techniques and incident lifecycles is essential. Based in London (and Singapore) with UK business hours or Singapore hours, the role requires experience with SIEM tools, threat intel, and strong communication #J-18808-Ljbffr ...

with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring. Solid PowerShell scripting and automation skills. Experience with SIEM, SCOM, and enterprise troubleshooting tools. Knowledge of hybrid infrastructure and hyperconverged environments is advantageous. Cloud certifications are desirable but not essential. ...

enjoys building new business. Ability to thrive in a fast-growing, high-velocity startup environment. Nice to have Experience selling AI, SecOps, SOAR, SIEM, XDR, or security operations platforms. Experience working with enterprise customers across the UK market. Experience partnering with MSSPs, channel partners, or strategic alliances. At Torq ...

experience. The role operates 24/7, requiring shift work, and provides a competitive salary based on applicant experience. Essential skills include knowledge of SIEM/EDR tools and incident handling methodologies. Suitable applicants will be notified prior to the closing date of 01/06/2026. #J ...

maintain threat models, assess security controls, and build tools for proactive detection, configuration drift monitoring, and automated remediation. You will be responsible for managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams … Develop and maintain threat models for information assets and services. Build and optimise security tools for detection, remediation, and orchestration. Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation. Develop, test, and deploy advanced threat detection use cases based on vulnerability insights. Analyse ...