226 to 250 of 349 SIEM Jobs in London

increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

Lead Threat Detection Engineer in London to own and evolve our threat detection lifecycle across a multi-cloud environment. You will build and refine SIEM detections, automate response, and work with engineering to turn findings into scalable security improvements. The role emphasizes hands-on threat hunting, threat intelligence, and clear ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands‐on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

security protocols, cryptography, authentication, authorization, and security architecture design principlesHands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutionsKnowledge of adversary tactics, attack stages, and detection methodsFamiliarity with ...

within a customer-focused SaaS organisation. Strong hands-on experience securing cloud environments (AWS and/or GCP). Deep experience with security monitoring, SIEM platforms, EDR, detection engineering, alert triage and incident response. Experience building or improving operational security capabilities rather than simply operating existing tooling. Experience with security … tooling including SIEM, EDR, DLP, MDM and cloud security platforms. Strong understanding of attacker techniques (MITRE ATT&CK) and how to translate them into effective detections. Experience with vulnerability management and security telemetry. Understanding of modern AI tooling, AI security risks and governance considerations. Good understanding of networking, distributed systems ...

frameworks, threat detection, and mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels … Capable of leading teams, managing complex cybersecurity issues, and ensuring compliance with industry standards. Highest-signal resume keywords Cybersecurity Operations Management Incident Response Frameworks SIEM and EDR Platforms Leadership and Team Guidance Regulatory Compliance Knowledge Hard Skills Incident Response Threat Detection Vulnerability Management Root Cause Analysis Threat Hunting Strategies Cybersecurity ...

start or grow their career in cybersecurity, with opportunities for advancement and skill development. RequirementsKey Responsibilities: Monitor security alerts and events from Microsoft Defender, SIEM and other security tools. Perform initial triage and analysis of security incidents. Escalate verified incidents to Tier 2/3 analysts as needed. Document incidents … Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts (TCP/IP, DNS, firewalls).Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and endpoint protection. Strong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to work in a fast ...

start or grow their career in cybersecurity, with opportunities for advancement and skill development. Key Responsibilities: Monitor security alerts and events from Microsoft Defender, SIEM and other security tools. Perform initial triage and analysis of security incidents. Escalate verified incidents to Tier 2/3 analysts as needed. Document incidents … related field (or equivalent experience). Basic understanding of networking concepts (TCP/IP, DNS, firewalls). Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and endpoint protection. Strong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to work in a fast-paced ...

Burns Sheehan Limited is seeking a Lead Security Engineer to join a growing international business. This hands-on role focuses on building and improving security controls across a complex IT estate, rather than pure monitoring ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign‐On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD‐WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

SecurityHQ in London hybrid role shaping security architectures for SIEM, XDR/MDR, cloud security. You’ll lead discovery, translate requirements into reference designs, and own technical responses for RFIs and proposals. You’ll collaborate with Sales, Partners, and Delivery, present to CISO/CIO audiences, and drive automation and ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

Monitor and respond to security alerts across multiple channels, including managed SOC escalations. Maintain visibility and logging infrastructure, ensuring effective SIEM (Security Information and Event Management) operations. Support security audits for PCI, SOC2, ISO, and other compliance frameworks, gathering evidence and collaborating with Engineering, GRC and the broader Security Division. … configuration, and management), GitHub administration best practices, and internal security tooling to strengthen Vercel's overall security framework About You: Extensive experience in security operations, including SIEM management, security logging, and detection engineering. Strong knowledge of AWS infrastructure and cloud security best practices. Experience with GitHub administration and security controls. ...

high-growth environment with large quota/dealsStrong understanding of complex solution sales methodologies, value selling and enterprise buying processes with operational disciplineExperience selling SIEM, EDR, or CNAPP (DevSecOps, CloudOps) solutions is highly preferredEstablished relationships with key security decision-makers (CIOs, CISOs) and the ability to drive strategic conversationsExpertise ...

ensuring resolution within agreed SLAs. Troubleshoot issues across the CyberArk platform, including Vault, CPM, PSM, PVWA, Entra ID integrations, MFA solutions, and SIEM integrations. Perform root cause analysis and manage escalations with CyberArk support where required. Support privileged account onboarding and offboarding, safe administration, policy management, and access reviews. Carry ...

Defining the system specifications to support optimal performance. Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, traces, and security events with features such as APM, RUM, SIEM, Kubernetes monitoring, and more, enhancing operational efficiency and reducing observability spending by up to 70%.We seek a **Product Reliability Engineer** who ensures that the Coralogix ...

action and decision while maintaining focus on achieving optimal outcomes as part of a collaborative development effort. Experience in enterprise security solutions (endpoint, SIEM, networking, etc). Seasoned with financial services sales (banking) or BFSI market. Team Player, Competitive, Optimistic, Enthusiastic, Trust Builder. #J-18808-Ljbffr ...

years of experience in SOC or Incident Response and hold a relevant Bachelor’s degree. Key skills include in-depth knowledge of SIEM/EDR tools and strong analytical capabilities. The position requires working in shifts and provides competitive compensation. #J-18808-Ljbffr ...

and maintain detection coverage for cloud‐native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud. Vulnerability & Configuration Management: Own vulnerability management for cloud … and integrating security scanning into CI/CD workflows. Good experience with container and image security - scanning, runtime protection, supply chain risk. Experience with SIEM and detection engineering - building and tuning cloud‐native detection rules, threat hunting across CloudTrail and application logs. Familiarity with automation platforms and AI‐driven security ...

and access provisioning in partnership with ITSM. Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR/SIEM, and incident response. Manage vendors and core infrastructure partners, ensuring cost-effective delivery, timely patching, and contract governance. Maintain secure, high-performance connectivity for offices, labs … Okta or similar) Endpoint Management (Intune, Jamf, or similar) Corporate Networking (LAN/Wi-Fi/VPN/firewalls) Cyber Security Operations (EDR, SIEM, vulnerability management, incident response) Demonstrated ability to define and enforce standards and processes that combine agility with control. Strong vendor and stakeholder-management capability. Excellent communication ...

uncommon? (not required) Certifications such as Network+, Security+, CySA+ 1-3 years' experience as a Security/Network Administrator or equivalent knowledge Prior SIEM experience and/or administration Hands‐on experience with parsing data, log formats, regular expressions Scripting experience (bash, PowerShell, python) Multiple OS experience (mac, windows) Knowledge … various security methodologies and processes, and technical security solutions (SIEM, IDS/IPS, Firewall Solutions, Offensive Security tools) #J-18808-Ljbffr ...