26 to 50 of 347 SIEM Jobs in London

5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

best practices through documentation, workshops, and knowledge-sharing sessions. Contribute to continuous improvement initiatives across the wider security operations function. Skills & Experience: Experience with SIEM platforms such as Microsoft Sentinel, Splunketc Previous experience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment. Experience developing, testing, and ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using Manage Engine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. ...

experience with Infrastructure-as-code (e.g Terraform) Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling. Experience operating SIEM and/or SOAR platforms and tuning detection logic. Experience with vulnerability management and patch governance. Ability to write production-quality automation scripts. Demonstrated experience ...

Experience securing both cloud and on-premise environments Strong understanding of attacker tactics, techniques and procedures Experience working with technologies such as Defender XDR, SIEM, EDR, Vulnerability Management and SOAR platforms Familiarity with security and vulnerability frameworks (e.g. MITRE ATT&CK, CVSS, CISA KEV and NIST) Ability to query and ...

and experience with detection technologies such as YARA, along with REST API development and third-party service integrationsDeep technical expertise across security platforms including SIEM technologies (such as Splunk, Elastic, or Sentinel), SOAR platforms (such as Phantom, XSOAR, or Swimlane), and EDR solutions (such as CrowdStrike, SentinelOne, or Microsoft Defender ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...

than retrofitting themConduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely mannerManage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platformsAct as the escalation point for security-related incidents across 2nd and 3rd line, providing expert guidance ...

Complex Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore ...

cloud provider (AWS or Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders. ...

Azure). Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible). Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub). Experience working in agile delivery teams and collaborating with diverse technical stakeholders. Strong ...

frameworks, threat detection, and mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels ...

forwarders Data ingestion and performance considerations Strong experience using Splunk SPL (Search Processing Language). Experience integrating Splunk SOAR with security tools such as SIEM, IAM, EDR, firewalls, and ticketing platforms. Strong understanding of security engineering best practices, including incident response and automation safety. Good understanding of security governance, policies ...

Cloud/Container/API Security/CASB High level understanding of OT/IoT SecuritySecurity IntegrationsGood understanding of integrating multiple cybersecurity platforms, including: SIEM integrationsIdentity integrationsThreat Intelligence integrationsFirewall integrationsEndpoint integrationsCloud integrationsSOAR playbooksAPI-based security integrationsGovernance & ComplianceAwareness of: ISO/IEC 27001NIST Cybersecurity FrameworkCIS ControlsPCI DSSUK GDPRDPDPLeadership & CollaborationLead technical discussions ...

delivery (domestic and international as required). Ideally, You'll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...

case summarisation, evidence collection, threat intelligence analysis, detection engineering support and repetitive investigative workflows. Develop and maintain MCP servers, APIs and integration services across SIEM, EDR, SOAR, PAM, IGA, CSPM, DLP, ticketing and threat intelligence platforms. Build agentic and workflow-driven solutions, making informed decisions on when AI is appropriate ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

cloud infrastructure. Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools. Offer consultancy as an SME to all business units in relation to technical projects. Requirements and Qualifications: Experience in design, documentation, and configuration ...

Information Protection, Insider Risk and eDiscovery Strong understanding of Zero Trust architecture principles, particularly identity-driven security models Experience deploying and operating Defender and SIEM capabilities, integrated within a wider security ecosystem Experience conducting security design reviews and translating policy into practical controls Experience performing risk assessments aligned to recognised ...

needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences Embrace Challenges ...

Essentials Plus and the firm's wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote ...

Azure cloud or hybrid environments. Hands-on experience with the Microsoft E5 security toolset. Experience implementing and supporting a range of security technologies, including SIEM, EDR, firewalls, vulnerability management, identity and access management, encryption and related security controls. Working knowledge of recognised security frameworks such as Essential Eight, NIST Cybersecurity ...

custom security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...