1 to 25 of 32 SIEM Jobs in Manchester

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

experience. Experience applying CIS Benchmarks or similar hardening standards. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Experience with vulnerability management, SIEM, logging and incident response. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

Engineering background (AWS, Azure, or GCP) Cloud Security expertise CI/CD pipelines and DevOps PowerShell, Bash, Python and/or Java Docker & Kubernetes SIEM tools, Security Controls and Cloud Security Tooling Incident, Problem and Change Management Experience with Wiz tooling (Wiz Cloud/Wiz Defend) Windows and ...

teams.Respond to incidents alongside the Head of CyberWork with the existing MSSP across incident response and proactive monitoring and detectionMaintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools.Track deployment and health of all security products across the business.Stay ahead of emerging threats and evolving ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

desirable.Infrastructure as Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferredSecurity tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable.ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial.Personal and other skills Able to manage complexity ...

/Istio), API Security, IaC security (e.g. Terraform, ARM templates).Network Security: Zero Trust, firewalls, segmentation, DDoS Protection.Security Logging and Monitoring: Security logging, SIEM integration, event correlation.And any of these would be great: CISSP, CCSP, or equivalent certifications.Azure Security Engineer Associate, Google Professional Cloud Security Engineer.Microsoft Certified: Azure Solutions Architect ...

skills and professional demeanour Proficient in Microsoft Office Applications Capacity to use analytical thinking to draw reasonable conclusions from various data sources, such as SIEM platform, Threat Intelligence and a spectrum of data logs, in support of a cyber incident. Desirable Experience Experience working in a fast-paced operational environment ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Knowledge/experience ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protectionStrong understanding and knowledge of Information Security risk management tools and techniques.Awareness of Information Security control standards and frameworksKnowledge/experience working with firewalls ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

operations and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting … common exploits. Understanding of threat vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...

work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats.Key ResponsibilitiesMonitor and respond to security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation … environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering, or infrastructure security roleGood knowledge of networking and common attack types (e.g. SQL injection, phishing, malware)Experience with ...

deployment. Automate cloud security processes, escalations, and remediation activities. Ensure cloud infrastructure follows security, governance, compliance, and software lifecycle standards. Monitor cloud environments using SIEM, cloud security tooling, and observability platforms. Support incident, problem, and change management processes. Work with container platforms such as Docker, Kubernetes, ECS/ ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...