26 to 45 of 45 SIEM Jobs in Manchester

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

including their TTPs Experience in utilising open-source intelligence and the development of tools to assist with this Experience in conducting malware, phishing, and SIEM log analysis Knowledge of relevant cyber threat intelligence sources Demonstrated ability to manage customer relationships Proven ability to translate cyber threats to the relevant audience ...

across the wider cyber domains – Identity Security, Sec‐Ops, Data Security and AI Security – to show how Network & Edge controls integrate with identity providers, SIEM/SOAR/MDR (e.g. FortiSIEM, FortiSOAR), data loss prevention and AI usage controls. Utilise vendor‐specific tools and resources to support solution design and ...

forensic investigations and advise customers on strengthening their cyber resilience and incident response capabilities. You will work primarily across Microsoft and AWS environments, alongside SIEM, EDR and digital forensic tooling. What You'll Do Lead or support customer-facing cyber incident response engagements, from initial investigation through containment, eradication, recovery … environments and network infrastructure. Analyse security logs, endpoint telemetry, forensic artefacts and indicators of compromise to establish incident scope and root cause. Use EDR, SIEM and forensic tooling to investigate suspicious activity and reconstruct attack timelines. Advise customers on containment decisions, remediation priorities and recovery approaches. Support eradication and recovery ...

governance. Key Responsibilities Here's what you'll be doing: Perform initial triage and investigation of security incidents. Monitor security alerts and events from SIEM and other security tools. Participate in vulnerability management and patching. Maintain and update security documentation and procedures. Monitor Sec ops mailbox for alerts and triage ...

lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry and SIEM platforms. Strong knowledge of Windows internals, OS artefacts, attacker tradecraft and frameworks such as MITRE ATT&CK is expected. Experience with forensic best-practice evidence ...

Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling. You will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and ...

E‐Resourcing Ltd in Manchester is seeking a Security Engineer to assess and enhance the effectiveness of existing security controls, with a focus on AWS and SIEM. You will design and implement security solutions to ...

Menzies LLP in Manchester is seeking an IT Security Analyst to join the IT & Innovation team. You will monitor security alerts from the SoC, investigate incidents, and help improve configurations to strengthen security across the ...

works with Technology teams, third‐party providers, and business stakeholders to reduce cyber risk and maintain policy compliance. You will help monitor SOC/SIEM outputs, participate in risk assessments, and assist with audit responses. Strong communication and a security‐minded mindset are essential for protecting information assets. #J ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … with strong judgement, clear communication and the ability to turn threat intelligence and adversary behaviour into practical defensive capability. Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

incident response capability, contributing significantly to the company's overall security posture and resilience. KEY RESPONSIBILITIES: Oversee the day to day running of our SIEM solution (Chronicle), working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team. Define and facilitate the creation of new rules … fine-tuning existing rules within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events, identifying trends, attacks, and potential threats. Identify and raise problems, communicating and escalating these ...

looking for people who want to build something. What You’ll Do Alert Triage & Monitoring Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments. Investigate alerts to determine scope, severity, and whether escalation is warranted. Leverage AI-assisted triage and enrichment tools … lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication. Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure. Execute established ...

translating complex technical requirements into actionable data flows to support detections and alerts. The position maintains a dual focus: hand‐on security engineering, including SIEM and detection logic development, and streaming data engineering; specifically, the optimisation and manipulation of high-volume streaming data pipelines. You will support outcomes so that … and at rest is fully encrypted (KMS & TLS). Ensure all fields are normalised into standard schemas (OCSF) while enforcing least‐privilege access controls. SIEM & EDR Logic Development: Support analysts in the creation and tuning of detection rules across platforms. Detection Quality Assurance: Act as an enabler to establish and ...

Security Operations & Monitoring Support the day‐to‐day operation of information security controls and services. Monitor security tooling, alerts, and dashboards, including SOC and SIEM outputs. Investigate and respond to security events and incidents in line with agreed procedures. Escalate security incidents and risks to the Information Security Manager … detail. Experience working in regulated or enterprise environments. Exposure to cloud security concepts (e.g. Azure security services). Experience with security tooling such as SIEM, endpoint protection, or vulnerability management tools. Relevant education or certifications (or working towards) in information security. About Us Our benefits We offer all employees ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

Security Engineer - AWS/SIEM Manchester - 4 days in the office, 1 day working remotely £55-60k pa A successful technology company in Manchester are recruiting a Security Engineer to assess and evaluate the effectiveness of existing security controls. You will also be responsible for the design and implementation … mitigate risks. Your experience should include: Firewall and Intrusion Detection system implementation Responding to security incidents and events Performing security audits Maintaining security controls SIEM and Cloud (preferably AWS) As part of a small team you will be solely responsible for ensuring the technical team meet security standards and pass ...

Security Engineer – Microsoft, SIEM, Sentinel, AlienVault – Hybrid – Manchester – £55,000 - £60,000 + bonus You will work with some of the best Cyber Consultants in the country within a fast‐paced and demanding Security Engineering team. This is an exceptional chance to join one of the fastest growing and most … environment – ideally MSSP Reviewing incidents, notifying malicious activities, and working with my client’s customers to investigate and solve incidents Experience with SIEM tools e.g. Sentinel Assess risks and threats for new and existing customers Monitor security alerts from security platforms Act on 2nd Line security alerts, incidents, requests, and ...

addressing security incidents and working with clients to enhance their security posture. The successful candidate will have experience in a SOC environment, particularly with SIEM tools like Sentinel. A salary range of £55,000 to £60,000 plus bonuses is available for the right candidate. #J-18808-Ljbffr ...

monitoring, detecting, analysing and responding to security incidents in a hybrid setup (3 days on site, 2 days remote). You will oversee Chronicle SIEM operations, create and tune rules, investigate alerts, monitor events for trends and threats, and drive remediation with the SOC and DevOps teams. #J-18808-Ljbffr ...