26 to 45 of 45 SIEM Jobs in the Midlands

Nettitude Group in Birmingham is seeking a vigilant SOC Monitoring Analyst to join our 24x7 team, using SIEM, EDR, and threat intelligence to triage events and advise on risk. You will produce detailed incident reports, tune alerts, and collaborate on advancing monitoring capabilities, including malware analysis and cross‐team projects. ...

align with Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior … discussions. What You'll Bring: Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments ...

bring You’ll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. ...

seeking a Senior Security Operations Engineer (SOC Engineer L3) to join its security function. The role is highly technical, focusing on SOC engineering, detection, SIEM/SOAR, automation and AI-driven operations. You will design and improve monitoring across a large enterprise with emphasis on AI agents and agentic workflows ...

integrations Elasticsearch ingest pipelines, Data Streams, templates, mappings and ILM End-to-end data/feed onboarding, testing, troubleshooting and validation Elastic Security/SIEM environments High-volume ingestion architectures, including Kafka Elastic platform migrations, upgrades and optimisation We have opportunities available for both permanent consultants and Outside IR35 contractors ...

and assess alerts escalated by the outsourced SOC; validate their accuracy and determine potential impact. Initial Investigation: Perform first-line investigation using available tools (SIEM, Device Logs, firewall logs and SIEM alerts). User Interaction: Engage with affected end users or asset owners to collect additional information, verify events … including malware, phishing, lateral movement and privilege escalation. Working knowledge of network fundamentals, windows/Linux system logs and authentication systems. Working knowledge of SIEM platforms (e.g. Microsoft sentinel, Splunk, Elastic, QRadar). Awareness of security frameworks and methodologies (NIST CSF, MITRE ATT&CK, ISO27001). #J-18808-Ljbffr ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Charles Simon Associates are currently recruiting for a Technical Cyber Security Lead for one of our key clients, a fast-growing UK business with sites across … technical lead for security. The official title is Manager, but this isn't a people management role. They will manage the outsourced SOC and SIEM providers, choose the security tools the business uses going forward, lead Cyber Essentials Plus and ISO 27001 certification, and decide whether SOC and SIEM stay ...

shift team, you will use your expertise to detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers … Endpoint, Defender for Identity, Defender for Cloud Apps), including deployment, configuration, and day‐to‐day operational management within an enterprise environment. Knowledge of SIEM and EDR/EPP technologies , with a particular focus on leveraging Microsoft Sentinel and Defender to deliver threat detection, investigation, and response capabilities. Proven ability ...

Westfield Health Cash plan & Lifestyle benefits – Discount on selected stores. Responsibilities Include Monitor information systems for malicious activity using Security Incident and Event Management (SIEM) toolsets. Prioritising according to their criticality and escalating potential or confirmed incidents. Triage and investigate security-related tickets from business users and third-party security … providers. Limiting business disruption from malicious activity by containing and eradicating malicious activity from information systems. Support the development of SIEM and SOAR solutions. Ensure all investigative activity is correctly documented in ticketing systems and followed up with the relevant support teams. Perform research on the latest security/cyber ...

Insider Risk Director. You will partner with DLP Engineering, review policies, develop detection use cases, and deliver dashboards and reporting using DLP, SIEM, and UEBA. Strong governance and cross-functional collaboration are essential. #J-18808-Ljbffr ...

Senior Security Operations Engineer (SOC Engineer L3) to join their security function. This is a highly technical role focused on SOC engineering, detection engineering, SIEM/SOAR, security automation and AI-driven security operations . You’ll design and improve security monitoring, detection, response and automation capabilities across a large … enterprise environment, with a particular focus on AI and agentic technologies . Key Responsibilities Design and optimise security monitoring, SIEM and detection capabilities . Onboard and manage security logs, including ingestion, parsing, normalisation and enrichment . Develop and tune detection rules, correlation searches and threat detection use cases . Build ...

minimum of five years' SOC experience, mentor junior staff, and contribute to rapid incident response and threat detection. This role emphasizes hands-on SIEM work (Splunk, MS Sentinel), log analysis (Wireshark), and strong knowledge of Windows and Linux systems, networking, encryption and vulnerability management. #J-18808-Ljbffr ...

Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling Help develop emerging AI/agentic security use cases What we're looking for Strong hands ...

and identifying areas for improvement. Producing DLP reports, matrices and security metrics that provide a clear picture of controls, risks and gaps. Working with SIEM and EDR technologies to investigate threats and improve detection. Reviewing vulnerabilities, prioritising risks and working with technical teams to make sure they're addressed. Supporting … that, you'll have a solid background in information or cyber security and experience across some of the following: Security Operations/incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics NIST ...

experience in system administration. Knowledge of big datatechnologies and ecosystems (e.g. Apache NiFi). Knowledge of currentmarket and emerging tools in data analytical and SIEM platforms. Knowledgeof network security implementations (e.g., IDS, IPS, EDR), including theirfunction and placement in an enterprise network. Knowledgeof intrusion detection systems and signature development. Knowledge … network architectures and technologies. Must-have experience withframeworks and technologies that support data-intensive distributedapplications. Must-have experience withmaintaining and administrating data analytical and SIEM platforms such asElastic. Must-have experience with problemsolving and analytical skills and able to collect information, analyse, report,and advise on evidence-based changes. Skillto ...

Cyber Security Analyst, you'll support and enhance our security operations capability - monitoring, detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms. What you'll do: Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review … University, including awareness and training initiatives What you'll bring: Strong understanding of security technologies and controls - endpoint protection, network security, IDS/IPS, SIEM/EDR Experience working in large, complex IT or network environments supporting critical infrastructure Knowledge of recognised security standards and risk assessment methodologies A relevant ...

Engineer to join its Security Operations Centre at the Head Office in Lutterworth. You will develop and maintain SOC tooling, including SIEM/SOAR, to define a use case-driven logging, monitoring and response capability across the organisation. The role reports to the Director of Security Operations and involves ...

opportunities to improve DLP coverage and strengthen data protection controls. Develop and enhance insider risk detection use cases, analytics, dashboards, and reporting using DLP, SIEM, UEBA, and related technologies. Support insider risk investigations by providing DLP subject matter expertise, policy guidance, reporting, and technical analysis. Develop program metrics, documentation, and … equivalent experience. Experience in data loss prevention, insider risk, cybersecurity or a related security discipline. Experience working with DLP technologies and familiarity with SIEM, UEBA, or similar security platforms. Knowledge of insider risk, data protection, cybersecurity governance, and risk management practices. Experience evaluating business risk and applying governance principles ...

similar cyber security roles. Strong understanding of security controls, detection logic, identity systems and endpoint security. Experience working directly with engineering teams (EDR, SIEM, Identity, Cloud, Networks) to embed intelligence into controls. Proven ability to convert intelligence into detection logic, engineering requirements and hardening improvements. Demonstrable experience analysing adversary … tooling, CTI feeds, enrichment tools, and automated intelligence pipelines. Ability to produce concise, actionable intelligence summaries for engineering and leadership. Experience with Microsoft Sentinel SIEM/Defender automations and logic apps to support the engineering team. About us Did you know we're a FTSE-250 retail company employing nearly ...

and the development of system signatures and the professional growth of the team. The role requires deep knowledge of cyber security, data analytics, and SIEM platforms, with a focus on #J-18808-Ljbffr ...