1 to 25 of 57 SIEM Jobs in the North West

promote secure development practices. Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation. Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response. Understanding of cyber incident response, including triage, investigation, containment and recovery. Knowledge of Cyber Essentials, Cyber Essentials Plus ...

deliver staff training and guidance Provide/contribute Management Information on Information Security in the form of MI Pack. Security Operations Monitor security systems (SIEM, endpoint protection, email security, firewalls) and respond to alerts Investigate and respond to security incidents, including root-cause analysis and remediation Manage vulnerability scanning, penetration ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions. Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms. Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

incident calmly under pressure, and when to ask for help. Experience with cloud environments, particularly AWS and familiarity with vulnerability scanners, endpoint protection, and SIEM tooling are important. An awareness of UK data protection requirements and frameworks such as Cyber Essentials or ISO 27001 is a plus. Solid general ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

security risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and … Engineer, Cloud Security Engineer, Infrastructure Security Engineer, or similar role. Strong understanding of modern cyber security principles and security architecture. Hands-on experience with: SIEM and Security Monitoring platforms Endpoint Detection and Response (EDR) Vulnerability Management solutions Identity and Access Management (IAM) Network Security technologies Web Application Firewalls (WAF) Security ...

networking, and common business tools matter too, since you will be the one keeping the office running. Familiarity with vulnerability scanners, endpoint protection, and SIEM tooling is important, and an awareness of UK data protection requirements and frameworks such as Cyber Essentials or ISO 27001 is a welcome bonus. ...

security risk assessments and producing risk-based recommendations Experience developing security monitoring strategies, threat detection requirements and security use cases Hands-on exposure to SIEM tooling — Splunk preferred, though Sentinel, Elastic Security, CrowdStrike or similar are acceptable Excellent workshop facilitation and stakeholder engagement skills Strong report writing, documentation and presentation ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

essential Experience in any of the following would strengthen your application: Terraform or cloud security automation. Cloud architecture or security design reviews. SIEM and cloud security monitoring. Security assurance or compliance. Highly regulated or security-sensitive environments. Cyber Essentials or ISO 27001 environments. AWS or broader security certifications. ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

and Active Directory integration* Experience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco Duo* Experience supporting both BAU operations and project-based delivery within complex enterprise environments.* Strong troubleshooting and root-cause ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

response, and managed security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

engineering experience. Advanced Python development skills including REST APIs, JSON processing, testing and debugging. Experience developing and maintaining production Splunk SOAR playbooks. Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows. Experience using Git and software development best practices. Strong understanding of SOC operations and incident ...

security design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation ...

NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/IPS, DLP, IAM, and encryption, and you stay current with emerging threats and technologies. Certifications such as CISSP, CCSP, CISM, or TOGAF ...

protect infrastructure, applications, and data. Partnering with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments … cyber security and platform engineering such as networking, Cloud security, CI/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...