26 to 50 of 57 SIEM Jobs in the North West

offers hybrid work in Greater Manchester and the opportunity to influence security strategy and automation. The ideal candidate will have hands-on experience with SIEM, EDR, IAM, WAF, and cloud security controls, plus scripting skills in PowerShell, #J-18808-Ljbffr ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

covering: CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ CompTIA Network+ CompTIA A+ Core 1 and Core 2 Practical cyber security labs and projects SOC and SIEM training Cloud security Incident response Vulnerability management CV and interview support Employment support These CompTIA certifications are internationally recognised and can support applications for roles ...

Cyber Security Lead - (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) - Permanent - Home Based Position: Technical Cyber Security Lead Location: Home Based (UK) with occasional travel Salary: £55,000 to £65,000 + strong benefits The short version: A fast ...

access controls Experience integrating Enterprise Browser platforms with: Downstream SWG Microsoft Entra ID Multi‐Factor Authentication (MFA) Conditional Access Security Information and Event Management (SIEM) platforms Strong understanding of browser‐based security architecture, enterprise endpoint security and secure access governance. Experience troubleshooting browser policy enforcement, application compatibility, authentication integration and ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

including their TTPs Experience in utilising open-source intelligence and the development of tools to assist with this Experience in conducting malware, phishing, and SIEM log analysis Knowledge of relevant cyber threat intelligence sources Demonstrated ability to manage customer relationships Proven ability to translate cyber threats to the relevant audience ...

establish and lead a new backend team responsible for several key the company products, including: The Integration Layer , which enables customers to integrate their SIEM platforms with the company data NSI , which supports engagement with criminals conducting conversational scams at scale The Web and SSL Server Survey Spam , which analyses ...

governance. Key Responsibilities Here's what you'll be doing: Perform initial triage and investigation of security incidents. Monitor security alerts and events from SIEM and other security tools. Participate in vulnerability management and patching. Maintain and update security documentation and procedures. Monitor Sec ops mailbox for alerts and triage ...

Certified Master Architect) Experience with modern frontend frameworks, in particular React Experience in a cybersecurity or managed services environment (Security Operations, Vulnerability Response, SIEM, SOC) Experience working in an agile delivery model with Jira and Azure DevOps Line management or formal technical lead experience Job Benefits Flexible Working : Balance your ...

lifecycles.### Skills & ExperienceCandidates should have hands-on experience in enterprise digital forensic investigations, endpoint and memory forensics, and log analysis using EDR telemetry and SIEM platforms. Strong knowledge of Windows internals, OS artefacts, attacker tradecraft and frameworks such as MITRE ATT&CK is expected. Experience with forensic best-practice evidence ...

and improve a dedicated SOC protecting client networks in Azure and AWS. You will work in a 24/7 shift-based environment, leveraging SIEM tools to detect and investigate security incidents, and collaborate with multiple teams. The role requires flexibility for DV/SC readiness and hybrid working where ...

Menzies LLP in Manchester is seeking an IT Security Analyst to join the IT & Innovation team. You will monitor security alerts from the SoC, investigate incidents, and help improve configurations to strengthen security across the ...

works with Technology teams, third‐party providers, and business stakeholders to reduce cyber risk and maintain policy compliance. You will help monitor SOC/SIEM outputs, participate in risk assessments, and assist with audit responses. Strong communication and a security‐minded mindset are essential for protecting information assets. #J ...

mature our overall security posture. This is a blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with … compliance. You’ll need: Substantial experience working within an Information or Cyber Security role. Strong hands-on technical capability across several areas such as: SIEM & log analysis Endpoint Detection & Response Vulnerability management AWS/cloud security Identity & Access Management Email & network security Practical experience taking a senior role in security ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Position: Technical Cyber Security Lead Location: Home Based (UK) with occasional travel Salary: £55,000 to £65,000 + strong benefits The short version: A fast … what's in place, decide what stays, what goes and what comes in, and make the case for it. You decide the SOC and SIEM model. Both are outsourced right now. Part of your brief is to work out whether that's the right setup long term or whether ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … risks and capability constraints to the Head of Cyber Defence Operations, providing clear recommendations and action plans. Skills & Experience Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

securing large-scale, cloud-based environments supporting critical public sector and government services. This is a hands-on engineering role focused on threat detection, SIEM engineering, security monitoring, log management, and SOC optimisation . You'll design and enhance detection capabilities, improve security visibility, and ensure organisations can rapidly identify … resilience while enabling faster, risk-based decision-making. What You'll Be Doing Detection Engineering & Threat Monitoring Develop, tune, and maintain detection rules across SIEM, EDR, and threat detection platforms. Create and optimise detection logic using technologies such as Splunk and endpoint security solutions. Map detections against the MITRE ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

Security Operations & Monitoring Support the day‐to‐day operation of information security controls and services. Monitor security tooling, alerts, and dashboards, including SOC and SIEM outputs. Investigate and respond to security events and incidents in line with agreed procedures. Escalate security incidents and risks to the Information Security Manager … detail. Experience working in regulated or enterprise environments. Exposure to cloud security concepts (e.g. Azure security services). Experience with security tooling such as SIEM, endpoint protection, or vulnerability management tools. Relevant education or certifications (or working towards) in information security. About Us Our benefits We offer all employees ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...

security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows, escalation paths … operations within government, defence, or critical infrastructure Previous hands on experience in Vulnerability management and incident response and security operations escalation Understanding of SIEM platforms, detection engineering, and Vulnerability alert management Familiarity with ITSM tooling, ideally ServiceNow Strong stakeholder management and reporting capability Understanding of regulated environments (MOD, HMG, Defence ...

including VPNs, VLANs, and Wi-Fi. Monitor and support servers, storage, backups, and virtual environments. Assist with patching, vulnerability remediation, endpoint security, MDR, and SIEM solutions. Support ITIL service desk processes, change management, and major incident management. Essential Skills & Experience Microsoft 365 and Entra ID administration. Intune MDM and Conditional … UniFi, Aruba, Veeam, Bitdefender, PRTG, SQL Server, MySQL, IIS, Apache, WSUS, and related technologies. Desirable ITIL Foundation. Microsoft certifications. VMware experience. Exposure to cybersecurity, SIEM, and MDR solutions. This is an excellent opportunity for a motivated IT professional looking to broaden their experience across infrastructure, cloud services, networking, and security ...