25 of 25 SIEM Jobs in Northern Ireland

operations, threat detection, vulnerability management, cloud security and security engineering to strengthen the organisation's posture. You will monitor and respond to incidents, manage SIEM/EDR, and collaborate with network teams to remediate risks while supporting Microsoft 365 and Azure security. This permanent role offers hybrid working and development ...

vendor/third-party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

stakeholder communication skills. Exposure to technologies or environments involving Microsoft 365, cloud and on-premise infrastructure, Active Directory, firewalls, WAN, SD-LAN/WLAN, SIEM or wider security tooling would be beneficial. NIST or ISO 27001 awareness would also be advantageous. To speak in absolute confidence about this opportunity please ...

ISO27001 information security frameworks. Knowledge of Microsoft 365, Cloud and On-Prem Server Platforms, Active Directory, Firewalls, WAN/SD-LAN/WLAN/SIEM/DSPM technologies and EUD Management. #J-18808-Ljbffr ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues. You will support the initial implementation … type and severity. Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Stakeholder and Client Reporting, and engagement Assist in architectural design to facilitate the onboarding ...

means managing live incident containment and day‐to‐day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Why consider joining our Digital & Data community? Join our Digital & Data team and work alongside cyber … their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat‐detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

Practical experience with network segmentation, firewalls, and secure remote access in OT environments Hands‐on experience with security tools across both domains: SIEM, IDS/IPS, vulnerability scanners, and OT‐specific platforms, such as Claroty, Dragos, Nozomi, or similar platforms Familiarity with relevant security frameworks and standards, like … Azure, GCP) Knowledge of safety systems (SIS) and safety-security integration challenges Prior experience in control systems engineering, automation, or industrial operations Experience with SIEM integration for OT environments and security log analysis Master’s or a PhD degree in a relevant technical field The Company At ANGOKA, our mission ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

security engineering in cloud environments and CSPM/DLP capability development. You'll design, build, and operate cloud-native security controls, integrate with SIEM, CI/CD, and collaborate with platform teams and product managers to strengthen security across cloud workloads. #J-18808-Ljbffr ...

Doing Monitor, investigate and respond to security alerts, incidents and potential threats across the organisation. Manage and improve security technologies including SIEM, EDR, Microsoft Defender and vulnerability management platforms. Identify vulnerabilities and work with infrastructure/network teams to implement appropriate remediation. Support the security of Microsoft 365, Azure, endpoints … related field of study 3+ years' experience in Cyber Security, Security Engineering, SOC or a similar technical security role. Hands-on experience with SIEM, EDR, vulnerability management and security monitoring technologies. Strong knowledge of Microsoft Security, Azure/M365, networking and identity security. #J-18808-Ljbffr ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generatehigh‐qualitysignals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and response mechanisms … automated remediation. Experience with data classification, data handling, or data protection strategies that support DLP incloud‐hostedsystems. Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response. Hands‐oninvolvement in incident response orpost‐incidentanalysis from an engineering perspective (e.g., improving detections, controls, or recovery ...

systems as part of a team on a rotating 24 x 7 x 365 basis. Your background should include exposure to security technologies including SIEM/EDR, firewalls, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority … report on anomalous behaviour. Determines and directs Advanced remediation and recovery efforts (with assistance from tooling and/or Level 2) Investigate alerts using SIEM, data visualisation, pattern analysis and automation. Solid cyber security skills including SIEM Have the drive to dive deep into issues Ability to identify security threats ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services* Integrate cloud security controls with SIEM and security tooling to generate high‐quality signals for detection, investigation, and incident response* Support incident handling and response by engineering detection logic, automation, and … Experience with data classification, data handling, or data protection strategies that support DLP in cloud‐hosted systems.* Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response.* Hands‐on involvement in incident response or post‐incident analysis from an engineering perspective (e.g., improving detections ...

responders within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities. You’ll work across sectors, advise on tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with ...