1 to 25 of 38 SIEM Jobs in Scotland

something you automated, what it replaced, and what it saved. Security control operation. Operating and improving security controls across areas such as endpoint protection, SIEM, vulnerability management, identity and access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

information exchange and trusted data transfer mechanisms. Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure. Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments. Infrastructure & Engineering Advanced PowerShell scripting ...

NIST SP 800‐82, NIST CSF, CIS Controls, or NCSC OT security guidance. Familiarity with OT‐specific technologies, protocols, or vendors. Experience with SIEM, EDR, PAM, patch‐management, or asset‐discovery platforms. Scripting skills using PowerShell, Python, or Bash. Experience supporting regulated, defence, energy, utilities, manufacturing, transport, or critical national ...

documentation, risk management, reporting, and security assurance capabilities. Desirable Experience Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001, or equivalent standards. Experience with SIEM, OT security monitoring, vulnerability management, asset discovery, and endpoint security technologies. Relevant certifications such as CISSP, CISM, GICSP, or IEC 62443. Experience coordinating multi-stakeholder ...

IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework ...

autonomously. Experience with incident response, change management, governance processes and cyber resilience activities. Professional certifications such as CISSP or CISM, along with experience of SIEM/SOAR technologies would be advantageous. Applicants must be eligible to obtain UK Security Clearance. What’s in it for you As well ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

Provides input and support to operational projects related to cyber security Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Experience of delivering/supporting cloud focused security solutions with a solid understanding of current cyber threats (essential) Strong cyber ...

relevant industry certifications (e.g. CySA+, Security+) and risk management knowledge (essential) Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Self-motivated with a willingness to go the extra mile to achieve important goals (essential) Excellent verbal and written communication ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have: Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

delivering real-world impact and working alongside talented colleagues who care deeply about quality, collaboration and customer success. About the Role: As an OT SIEM Engineer, you will play a key role in strengthening cyber security monitoring and threat detection capabilities across complex enterprise and Operational Technology (OT) environments, with … particular focus on Microsoft Sentinel. This is a hands‐on engineering role where you will support the development and enhancement of SIEM capabilities, integrating security telemetry, developing detection content and implementing automation to improve security operations. You'll work closely with Cyber Defence and Security Operations teams, helping to deliver ...

handling incident remediation and guiding both technical and non-technical teams with security best practices. The ideal candidate brings cloud security expertise, familiarity with SIEM/SOAR/EDR tools, and knowledge of frameworks like NIST/ISO. Willingness to obtain required UK clearance is essential. #J-18808-Ljbffr ...

Capgemini in the UK is seeking a Security Incident Management Analyst to detect, investigate, and respond to threats across government and commercial clients. You’ll monitor security systems, log incidents, and ensure tool health, collaborating ...

initial triage of events and incidents; Support the operation and administration of the security stack, including endpoint protection, vulnerability management, email security, cloud security, SIEM/SOC integrations and secure access controls; Assist with vulnerability review, prioritisation, remediation tracking and reporting across servers, endpoints, cloud services and network infrastructure; Support … technical role; Monitoring, triaging and escalating security alerts, incidents or vulnerability findings; Using or supporting common security tools such as endpoint protection, vulnerability management, SIEM/SOC tooling, email security, identity protection, web security or cloud security platforms; Supporting Microsoft Windows, Windows Server, Microsoft Azure, Microsoft 365, Active Directory ...

and shape the capabilities to protect critical assets. You will drive improvements in security monitoring, enable AI-aware operations and ensure effective use of SIEM/EDR/SOAR tools while aligning with risk governance and budgets. #J-18808-Ljbffr ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

rack layout), or willingness to work closely with facilities teams on this Working knowledge of PowerCLI or equivalent VMware automation/Scripting Awareness of SIEM and security monitoring tooling (eg LogRhythm, SolarWinds, Nozomi) from an infrastructure-hosting perspective, without needing to own the tools Contract Details Duration: 6 months Rate ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software-defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

control validation and emerging technologies including AI.## Responsibilities* Design, build, configure and maintain security platforms and protective controls across our technology environment, including XDR, SIEM, SOAR, cloud security and vulnerability management capabilities.* Develop security tooling, integrations and automation using APIs, scripting, SOAR and other engineering approaches, turning repetitive or manual … management, privileged access, secrets management and associated access-control technologies.* Security platforms, including, Endpoint and XDR technologies, particularly CrowdStrike, as well as experience with SIEM, SOAR and other security platforms.* Automation and integration skills including scripting or development using PowerShell, Python, Bash or similar, API-based integrations and Infrastructure ...

ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause … Cyber Security Analyst: Proven experience in a Senior Cyber Security Analyst, Security Operations Analyst, or equivalent technical security role Strong hands-on experience with SIEM technologies, threat detection, security monitoring, and incident response Experience with security technologies including firewalls, endpoint detection and response (EDR), DLP, and vulnerability management tools Demonstrable ...

with a focus on understanding attack paths and mitigations and a strong understanding of security operations, incident response, and detection engineering Excellent understanding of SIEM, IAM and DLP programmes and technologies and expertise in applying operational security requirements in Zero Trust networks Knowledge and experience of managing operational security ...

actively shaping the security posture of organizations that matter. This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment. If you are successfully offered this position, you will go through a series … with incident, problem, or change management. Understanding of security principles and best practices. Strong communication and multitasking skills. Nice-to-Have Skills: Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel). Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS). Certifications like CompTIA Security+, Splunk ...