151 to 175 of 186 SIEM Jobs in the South East

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

security ensuring integrity and security of networks; Good working knowledge & experience of Cisco Firewalls, Routers& Switches Compliance standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen Testing tools Vulnerability Management Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks … years multi network exposure including hands on experience of designing and managing secure networks including the following systems: Cisco Firewalls, Routers, Switches Juniper platforms SIEM tools IDS/IPS Penetration testing (PEN Testing) Computer Forensic tools ISO27001 & GDPR knowledge Ability to communicate network security issues to peers and management Ability ...

Cyber Security Engineer: Develop and maintain information security plans, policies and procedures Implement and manage security controls across internal and customer networks Monitor SIEM platforms, IDS/IPS systems and other security tools for threats and vulnerabilities Investigate and resolve cyber security incidents and security alerts Carry out vulnerability assessments … continual security improvement initiatives Some of the technologies and platforms you may be working with include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS/IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL Qualifications and requirements for the Cyber Security Engineer: Strong ...

Investigate identity and cloud-based compromise (e.g. anomalous sign-ins, malicious OAuth consent, mailbox access), including session/token revocation Design, build and test SIEM detection rules mapped to MITRE ATT&CK, and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python … Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage Mentor junior analysts and help drive ...

and physical layers) in collaboration with other design team members. Support the design of a range of security tools, such as:Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate. Understand and leverage BAE Systems experience, IP and expertise, with support of product and subject matter … Policy and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. ...

bold, but will have crossover into other areas:Threat & Exposure Management (eg. Red Teaming, Penetration Testing, CTEM, VM, OT)Security Operations and Governance (eg. SIEM, GRC, TPRM, Workshops and Assessments)Identity and Access Management (eg. PAM, PIM, NHI, ITDR, MFA, SSO)DataCentre and Cloud Security (eg. CNAPP, Micro-Segmentation, CSPM … and scoping sessionsDESIRABLEStrong written and verbal communication skillsESSENTIALAwareness of industry frameworks and regulations applicable to the UK and EU marketESSENTIALUnderstanding of security operating models, SIEM or SOC conceptsDESIRABLECORE COMPETENCIES & SKILLS – BASED ON POSITION AND GRADE CompetencyDescriptionTechnical JudgementAbility to make sound scoping and design decisions across aligned Security portfolioDESIRABLECustomer EngagementConfident leading ...

This role will focus primarily around the two areas below in bold, but will have crossover into other areas: Security Operations and Governance (eg. SIEM, GRC, TPRM, Workshops and Assessments) Identity and Access Management (eg. PAM, PIM, NHI, ITDR, MFA, SSO) DataCentre and Cloud Security (eg. CNAPP, Micro‐Segmentation, CSPM … and verbal communication skills ESSENTIAL Awareness of industry frameworks and regulations applicable to the UK and EU market ESSENTIAL Understanding of security operating models, SIEM or SOC concepts DESIRABLE CORE COMPETENCIES & SKILLS – BASED ON POSITION AND GRADE Competency Description Technical Judgement Ability to make sound scoping and design decisions across ...

and support cloud, on-premises VM, and container-based hosting. Design and configure network security devices, routers, switches, VLANs, DNS, and identity management. Lead SIEM onboarding activities, ensuring solutions support high data ingest rates. Develop test procedures covering functional and non-functional requirements. Maintain requirements and user stories, ensuring traceability … technical engineering, SOC deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ...

and accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and … Agile, Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability ...

including: IAM governance and lifecycle management. Joiner, Mover and Leaver process design and optimisation. Privileged Access Management (PAM). Security Information and Event Management (SIEM) platforms. Monitoring, alerting and logging solutions. DataDog and observability tooling. AWS and Azure cloud administration. SQL and advanced Excel capability. Incident, access and governance processes. ...

will be responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS/IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements. … colleagues and contribute to ongoing security improvements. The Role: Design, implement and maintain network security solutions across internal and customer systems Monitor security tools (SIEM, IDS/IPS) and respond to incidents and vulnerabilities Provide third-line support and act as a key escalation point for security issues Develop and ...

Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security and resilience programme. Key Responsibilities Lead the delivery of cyber security initiatives across CTI, Monitoring … milestones and governance reporting. Produce technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme ...

Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security and resilience programme. Key Responsibilities Lead the delivery of cyber security initiatives across CTI, Monitoring … milestones and governance reporting. Produce technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme ...

process, technology and infrastructure. Work across the full lifecycle from concept and architecture through to deployment and operation. Design and support security tooling across SIEM, SOAR, EDR, vulnerability management and threat intelligence. Engage with senior stakeholders to define security and accreditation requirements. Assess existing security capabilities and identify opportunities … address complex requirements. What were looking for Strong experience in SOC architecture and security operations. Hands-on knowledge of at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence. Strong understanding of cloud and on-premise security architecture. Experience with security best practices including least privilege, encryption and ...

design, implementation and improvements to existing environments. The role will give you the opportunity to work across a broad range of security capabilities, including SIEM, SOAR, EDR, vulnerability management and threat intelligence, while considering how these technologies fit within wider people, process and service requirements. You’ll also be expected … Proven experience in SOC Architecture, Security Architecture or Cyber Security Architecture Experience designing and implementing SOC capabilities Strong knowledge of security technologies such as SIEM, SOAR, EDR, vulnerability management and/or threat intelligence Understanding of how to build secure, scalable and resilient architectures Experience working with both cloud and ...

visits roughly every couple of weeks. No on-call rota. No clearance requirement. What you'll be doing Designing and building detection rulesets across SIEM and XDR platforms Writing and tuning detection logic in KQL, cutting false positives without losing coverage Mapping customer log sources against use cases to identify … code approach — pipelines, version control, deployment Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration: 6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

designs. Lead solution architecture across the full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure … Architect/Security Architect in complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise ...

security technologies including Mimecast, Netskope and CyberArk . Investigating and responding to security alerts and incidents. Working alongside the firm's external SOC/SIEM provider. Maintaining security documentation and evidence. Supporting the organisation's ISO 27001 certification programme. Assisting the Lead Cyber Engineer with security projects and improvements. Helping … particularly interested in candidates who have: Good knowledge of cybersecurity and security operations. Experience investigating security alerts, incidents or vulnerabilities. Exposure to SIEM and security monitoring . Experience with technologies such as Mimecast, Netskope, CyberArk, PAM or similar . Strong analytical and problem-solving skills. A collaborative approach and willingness ...

centre of that growth. This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps … architecture Strong understanding of SOC operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

and improve security platforms controlling privileged access, credentials and administrative activity across critical infrastructure. There is also a requirement within the team for Elastic SIEM capability, so if you have strong Elastic experience alongside your security engineering background, that would also be relevant. The role You'll work across identity … group access. Monitoring privileged sessions and investigating failed authentication activity. Maintaining, patching and upgrading security platforms. Reviewing audit logs and integrating security events with SIEM tooling. Troubleshooting firewalls, load balancers and connectivity issues. Key experience Hands-on Security Engineering within complex environments. Privileged Access Management (PAM) or identity security solutions. ...