176 to 186 of 186 SIEM Jobs in the South East

Lorien is seeking a SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content ...

Lorien is seeking a SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and … programmes within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

tenancy, virtualisation, containers, encryption, key and secrets management, AI runtime and threat modelling. Design IAM solutions, including identity providers, SSO, RBAC and MFA. Define SIEM/SOAR architecture and detailed designs for logging, correlation, playbooks and incident response. Review and validate Bills of Materials for security, IAM and SIEM/… SOAR Key Experience: Strong Security Architecture experience within complex enterprise environments Experience across network security, IAM, SIEM/SOAR and threat modelling Strong understanding of EPP, DLP, encryption, containers and cloud or infrastructure security Ability to produce high-level and detailed technical designs If this sounds like a good ...

Required - Extensive IAM experience including Joiner-Mover-Leaver process design and improvement. Strong understand of Privileged Access Management and Security Information and Event Management (SIEM) platforms. Experience of logging and monitoring solutions Further technical skills to include - SQL, incident management, DataDog (or similar), Cloud environments Stakeholder management across Technology, Risk ...

/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires strong stakeholder engagement, governance reporting, and experience delivering security projects in complex environments. #J ...

/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires strong stakeholder engagement, governance reporting, and experience delivering security projects in complex environments. #J ...

incidents. Acting as the senior technical escalation point within the SOC. Managing incidents from detection through to containment, remediation and recovery. Driving improvements across SIEM, EDR, detection engineering and automation. Proactively hunting for threats and identifying opportunities to strengthen customer environments. Mentoring junior analysts and helping raise the technical capability … What they're looking for: 5+ years' experience within a SOC, MSSP or Incident Response environment. Proven experience leading complex cyber security incidents. Strong SIEM and EDR knowledge (CrowdStrike experience would be a real advantage). Threat hunting, malware analysis and digital forensics experience. A solid understanding of attacker methodologies ...