76 to 97 of 97 SIEM Jobs in the South East

guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance … read and write IAC (Terraform) code, comfortable with IAC lifecycles Familiarity with container security and Kubernetes Understanding of secure coding, penetration testing techniques, SIEM, and vulnerability management Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing ...

experience in Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with security testing, attack … Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity ...

using automation, scripting and best practice. Ensure detections are clearly documented and operationally usable. What youll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding … SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/ ...

Management (SIEM) platforms, with a focus on enhancing detection capabilities and proactively identifying threats. Key Responsibilities: Detection Engineering: Design, develop, and optimise security detections across both SIEM platforms Continuously improve detection rules to enhance coverage and reduce false positives Threat Hunting: Conduct proactive threat hunting activities across both SIEM environments … incidents Act as an escalation point for security-related issues within the IM process Key Skills and Experience: Strong hands-on experience with enterprise SIEM platforms (multi-SIEM environments preferred) Proven capability in detection rule creation and tuning Demonstrated experience in proactive threat hunting methodologies Deep understanding of incident response ...

SIEM Engineer - (Havant/Reading/Hybrid) - Inside IR35 Day Rate - up to £700 Duration - 6 months Harvey Nash's Client have a requirement for a SIEM Engineer, you must be SC Cleared to commence this post. You will support the team in: Lead onboarding and integration of log sources … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

satellite communications and maritime technology sector. Duties and responsibilities of the Cyber Security Engineer: Develop and maintain information security policies, procedures and standards. Monitor SIEM, IDS/IPS and security monitoring tools, investigating and resolving cyber security incidents. Design, build, implement and support secure network solutions across internal and customer … Support colleagues with cyber security advice, training and best practice. Technologies you will work with include: Cisco Firewalls, Routers and Switches. Juniper networking platforms. SIEM and IDS/IPS solutions. Vulnerability Management and Penetration Testing tools. Computer Forensic tools. ISO27001, ITIL and GDPR. Qualifications and requirements: Minimum 5 years' experience ...

serviceswhile helping to shape and develop our cyber offering. What Youll Be Doing Analysing security alerts and detections from SOC tools, including SIEM Working with automation and playbooks using SOAR tools Implementing mitigation and remediation activities following cyber incidents Supporting the efficiency and effectiveness of SOC operations Contributing … What Were Looking For Essential Skills & Experience Strong understanding of advanced cyber security concepts Experience working in SOC or cyber advisory environments Knowledge of SIEM technologies and security monitoring Understanding of malware concepts and cyber risk management Ability to communicate complex technical findings to stakeholders Desirable Scripting experience (Python ...

Analyst to its Security Operations team. This is a great opportunity for someone with experience investigating security alerts, responding to incidents and working with SIEM and EDR technologies in a fast-paced environment. What you'll be doing: Monitoring and investigating security alerts and incidents. Triaging and responding to security … response activities. Improving detection rules and SOC processes. Producing incident reports and documentation. What we're looking for: Previous SOC Analyst experience. Experience with SIEM platforms such as Sumo Logic, Splunk, Sentinel or QRadar. Exposure to CrowdStrike or similar EDR technologies. Good understanding of networking fundamentals (TCP/ ...

security monitoring strategy and best practice. What you will bring: Proven experience deploying and managing Splunk at enterprise scale. Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning. Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning … experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation. Strong problem-solving skills and a proactive approach ...

Cyber Consultant to help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned … MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge of MITRE ATT&CK and ...

will be responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS/IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements. … colleagues and contribute to ongoing security improvements. The Role: Design, implement and maintain network security solutions across internal and customer systems Monitor security tools (SIEM, IDS/IPS) and respond to incidents and vulnerabilities Provide third-line support and act as a key escalation point for security issues Develop and ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Senior Network and Security Engineer - L2/L3 Network Infrastructure - Cyber Security - SIEM tools My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

optimise the Palo Alto firewall estate Support core networking (LAN/WAN, Wi-Fi, remote access, load balancing) Monitor and respond to security incidents (SIEM/EDR) Improve network security, segmentation, and resilience Manage vulnerability scanning and patching (Qualys) Lead and contribute to network and security projects Produce clear, accurate … technical documentation Tech Stack Palo Alto | Cisco (L2/3) | Aruba | SIEM | EDR | Qualys What We're Looking For Minimum 5 years' experience in networking (essential) Strong hands-on experience with networking fundamentals and technologies (Cisco, LAN/WAN) Exposure to security tools or environments (SIEM, EDR, vulnerability management ...

Zero Trust and secure-by-design principles Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR Assess and optimise client Defender XDR and Sentinel configurations, producing detailed remediation and maturity roadmaps aligned … and MITRE ATT&CK best practices Advise on Defender XDR, Sentinel, and Entra ID integration to enable holistic security visibility, supporting migrations from Legacy SIEM platforms such as Splunk Collaborate with SOC and Incident Response teams during escalated incidents, rapidly onboarding critical assets and integrating key data sources for containment ...

/Unix servers, network devices and applications to the PAM platform Configure Just-in-Time (JIT) access workflows and approval processes Integrate PAM with SIEM tools for monitoring and alerting Manage platform upgrades, patching and ongoing health monitoring Troubleshoot connector issues and session failures Maintain technical documentation and support audit … credential vaulting, password rotation and privileged access workflows Experience onboarding systems into PAM platforms Strong understanding of Active Directory privileged account management Experience with SIEM integration Ability to obtain SC level security clearance If this sounds like a role for you please apply with an up to date version ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

service portfolio and delivering those services to end clients. Responsibilities include: Security Portfolio Development Support the definition and development of Security Services portfolio: MDR, SIEM, Identity, Compliance, and AI SOC Help productise security services with clearly defined scope, SLA, and pricing Contribute to the security attach strategy Assist in developing … Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA ...

supporting a portfolio of customers across multiple sectors. You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and … help mature playbooks and runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs ...

supporting a portfolio of customers across multiple sectors. You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and … help mature playbooks and runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs ...

Network Engineer/Network Analyst - Cisco, CCNP, LAN/WAN, SD-WAN, CheckPoint, Zscaler/NetScaler, Cisco ISE, Meraki WiFi, SIEM, BAU/Projects. 12 Month FTC. London Hybrid. c.£70k-£80k + Oncall + Bonus + Excellent Benefits Global Law Firm seeks an experienced Network Support Engineer to join … and network security technologies. Knowledge of load balancing, VPNs, Wi-Fi and DDoS mitigation. Solid BAU experience, problem identification and resolution Experience with SIEM platforms, threat prevention and secure network design. Experience with Business Continuity, Disaster Recovery and IT Infrastructure projects. CCNP certification (or equivalent) and strong understanding of ITIL ...