1 to 25 of 61 SIEM Jobs in the South West

Strong knowledge of network security, identity & access management, endpoint protection, and cloud security (Azure preferred but will also consider AWS) Hands-on experience with SIEM technologies (e.g. Microsoft Sentinel and/or Defender) Azure security posture management, including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling ...

learning.Minimum qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

secure environments (e.g. defence, air-gapped)Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, identity, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesHardware Security Modules (HSMs) (e.g. Thales)Cross-domain/secure communications environmentsAutomation of certificate management ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

defence environmentsDesirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

enterprise/defence environments Desirable: VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

within secure/enterprise/defence environmentsDesirable: VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

within secure/enterprise/defence environmentsDesirable:VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar) Data diode/one-way transfer architectures Integration with security tooling (SOC, SIEM, monitoring platforms) Performance and throughput optimisation for secure data transfer systems Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Hands ...

Desirable: Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar)Data diode/one-way transfer architecturesIntegration with security tooling (SOC, SIEM, monitoring platforms)Performance and throughput optimisation for secure data transfer systemsExpertise with cloud platforms (AWS, Azure) and Infrastructure as CodeHands-on use of DevSecOps tools ...

within secure/enterprise/defence environmentsDesirable: VCAP certifcationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

within secure/enterprise/defence environmentsDesirable:VCAP certifcationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

used to address problems and realise opportuni ties.Strong understanding of cloud networking and architecture principles, Identity and access management models, security monitoring and SIEM integra tion.Proven hands-on experience of at least two cloud environments inclu din g:AWSMicrosoft AzureVMware Cloud Found ationGoogle CloudExperience securing multi-cloud or hybrid environments ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...