26 to 41 of 41 SIEM Jobs in the Thames Valley

Microsoft 365 & mail flow architecture - Experience working with Microsoft 365/Exchange Online, Exchange Server, SMTP routing, and mail flow architecture within enterprise environments. SIEM & incident management - Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, with strong analytical, troubleshooting, and incident management capability; PowerShell or Python Scripting ...

Investigate identity and cloud-based compromise (e.g. anomalous sign-ins, malicious OAuth consent, mailbox access), including session/token revocation Design, build and test SIEM detection rules mapped to MITRE ATT&CK, and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python … Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage Mentor junior analysts and help drive ...

including: IAM governance and lifecycle management. Joiner, Mover and Leaver process design and optimisation. Privileged Access Management (PAM). Security Information and Event Management (SIEM) platforms. Monitoring, alerting and logging solutions. DataDog and observability tooling. AWS and Azure cloud administration. SQL and advanced Excel capability. Incident, access and governance processes. ...

Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security and resilience programme. Key Responsibilities Lead the delivery of cyber security initiatives across CTI, Monitoring … milestones and governance reporting. Produce technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme ...

visits roughly every couple of weeks. No on-call rota. No clearance requirement. What you'll be doing Designing and building detection rulesets across SIEM and XDR platforms Writing and tuning detection logic in KQL, cutting false positives without losing coverage Mapping customer log sources against use cases to identify … code approach — pipelines, version control, deployment Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration: 6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

pressure and brief client leadership, up to board level, in language they can act on Run proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture … breach cases you can walk through in depth Advanced hands-on malware analysis capability, spanning behavioural analysis and reverse engineering Deep expertise across enterprise SIEM platforms and EDR tooling (CrowdStrike knowledge a strong advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud ...

Lorien is seeking a SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content ...

Harvey Nash is now inviting candidates to apply for the role of SIEM Engineer, candidates applying must have valid Security clearance. Inside of IR35/Umbrella only Daily Rate - of £500 - £700 depending on experience Duration - 6 months Location - UK wide This role provides specialist engineering expertise to support ...

Harvey Nash is now inviting candidates to apply for the role of SIEM Engineer, candidates applying must have valid Security clearance. Inside of IR35/Umbrella only Daily Rate - of £500 - £700 depending on experience Duration - 6 months Location - UK wide This role provides specialist engineering expertise to support ...

Harvey Nash is now inviting candidates to apply for the role of SIEM Engineer, candidates applying must have valid Security clearance. Inside of IR35/Umbrella only Daily Rate - of £500 - £700 depending on experience Duration - 6 months Location - UK wide This role provides specialist engineering expertise to support ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Required - Extensive IAM experience including Joiner-Mover-Leaver process design and improvement. Strong understand of Privileged Access Management and Security Information and Event Management (SIEM) platforms. Experience of logging and monitoring solutions Further technical skills to include - SQL, incident management, DataDog (or similar), Cloud environments Stakeholder management across Technology, Risk ...

/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires strong stakeholder engagement, governance reporting, and experience delivering security projects in complex environments. #J ...