1 to 25 of 798 SIEM Jobs in the UK

Entra ID security concepts. Experience investigating security alerts and suspicious activity. Understanding of endpoint security, malware protection and EDR/XDR technologies. Familiarity with SIEM technologies, log analysis and security monitoring. Understanding of vulnerability management and remediation processes. Good knowledge of fundamental security concepts including least privilege, MFA, network segmentation ...

promote secure development practices. Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation. Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response. Understanding of cyber incident response, including triage, investigation, containment and recovery. Knowledge of Cyber Essentials, Cyber Essentials Plus ...

Control 7. EDR/XDR Integration: Expert‐level deployment of tools (e.g., CrowdStrike, SentinelOne) to achieve full visibility across endpoints (CIS Control 6). SIEM/SOAR: Experience designing log aggregation and automated response playbooks in platforms like Splunk, Microsoft Sentinel, or Google Chronicle to satisfy monitoring requirements (CIS Control ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

stakeholders. Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable ExperienceSecurity Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

Competitive Advantage Experience within FMCG, manufacturing, supply chain, or consumer goods environments. Hands-on experience with Microsoft Azure security technologies. Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms. Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications ...

Entra ID and/or Ping Security Operations Vulnerability management Tenable.io, Qualys and/or Rapid7 EDR/XDR CrowdStrike and/or SentinelOne SIEM/SOAR Splunk, Microsoft Sentinel and/or Google Chronicle Automated security response and monitoring Infrastructure & Network Security CIS Benchmarks Linux and Windows Server hardening ...

experienceGood knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Role Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

Experience reporting to Board‐level stakeholders. Technical Expertise Security frameworks: ISO 27001, NIST CSF, COBIT Cloud security (AWS, Azure, GCP) Identity & Access Management (IAM) SIEM, SOAR, EDR/XDR platforms Threat intelligence and vulnerability management Data protection technologies Secure SDLC and DevSecOps practices Strategic thinker with strong commercial awareness Excellent ...

understanding of network security- Firewalls etc. Solid understanding of good information security, cyber security practices and policiesHands on experience with different security platforms, including SIEM and EDR platformsBasic understanding and implementation experience with encryption technologies (SSL, PKI)Working knowledge of scripting or automation using Python, PowerShell, or similar languagesWorking knowledge ...

equivalent experience. 7+ years of experience in Security Operations, Incident Response, Cybersecurity Monitoring, or a similar security role. Technical Skills Experience working with a SIEM platform, preferably Microsoft Sentinel. Experience with at least one Endpoint Detection and Response (EDR) platform such as Microsoft Defender for Endpoint, CrowdStrike, Cortex ...

Azure, AWS or Google Cloud. Strong knowledge of identity and access management, MFA, SSO and privileged access controls. Experience with security tools including SIEM, EDR and vulnerability management platforms. Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking ...

Azure, or Google Cloud. Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls. Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools. Experience with Linux administration, system hardening, patch management, and configuration management. Experience investigating security incidents, reviewing ...

Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards. Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data-loss prevention, certificate management, or network-access control. Experience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems. ...

secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code.Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access.Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and certificationsYou will ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale). Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001. ...

systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.)You have strong experience in Information Security, Security Assurance ...

deliver staff training and guidance Provide/contribute Management Information on Information Security in the form of MI Pack. Security Operations Monitor security systems (SIEM, endpoint protection, email security, firewalls) and respond to alerts Investigate and respond to security incidents, including root-cause analysis and remediation Manage vulnerability scanning, penetration ...