151 to 175 of 314 SIEM Jobs in the UK excluding London

implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder ...

telemetry uplift. Minimum Qualifications Experience in detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience ...

experience, or a strong infrastructure background, looking to develop further within security operations. Key Responsibilities Monitor, triage, and respond to security incidents using SIEM tools such as Microsoft Sentinel Investigate and resolve alerts, escalating where necessary Manage and maintain SOC tools, configurations, and updates Follow ITIL-based processes for incident … Analyst), or willingness to achieve during probation Other certifications such as Security+ are beneficial Ability to obtain Security Clearance (SC) Desirable Skills Experience with SIEM tools such as Graylog Scripting or programming (PowerShell, Python, etc.) Knowledge of hybrid AD/Entra ID environments Exposure to Cloudflare or similar technologies ITIL ...

A leading cybersecurity firm in the UK is seeking a Senior Security Engineer to join their Managed Security Service Provider team. The role involves driving Sentinel adoption, leading client onboarding, and developing custom data connectors. ...

technical security infrastructure and policies.Develop technical solutions and new security toolsets to mitigate security vulnerabilities and automate repeatable tasks.Build, implement and tune SIEM event correlation rules/logic, and content, to filter out security events associated with known network behaviour, known false positives and/or known errors.Build, implement and ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

Conditional Access) Azure IaaS and networking (VPN Gateway, routing, connectivity design) Strong working knowledge of: Enterprise networking (routing, switching, firewalls) Security operations, logging, and SIEM integration Proven experience leading engineering teams across infrastructure/network/security transformations Strong data handling capability, including advanced Excel for engineering control and analysis ...

bear in a tailored response to a major incident.Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.“Nice To Have” Skills and Experience:BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer ...

Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk ...

mature SOC Knowledge of Service Management tools, such as: CRM, Salesforce, Confluence, Power apps, Microsoft 365Solid understanding of cyber security concepts, including SIEM, EDR, XDRStrong team playerAbility to work under pressure, handling escalations calmly and competentlyAbility to use initiative and work independentlyOrganised and professional with the ability to multi-taskExcellent ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

client environments. CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from … access models. Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues.You will support the initial implementation and … type and severity.• Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. • Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization.• Stakeholder and Client Reporting, and engagement• Assist in architectural design to facilitate the onboarding ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

challenge assumptions, influence stakeholders, and work with engineering and operations to embed security into delivery pipelines, with a focus on AWS, IAM, data protection, SIEM, and incident response. #J-18808-Ljbffr ...

and improve a dedicated SOC protecting client networks in Azure and AWS. You will work in a 24/7 shift-based environment, leveraging SIEM tools to detect and investigate security incidents, and collaborate with multiple teams. The role requires flexibility for DV/SC readiness and hybrid working where ...

systemsExperience with one or more of the following areas Administering or deploying monitoring and observability tools such as CheckMK, Prometheus or ZabbixAdministering or deploying SIEM tools such as Elastic Security, Splunk or Trellix ESMWorking with dashboarding and visualisation tools such as Kibana or GrafanaPreferredAnsible automation experienceKnowledge of monitoring networking equipment ...

and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven service modelling. Infrastructure-as-code and pipeline automation (Terraform, CI/CD) for platform ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...