176 to 200 of 347 SIEM Jobs in the UK excluding London

commercial enterpriseExperience working with and relationships across financial services, manufacturing, retail or CPG, healthcare, or energy or utilities marketKnowledge of modern security stack, including SIEM/SOAR, EDR/XDR, IAM, data security, or cloud security, and where AI is being adopted across itKnowledge of emerging AI-security topics, including ...

A leading cybersecurity firm in the UK is seeking a Senior Security Engineer to join their Managed Security Service Provider team. The role involves driving Sentinel adoption, leading client onboarding, and developing custom data connectors. ...

technical security infrastructure and policies.Develop technical solutions and new security toolsets to mitigate security vulnerabilities and automate repeatable tasks.Build, implement and tune SIEM event correlation rules/logic, and content, to filter out security events associated with known network behaviour, known false positives and/or known errors.Build, implement and ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

Conditional Access) Azure IaaS and networking (VPN Gateway, routing, connectivity design) Strong working knowledge of: Enterprise networking (routing, switching, firewalls) Security operations, logging, and SIEM integration Proven experience leading engineering teams across infrastructure/network/security transformations Strong data handling capability, including advanced Excel for engineering control and analysis ...

bear in a tailored response to a major incident.Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.“Nice To Have” Skills and Experience:BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer ...

Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk ...

mature SOC Knowledge of Service Management tools, such as: CRM, Salesforce, Confluence, Power apps, Microsoft 365Solid understanding of cyber security concepts, including SIEM, EDR, XDRStrong team playerAbility to work under pressure, handling escalations calmly and competentlyAbility to use initiative and work independentlyOrganised and professional with the ability to multi-taskExcellent ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

client environments. CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from … access models. Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues.You will support the initial implementation and … type and severity.• Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. • Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization.• Stakeholder and Client Reporting, and engagement• Assist in architectural design to facilitate the onboarding ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...

challenge assumptions, influence stakeholders, and work with engineering and operations to embed security into delivery pipelines, with a focus on AWS, IAM, data protection, SIEM, and incident response. #J-18808-Ljbffr ...

service documentation and reports. Experience working around cyber security services or SOC environments would be particularly useful, with an understanding of technologies such as SIEM, EDR or XDR beneficial. Experience with tools such as Microsoft 365, Salesforce, Confluence or Power Platform would also be advantageous. About ...

and improve a dedicated SOC protecting client networks in Azure and AWS. You will work in a 24/7 shift-based environment, leveraging SIEM tools to detect and investigate security incidents, and collaborate with multiple teams. The role requires flexibility for DV/SC readiness and hybrid working where ...

systemsExperience with one or more of the following areas Administering or deploying monitoring and observability tools such as CheckMK, Prometheus or ZabbixAdministering or deploying SIEM tools such as Elastic Security, Splunk or Trellix ESMWorking with dashboarding and visualisation tools such as Kibana or GrafanaPreferredAnsible automation experienceKnowledge of monitoring networking equipment ...

and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven service modelling. Infrastructure-as-code and pipeline automation (Terraform, CI/CD) for platform ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...