226 to 250 of 403 SIEM Jobs in the UK excluding London

Group is seeking a Senior Security Analyst to join its global Security Operations Centre. You will monitor, investigate and respond to security alerts across SIEM, EDR and cloud environments, helping to detect threats and coordinate containment. You will develop detection rules, conduct threat hunting, and produce incident reports while collaborating ...

processes, with a focus on security risks and mitigations.* Deep knowledge of technical details, integration, and functions of security tools and platforms (e.g., IAM, SIEM, vulnerability management, cloud security).* Evaluating potential system enhancements and upgrades, influencing the security product roadmap.* Identifying and implementing process improvements and product simplification opportunities ...

and shape the capabilities to protect critical assets. You will drive improvements in security monitoring, enable AI-aware operations and ensure effective use of SIEM/EDR/SOAR tools while aligning with risk governance and budgets. #J-18808-Ljbffr ...

AJ Bell is seeking a Security Monitoring & Detection Engineering Lead to own the architecture and engineering of our monitoring estate, focusing on Microsoft Sentinel and threat detection. You will lead complex investigations, incident response and ...

Security function from the ground up. We seek a Cyber Security Analyst to monitor, detect, and respond to threats across our digital estate using SIEM, EDR/XDR and related platforms. You will lead or support end-to-end incident response, run proactive threat hunting, and develop detection playbooks. ...

processes, with a focus on security risks and mitigations. Deep knowledge of technical details, integration, and functions of security tools and platforms (e.g., IAM, SIEM, vulnerability management, cloud security). Evaluating potential system enhancements and upgrades, influencing the security product roadmap. Identifying and implementing process improvements and product simplification opportunities ...

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks ...

threat detection, investigations, and reporting across the cyber security function, collaborating with teams in Liverpool and London. The role requires hands-on experience with SIEM, vulnerability management, NAC, and advanced detection capabilities, with a strong focus on proactive risk reduction and incident containment. #J-18808-Ljbffr ...

associated components. Design and implement privileged access policies, credential management, vaulting, session monitoring and least-privilege controls. Integrate CyberArk solutions with Active Directory, LDAP, SIEM and ITSM platforms. Produce high-quality technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and implementation runbooks. Conduct security ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

event logs, persistence mechanisms and fileless attacks — and hands-on use of tools such as X-Ways, EnCase, Autopsy, Timesketch and Plaso. Experience with SIEM platforms and cloud or memory forensics is advantageous.### Who It SuitsThis role suits an experienced DFIR practitioner who is comfortable operating independently on complex investigations ...

rack layout), or willingness to work closely with facilities teams on this Working knowledge of PowerCLI or equivalent VMware automation/Scripting Awareness of SIEM and security monitoring tooling (eg LogRhythm, SolarWinds, Nozomi) from an infrastructure-hosting perspective, without needing to own the tools Contract Details Duration: 6 months Rate ...

/ticketing platforms (such as ServiceNow) and processes (ticket prioritisation, SLAs etc) Microsoft - including Sentinel and Defender XDR SentinelOne - including both endpoint and AI SIEM Triaging and investigating incidents as a SOC Analyst Shift Lead management, including chairing shift meetings, monitoring SLAs, quality assuring tickets and mentoring/coaching other ...

with JSONB; in-process caching with invalidation Security telemetry: Windows event logs, Active Directory, M365/Graph API, NetFlow Insider threat/UEBA/SIEM product experience Porting or re-platforming an existing system against a live reference implementation Comfortable reading C# well enough to port from it Agile, cross ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

including their TTPs Experience in utilising open-source intelligence and the development of tools to assist with this Experience in conducting malware, phishing, and SIEM log analysis Knowledge of relevant cyber threat intelligence sources Demonstrated ability to manage customer relationships Proven ability to translate cyber threats to the relevant audience ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software-defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

across the wider cyber domains – Identity Security, Sec‐Ops, Data Security and AI Security – to show how Network & Edge controls integrate with identity providers, SIEM/SOAR/MDR (e.g. FortiSIEM, FortiSOAR), data loss prevention and AI usage controls. Utilise vendor‐specific tools and resources to support solution design and ...

role. The ideal candidate brings enterprise-scale DFIR experience, strong artefact knowledge, and hands-on use of X-Ways, EnCase, Autopsy, Timesketch and Plaso. SIEM and cloud forensics are advantageous. #J-18808-Ljbffr ...