26 to 50 of 297 SIEM Jobs in the UK excluding London

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

also identify gaps in capability and define enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that ...

Databricks ITSM : ServiceNow EUC : Intune, SCCM Applications : CRM, ERP, HCM, Finance Infrastructure : servers (cloud/on prem), networking, storage, backup Cloud : Azure Cyber Security : SIEM, XDR, IPS/IDS, NIST, ISO27001 ...

methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

RBAC and secure landing zones aligned to industry best practices You have experience improving cloud security posture through Microsoft Defender, Microsoft Sentinel (or equivalent SIEM/SOAR) and security automation You have Azure infrastructure knowledge, including networking, multi-region architectures, hub-and-spoke topologies and the cloud foundations that underpin ...

SaaS and IaaS environments. Device and mobility management. Windows Server and Windows operating systems. VMware and enterprise storage. VPN, SASE and cloud security technologies. SIEM and security monitoring platforms. Experience with technologies such as Mimecast, Varonis and Cisco Umbrella would be highly beneficial. You should also have experience with scripting ...

data platforms (e.g. Microsoft Fabric, Databricks) Broad enterprise technology background (e.g. ServiceNow, CRM, ERP, cloud, infrastructure) Solid knowledge of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001) Additional Information Location: Remote, with ~2 days onsite travel Requirement: Must be a sole UK national ...

platform experience (e.g. Microsoft Fabric, Databricks) Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 ...

Code (IaC) and DevSecOps practices VxRail and hyper-converged infrastructure VMware Cloud Foundation life cycle management, patching and upgrades Active Directory, PKI, PAM, SIEM and enterprise monitoring integrations Kubernetes and container platforms Security Clearance Due to the nature of the work, DV Clearance is strongly preferred. However, candidates holding active ...

monitoring and cyber incident response, including internal SOC and third-party services Overseeing detection, triage, investigation and response to threats using security tooling (e.g. SIEM, SOAR, EDR/XDR) and acting as the senior escalation point and cyber incident commander where required Ensuring incident response plans, playbooks, testing, and post ...

and provide technical guidance. Profile Essential Proven experience in Security Engineering, Cyber Security, or Security Architecture. Strong knowledge of cloud security, IAM, network security, SIEM, and endpoint protection. Experience with DevSecOps and secure application development. Strong understanding of enterprise infrastructure and cloud platforms. Excellent stakeholder management and communication skills. Desirable ...

architectural documentation, support guides, and schematics. Your profile Hands-on engineering background with Cisco and Juniper platforms. Experience deploying and troubleshooting security toolsets including SIEM and IDS/IPS. Knowledge of penetration testing methodologies and computer forensic tools. Understanding of General Data Protection Regulation requirements. Background in telecommunications or maritime ...

week. Key Skills: 5+ years experience working in a SOC Environment, handling threat detections, incident responses and continuous service improvements. Hands-on experience with SIEM platforms, endpoint detection and response (EDR), and vulnerability management tools. Good experience working with AI tools such as Claude, Co-Pilot and ChatGPT. Excellent experience ...

VMware vSphere Windows Server Red Hat Enterprise Linux (RHEL) Active Directory DNS Group Policy (GPO) Remote Desktop Services (RDS) Security Trellix/McAfee technologies SIEM platforms Syslog reporting and integration Antivirus technologies TLS certificates and PKI concepts Secure gateway technologies Linux & Scripting Linux administration Shell scripting Regular Expressions (Regex) Firewall ...

and responding to cloud security threats, managing incidents end to end, and advising stakeholders on how to maintain a strong security posture Experience with SIEM tooling, ideally Microsoft Sentinel, along with a strong understanding of Zero Trust principles, modern authentication and secure baseline configuration, will be highly valuable ...

and responding to cloud security threats, managing incidents end to end, and advising stakeholders on how to maintain a strong security posture Experience with SIEM tooling, ideally Microsoft Sentinel, along with a strong understanding of Zero Trust principles, modern authentication and secure baseline configuration, will be highly valuable ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

network segmentation projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models ...

Azure certifications * Experience supporting Linux and Mac environments * Knowledge of Hyper-V, VMware or other virtualisation platforms * Exposure to cyber security technologies including SIEM and MDR solutions * Experience working within ITIL or SLA-driven service environments * Knowledge of backup and disaster recovery solutions The Package Competitive salary (DOE) * Funded professional ...

identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage … range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. Produce ...

Essential Skills Strong experience implementing and configuring ServiceNow Security Incident Response (SIR). Expertise across ServiceNow Security Operations (SecOps). Experience integrating ServiceNow with SIEM, SOAR, and Threat Intelligence platforms. Strong knowledge of ITSM (Incident, Change and Problem Management). Experience designing and automating security workflows and incident response processes. ...

identity security principles. Microsoft Security Suite: Hands‐on experience with Microsoft Defender services (Defender for Endpoint, Defender for Cloud) and Microsoft Sentinel (or similar SIEM solutions) for advanced threat monitoring and response. Network Security: Proven experience with Azure networking components such as Azure Firewall, Network Security Groups (NSGs), and familiarity ...

decisions bring to the overall deployment process. Infrastructure Defense & Monitoring: Oversee next-generation Palo Alto firewalls, intrusion prevention systems, and data encryption protocols. Monitor SIEM platforms and threat feeds to isolate, investigate, and remediate digital vulnerabilities. Collaboration & Mentorship: Partner closely with internal technical squads and coordinate with external vendor partners. ...