301 to 325 of 326 SIEM Jobs in the UK excluding London

hybrid basis, paying a salary range up to £62,000 plus bonus. Lead IT Security Analyst: Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve … Analyst: Technical Experience Proven experience in IT security/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based ...

security plans and policies Centre of excellence for network and device security Designing, building, testing, commission and troubleshoot security solutions (IDS/IPM/SIEM) Writing and maintaining configuration/reconfiguration documentation, schematics, support guides and other documentation as required. The successful candidate will have: Minimum of 5 years multi … exposure including hands on experience of designing and managing secure networks including: Cisco Firewalls, Routers & Switches Compliance Standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen testing tools Juniper platforms Must hold, or have the ability to easily achieve SC Security Clearance Excellent organisation with pro-active ...

hackajob is collaborating with Made Tech to connect them with exceptional professionals for this role. Made Tech helps UK public sector organisations build and run better digital services. Our Cyber practice sits at the heart ...

Senior Network and Security Engineer - L2/L3 Network Infrastructure - Cyber Security - SIEM tools My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

accountable for the design, implementation, and operation of key security technologies and services across a cloud‐first environment, including: Security Information and Event Management (SIEM) Security Orchestration, Automation and Response (SOAR) Endpoint Detection and Response (EDR/XDR) Network Detection and Response (NDR) Vulnerability and Exposure Management Security Incident Management ...

internal and external stakeholders to accomplish key objectives using influencing and negotiation skills. Requirements & Qualifications Hands-on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

providing technical assurance and challenging service quality where required Identify detection gaps through incident reviews and trend analysis Drive improvements across Detection Engineering, telemetry, SIEM and Security Operations processes Develop automation opportunities and support AI-assisted investigations and remediation Collaborate with Security Engineering, Architecture and Cyber Defence teams to continuously … organisation's security posture Essential Experience Google SecOps CrowdStrike Darktrace Detection Engineering, including rule creation, tuning and optimisation Enterprise Security Operations and incident investigation SIEM administration and security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation ...

major cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational resilience … Experience Required Proven experience in a senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong ...

and external partners (e.g. SOCaaS providers), and running post‐incident reviews and tabletop exercises. Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001/27017/… post‐incident review. Working knowledge of SOC 2 and the ISO 27000 series. Comfortable evaluating and operating security tooling such as EDR, DLP, or SIEM platforms. A strong cross‐functional operator, comfortable bridging IT, Security, Engineering, and GTM teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks ...

and prospective clients. Acting as the final escalation point for on-call incidents (rota-based, paid on-call). Supporting service improvement initiatives across SIEM, EDR, email security and associated detection and response tooling. Developing and maintaining customer relationships to promote a partnership between Littlefish and the end client. What … Operations. Previous experience leading or mentoring a technical security team. Strong exposure to customer facing security services and contractual delivery. Hands on experience with SIEM, IDP, ITDR, EDR and email security platforms. Proven ability to mentor analysts at varying levels of experience. Strong understanding of modern cyber threats, attack techniques ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech company. The Security Architect … travel. Therefore, you must be based at a commutable distance from London. As Security Architect, you will take ownership of key security architecture across SIEM, SOAR, EDR, cloud security, detection engineering, threat hunting and automation. The Security Architect will work closely with internal and 3 rd party engineering and ...

Nessus) including: Configuration to enable Risk based vulnerability assessment. Definition of classification schemas, workflows and reports for operation. Integration with other tools such as SIEM applications, Case Management and Asset Management applications. Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for SIEM applications Support deployment of application to both cloud … NESSUS) including: Configuration to enable Risk based vulnerability assessment. Definition of classification schemas, workflows and reports for operation. Integration with other tools such as SIEM applications, Case Management and Asset Management applications. Experience deploying and configuring Vulnerability Management applications (e.g. NESSUS) in a performant manner on cloud and/ ...

optimise the Palo Alto firewall estate Support core networking (LAN/WAN, Wi-Fi, remote access, load balancing) Monitor and respond to security incidents (SIEM/EDR) Improve network security, segmentation, and resilience Manage vulnerability scanning and patching (Qualys) Lead and contribute to network and security projects Produce clear, accurate … technical documentation Tech Stack Palo Alto | Cisco (L2/3) | Aruba | SIEM | EDR | Qualys What We're Looking For Minimum 5 years' experience in networking (essential) Strong hands-on experience with networking fundamentals and technologies (Cisco, LAN/WAN) Exposure to security tools or environments (SIEM, EDR, vulnerability management ...

/Unix servers, network devices and applications to the PAM platform Configure Just-in-Time (JIT) access workflows and approval processes Integrate PAM with SIEM tools for monitoring and alerting Manage platform upgrades, patching and ongoing health monitoring Troubleshoot connector issues and session failures Maintain technical documentation and support audit … credential vaulting, password rotation and privileged access workflows Experience onboarding systems into PAM platforms Strong understanding of Active Directory privileged account management Experience with SIEM integration Ability to obtain SC level security clearance If this sounds like a role for you please apply with an up to date version ...

senior engineering teams and communicating risk effectively to cross-functional stakeholders. Detection Engineering Support: Proactively suggesting fine-tuning requests, updating signatures, and optimizing SIEM correlation rules to lower false-positive rates and enhance alert fidelity. Threat & Vulnerability Awareness: Keeping your finger on the pulse of the wider threat landscape, tracking … Clearance at the point of application. SOC Exposure: Prior experience working within a dedicated enterprise SOC environment. Security Toolkit: Good working knowledge of enterprise SIEM platforms, EDR/XDR tools, and host intrusion prevention systems. Network & OS Essentials: A strong foundational grasp of network principles (TCP/IP, DNS) and ...

capability, defending critical public services and guiding a team of engineers and analysts in Scotland. You will own the core security tooling estate, oversee SIEM, SOAR, EDR/XDR, NDR and CTI in a cloud-first environment, shaping strategy, managing risk, and delivering robust security controls across our organization. #J ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

service portfolio and delivering those services to end clients. Responsibilities include: Security Portfolio Development Support the definition and development of Security Services portfolio: MDR, SIEM, Identity, Compliance, and AI SOC Help productise security services with clearly defined scope, SLA, and pricing Contribute to the security attach strategy Assist in developing … Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA ...

Experience with OPA (Open Policy Agent) policy authoring in Rego and sidecar deployment patterns Hands-on with OpenTelemetry (traces, metrics, logs), Dynatrace, and Splunk SIEM integration Working knowledge of CDN/WAF platforms (Akamai Ion, Kona, Cloudflare) and WAF-as-code automation Experience with PostgreSQL (HA, connection pooling, PITR) and … maintain OPA policy bundles for coarse-grained authorization at the gateway layer Build and extend OpenTelemetry instrumentation pipelines (OTel Collector, Dynatrace OTLP ingest, Splunk SIEM forwarding) Manage GitOps-driven deployments via ArgoCD and Helm across multi-cluster Kubernetes environments Automate WAF rule management across Akamai and Cloudflare using ...

supporting a portfolio of customers across multiple sectors. You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and … help mature playbooks and runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs ...