326 to 347 of 347 SIEM Jobs in the UK excluding London

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us:EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us: EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...

SOAR/SIEM Security Engineer - Critical National Infrastructure (OT) 18-Month FTC | SC Cleared A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology ...

pressure and brief client leadership, up to board level, in language they can act on Run proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture … breach cases you can walk through in depth Advanced hands-on malware analysis capability, spanning behavioural analysis and reverse engineering Deep expertise across enterprise SIEM platforms and EDR tooling (CrowdStrike knowledge a strong advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud ...

and improve security platforms controlling privileged access, credentials and administrative activity across critical infrastructure. There is also a requirement within the team for Elastic SIEM capability, so if you have strong Elastic experience alongside your security engineering background, that would also be relevant. The role You'll work across identity … group access. Monitoring privileged sessions and investigating failed authentication activity. Maintaining, patching and upgrading security platforms. Reviewing audit logs and integrating security events with SIEM tooling. Troubleshooting firewalls, load balancers and connectivity issues. Key experience Hands-on Security Engineering within complex environments. Privileged Access Management (PAM) or identity security solutions. ...

Stevenage on a 24-month contract, onsite. The role focuses on implementing, maintaining, and optimising security technologies across complex environments. Key tasks include SIEM administration, log ingestion, automation via PowerShell/Python, and API integrations. This is a hands-on engineering position within the Defence sector, with strong emphasis ...

IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...

delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and … programmes within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme ...

including VPNs, VLANs, and Wi-Fi. Monitor and support servers, storage, backups, and virtual environments. Assist with patching, vulnerability remediation, endpoint security, MDR, and SIEM solutions. Support ITIL service desk processes, change management, and major incident management. Essential Skills & Experience Microsoft 365 and Entra ID administration. Intune MDM and Conditional … UniFi, Aruba, Veeam, Bitdefender, PRTG, SQL Server, MySQL, IIS, Apache, WSUS, and related technologies. Desirable ITIL Foundation. Microsoft certifications. VMware experience. Exposure to cybersecurity, SIEM, and MDR solutions. This is an excellent opportunity for a motivated IT professional looking to broaden their experience across infrastructure, cloud services, networking, and security ...

tenancy, virtualisation, containers, encryption, key and secrets management, AI runtime and threat modelling. Design IAM solutions, including identity providers, SSO, RBAC and MFA. Define SIEM/SOAR architecture and detailed designs for logging, correlation, playbooks and incident response. Review and validate Bills of Materials for security, IAM and SIEM/… SOAR Key Experience: Strong Security Architecture experience within complex enterprise environments Experience across network security, IAM, SIEM/SOAR and threat modelling Strong understanding of EPP, DLP, encryption, containers and cloud or infrastructure security Ability to produce high-level and detailed technical designs If this sounds like a good ...

Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Support Project Managers with the planning and execution of OT cyber security aspects of projects to ensure they meet the time, cost and quality required … Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Practitioner of the ISA/IEC 62443 suite of standards, with particular focus on -2-1, 2-4, 3-2 and 3-3.Experience working ...

implementation plans before taking responsibility for successful delivery. There’s also an increasing focus on modern security operations, so exposure to areas such as SIEM, SOAR and XDR would be useful. Beyond project delivery, you’ll act as a senior technical escalation point, carry out customer security audits and health … then remaining involved through implementation and ongoing support. Experience around security compliance frameworks and public-sector environments would be useful, as would exposure to SIEM, SOAR, XDR and infrastructure automation. More than anything, they want somebody who can take technical ownership. Someone who can get into the detail when needed ...

coverage for advanced cyber attacks Manage senior detection engineers who each manage a number of detection engineers on a specific technology set (EDR, NDR, SIEM) Work pro-actively with wider NCC teams to ensure all relevant inputs are available (TI, DFIR, RTO etc) to build top-notch detection logic and … that provide improved coverage to clients and improved efficiency to our SOC. Skills, Knowledge & Expertise Experience in detection engineering on a range of technologies (SIEM and EDR, ideally NDR as well) Experience in working in a global firm in a multi-cultural context Experience in working in a complex international ...

/developing junior analysts Strong security incident investigation and response experience Experience across areas such as threat hunting and incident response Good knowledge of SIEM/EDR tooling no specific SIEM platform is required Ability to confidently take ownership of escalations in a critical 24/7 environment The role ...

Harvey Nash are now inviting candidates to apply for the role of SIEM Detection Engineer, candidates applying must have valid Security clearance. Inside of IR35 Daily Rate - of £500 - £700 depending on experience Duration - 6 months This is a hands on technical engineering role focused on the design, build and … ongoing enhancement of SIEM logging and monitoring capabilities . You'll be responsible for integrating data sources, developing logging and detection logic, and ensuring security monitoring coverage across both IT and SCADA/OT environments to meet regulatory requirements. Key skills required: Strong hands-on SIEM engineering experience LogRhythm expertise ...

Industrial Network Systems Engineer Company | Automation Engineering Consultancy Firm Areas | Defence, Factory Automation, UK Critical Infrastructure Tech | CCNA, VCP, MCP, SOC, SIEM, SNMP Development | Progression and technical development Based | Sheffield office and various UK site work Offer | Up to £55k + over time + vehicle + private medical Talentometry have … Hands-on network installation & commission experience. You may also have/work with: VMware Certified Professional (VCP). Microsoft Certified Professional (MCP). SOC, SIEM, SNMP. Interest in IOT/OT/ICS. Experience with network monitoring and management tools. If this sounds like something you want to be involved ...

opportunities to improve DLP coverage and strengthen data protection controls. Develop and enhance insider risk detection use cases, analytics, dashboards, and reporting using DLP, SIEM, UEBA, and related technologies. Support insider risk investigations by providing DLP subject matter expertise, policy guidance, reporting, and technical analysis. Develop program metrics, documentation, and … equivalent experience. Experience in data loss prevention, insider risk, cybersecurity or a related security discipline. Experience working with DLP technologies and familiarity with SIEM, UEBA, or similar security platforms. Knowledge of insider risk, data protection, cybersecurity governance, and risk management practices. Experience evaluating business risk and applying governance principles ...

Group is seeking a SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team. Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration ...

Harvey Nash are now inviting candidates to apply for the role of SIEM Detection Engineer, candidates applying must have valid Security clearance. Inside of IR35 Daily Rate - of £500 - £700 depending on experience Duration - 6 months This is a hands on technical engineering role focused on the design, build and … ongoing enhancement of SIEM logging and monitoring capabilities click apply for full job details ...

This role involves hands-on technical work, mentoring junior team members, and contributing to the development of security solutions. Ideal candidates will have strong SIEM expertise, specifically in Google SecOps, experience with CI/CD pipelines, and demonstrated ability in managing security programs in regulated sectors. #J-18808-Ljbffr ...