326 to 350 of 403 SIEM Jobs in the UK excluding London

including HLDs, LLDs, architecture patterns and data-flow diagrams. Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security. Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter … ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community are key to our success. Our work model prioritizes ...

Around 2-3+ years of commercial cyber security experience Hands on experience within Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra … have a genuine say in how the organisation develops its cyber security capability. If you have experience across Microsoft security, Azure, Sentinel, SOC/SIEM or Identity & Access Management and are looking for the next step in your career, we would like to hear from you. Are you interested ...

and secure SD‐WAN. Threat and Exposure Management, including EDR, EPP, XDR, CTEM, vulnerability management and OT security. Security Operations and Governance, including SOAR, SIEM, MDR, GRC and third‐party risk management. KEY RESPONSIBILITIES Capability leadership and governance Lead the Cyber Security Technical Pre‐Sales capability and provide … ability to challenge constructively. (ESSENTIAL) Awareness of security frameworks and regulations relevant to the UK and EU markets. (ESSENTIAL) Understanding of security operating models, SIEM, SOC and managed security concepts. (DESIRABLE) Ability to manage competing priorities and make sound decisions with incomplete information. (ESSENTIAL) CORE COMPETENCIES AND SKILLS Technical leadership ...

implementatie en het beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent de drijvende … kracht achter de (versnelde) implementatie van een Security Operations Center (SOC). Ontwikkelen en onderhouden van detectieregels en playbooks (met SOAR/SIEM-tools); Samenwerken met collega’s om incidenten snel en effectief te mitigeren; Continu verbeteren van onze monitoring- en responsprocessen; Rapporteren van bevindingen en adviseren over structurele verbeteringen ...

Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities. Lead advanced threat hunting and digital forensic investigations using SIEM, EDR, network telemetry and threat intelligence sources. Work closely with global CSOC teams to improve cyber defence capabilities, operational processes and detection methodologies. Provide clear … . Proven success leading teams, projects or operational cyber security functions. Strong incident response, cyber threat hunting and digital forensics expertise. Experience using commercial SIEM, EDR and network analysis platforms. Strong understanding of network protocols and traffic analysis across the OSI model. Experience working with cyber threat intelligence methodologies and ...

looking for people who want to build something. What You’ll Do Alert Triage & Monitoring Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments. Investigate alerts to determine scope, severity, and whether escalation is warranted. Leverage AI-assisted triage and enrichment tools … lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication. Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure. Execute established ...

translating complex technical requirements into actionable data flows to support detections and alerts. The position maintains a dual focus: hand‐on security engineering, including SIEM and detection logic development, and streaming data engineering; specifically, the optimisation and manipulation of high-volume streaming data pipelines. You will support outcomes so that … and at rest is fully encrypted (KMS & TLS). Ensure all fields are normalised into standard schemas (OCSF) while enforcing least‐privilege access controls. SIEM & EDR Logic Development: Support analysts in the creation and tuning of detection rules across platforms. Detection Quality Assurance: Act as an enabler to establish and ...

translating complex technical requirements into actionable data flows to support detections and alerts. The position maintains a dual focus: hand‐on security engineering, including SIEM and detection logic development, and streaming data engineering; specifically, the optimisation and manipulation of high-volume streaming data pipelines. You will support outcomes so that … and at rest is fully encrypted (KMS & TLS). Ensure all fields are normalised into standard schemas (OCSF) while enforcing least‐privilege access controls. SIEM & EDR Logic Development: Support analysts in the creation and tuning of detection rules across platforms. Detection Quality Assurance: Act as an enabler to establish and ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

implement information security policies, controls and solutions. Monitor security events, risks and vulnerabilities and investigate incidents. Design, build, test and troubleshoot security solutions including SIEM and IDS/IPS. Manage vulnerability testing and recommend improvements. Provide cybersecurity expertise across network design and management. Maintain security policies, procedures and technical documentation. … teams through knowledge sharing and training. Requirements 5+ years' multi-network experience with hands-on secure network design and management. Experience with Cisco, Juniper, SIEM, IDS/IPS, penetration testing and forensic tools. Knowledge of ISO27001, GDPR, ITIL and vulnerability management. Strong communication and customer-facing skills. SC Clearance ...

security issues and design effective remediation solutions Monitor and configure security tools - global EDR/XDR policies, blocklists, and automated containment rules including SIEM, EDR and respond to threat detection alerts. Maintain and enhance security monitoring capabilities through effective integrations and optimisation of security tooling, ensure effective data collection and … Detection & Response (EDR/XDR) tooling. Experience managing security tooling such as Microsoft Defender XDR, Sentinel, CrowdStrike, Splunk, QRadar, SentinelOne or similar enterprise-grade SIEM/XDR platforms. Direct experience securing Microsoft 365 tenants and standard corporate SaaS environments. Proven experience interfacing with, tuning, or triaging escalations from a third ...

will keep the lights green on all Security Toolkit Infrastructure within our remit and support various toolsets including Microsoft Security Stack, Email Gateway, SIEM, IDPS, GVM and Malware Protection.* You will record and respond to health alerts from the Security Infrastructure we maintain.* Require knowledge of how to tune and … Defender, Wider E5 licensing suite.* Desirable: Netskope experience administering and maintaining Netskope Security Cloud platform, including configuration of policies, integration with identity providers and SIEM tools, troubleshooting service issues, and ensuring optimal performance.## **We are a Disability Confident Employer**Capgemini is proud to be a Disability Confident Employer (Level ...

minimum of five years' SOC experience, mentor junior staff, and contribute to rapid incident response and threat detection. This role emphasizes hands-on SIEM work (Splunk, MS Sentinel), log analysis (Wireshark), and strong knowledge of Windows and Linux systems, networking, encryption and vulnerability management. #J-18808-Ljbffr ...

complex investigations, and leading Tier 3 investigations through triage, scoping, containment, eradication, recovery, resolution, or structured handover Experience with EDR/XDR, NDR, and SIEM technologies to investigate endpoint, network, identity, and security telemetry, and performing forensic analysis of major incidents, reconstructing threat actor activity, developing investigation timelines, and identifying … Nice If You Have: Experience managing or leading a SOC, incident response team, or deployable cyber defense capability Experience with threat hunting, detection engineering, SIEM use-case tuning, false-positive reduction, or security automation and scripting Experience with Windows and enterprise infrastructure, including Active Directory, server platforms, virtualization, network devices ...

complex investigations, and leading Tier 3 investigations through triage, scoping, containment, eradication, recovery, resolution, or structured handover Experience with EDR/XDR, NDR, and SIEM technologies to investigate endpoint, network, identity, and security telemetry, and performing forensic analysis of major incidents, reconstructing threat actor activity, developing investigation timelines, and identifying … Nice If You Have: Experience managing or leading a SOC, incident response team, or deployable cyber defense capability Experience with threat hunting, detection engineering, SIEM use-case tuning, false-positive reduction, or security automation and scripting Experience with Windows and enterprise infrastructure, including Active Directory, server platforms, virtualization, network devices ...

and configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/… OnPrem to support high data ingest rates. Proven delivery and experience leading conducting onboarding activities onto a SIEM Knowledge of OnPrem architectures & design including: Security controls and detection tools. Networking and Secure network architectures Understanding of OSI and TCP/IP models. IP addressing, subnetting, and routing protocols. Knowledge ...

platforms. Perform daily operations, incident resolution, upgrades, patching, and health checks. Configure password rotation, session monitoring, and access controls. Support integration with Active Directory, SIEM, ServiceNow, and other enterprise tools. Ensure CyberArk platform meets security, audit, and compliance requirements. Act as the primary CyberArk SME, providing guidance and support … Windows, Linux/Unix, Network devices Databases Cloud platforms (Azure) Service, application, and DevOps accounts Integration & Automation Integrate CyberArk with: Active Directory/LDAP SIEM tools (Sentinel) Ticketing tools (ServiceNow) Identity platforms (Azure AD, SSO solutions) Develop and maintain automation scripts using: REST APIs PowerShell/Python Support PAM integrations ...

Development: Design, build, and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM, and EDR. Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … with third‐party platforms and internal tooling. Experience of deploying infrastructure-as-code is advantageous. Knowledge of typical enterprise security tooling (such as SOAR, SIEM and EDR) is advantageous. Collaborative and engaging approach to problem solving, and a willingness to work as part of the team. Passionate for diversity, recognising ...

About UsSophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

and validate different configuration options, integration models and system architectures within a controlled sandbox environment. Integrate SAP instances with Security Information and Event Management (SIEM) platforms. Investigate how SAP security events, logs and related data are generated, collected, transferred and monitored. Test connectivity and data flows between SAP systems and … concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding of systems integration, interfaces, connectivity and data flows. Experience connecting ...

Security Operations & Monitoring Support the day‐to‐day operation of information security controls and services. Monitor security tooling, alerts, and dashboards, including SOC and SIEM outputs. Investigate and respond to security events and incidents in line with agreed procedures. Escalate security incidents and risks to the Information Security Manager … detail. Experience working in regulated or enterprise environments. Exposure to cloud security concepts (e.g. Azure security services). Experience with security tooling such as SIEM, endpoint protection, or vulnerability management tools. Relevant education or certifications (or working towards) in information security. About Us Our benefits We offer all employees ...

Defender, and act as the primary contact for security incident remediation while supporting the broader security function. The role requires experience with security tools (SIEM, SOAR, EDR) and familiarity with security frameworks like NIST and ISO 27001. #J-18808-Ljbffr ...

Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling Help develop emerging AI/agentic security use cases What we're looking for Strong hands ...

security ensuring integrity and security of networks; Good working knowledge & experience of Cisco Firewalls, Routers& Switches Compliance standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen Testing tools Vulnerability Management Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks … years multi network exposure including hands on experience of designing and managing secure networks including the following systems: Cisco Firewalls, Routers, Switches Juniper platforms SIEM tools IDS/IPS Penetration testing (PEN Testing) Computer Forensic tools ISO27001 & GDPR knowledge Ability to communicate network security issues to peers and management Ability ...