351 to 375 of 403 SIEM Jobs in the UK excluding London

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

Investigate identity and cloud-based compromise (e.g. anomalous sign-ins, malicious OAuth consent, mailbox access), including session/token revocation Design, build and test SIEM detection rules mapped to MITRE ATT&CK, and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python … Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage Mentor junior analysts and help drive ...

deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead and work closely with the SOC engineers … and evidence them for client audits (ISO 27001, Cyber Essentials Plus). Security tooling & engineering Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security. Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads. Own tooling health: versioncurrency, coverage ...

comparable distribution, including systemd, networking, storage, process limits, TLS certificates and a full working day in the shell. Experience running at least one SIEM or log management platform in production; Wazuh is preferred, but Elastic, OpenSearch, Graylog, Splunk or Security Onion experience transfers well. A working understanding of how logs … Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service provider experience; involvement in the security community; and an interest in working alongside ...

shift basis, taking ownership of frontline threat detection and response within a busy security operations environment. Key Responsibilities: Review and triage output from SIEM, IDS/IPS and firewall platforms to detect potential compromise Act as first responder on confirmed incidents, working through investigation, containment and handover to senior staff … Open to rotating shift patterns, including nights/weekends Desirable: Industry-recognised certifications (e.g. CompTIA Security+, SSCP, CEH, GCIH) or working towards Familiarity with SIEM platforms or IT service management tools Track record of meeting SLA-driven targets in a fast-paced environment Comfortable operating within a round-the-clock ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and … Experience with data classification, data handling, or data protection strategies that support DLP in cloud-hosted systems. Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response. Hands-on involvement in incident response or post-incident analysis from an engineering perspective (e.g., improving detections ...

Security Engineer (SIEM/XDR) - Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

drive the threat-informed defence programme.* Set the Security Operations roadmap, balancing capability development, operational priorities, capacity and costs.* Oversee the operational use of SIEM, EDR, and SOAR, working with Security Engineering on platform development and integrations.* Develop the team’s ability to monitor and respond to AI-enabled activity. … security investigations, incident management, containment and recovery.* Knowledge of common attack techniques, threat intelligence, threat hunting and prevention methods.* Experience using security telemetry and SIEM, EDR or XDR tools to investigate threats and improve detection.* An understanding of identity, endpoint, network and cloud security.* Experience managing operational costs or supplier ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...

systems as part of a team on a rotating 24 x 7 x 365 basis. Your background should include exposure to security technologies including SIEM/EDR, firewalls, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority … report on anomalous behaviour. Determines and directs Advanced remediation and recovery efforts (with assistance from tooling and/or Level 2) Investigate alerts using SIEM, data visualisation, pattern analysis and automation. Solid cyber security skills including SIEM Have the drive to dive deep into issues Ability to identify security threats ...

background in solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile … DevOps, or Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

Senior Cyber Security Analyst – SIEM, EDR, DLP, and firewalls – Scotland – Hybrid - £60,000 - £68,000 Our client is a highly respected, global firm looking to bring on a Senior Cyber Security Analyst to serve as the technical Subject Matter Expert (SME) for their security operations team. Reporting directly … Strong experience in cyber security and IT, ideally with prior experience acting as an SME or technical team mentor. Practical, hands‐on knowledge of SIEM, EDR, DLP, and firewalls. Experience working in global, fast‐paced environments across multiple time zones. Familiarity with Agile ways of working and tools like Jira ...

work. This is an exciting opportunity for a hands-on Splunk professional with strong Unix administration skills and a SecDevOps mindset to support ongoing SIEM operations, upgrades, migrations and service improvements. The successful candidate will provide end-to-end support for the Splunk platform, ensuring optimal system health, performance and … security while contributing to automation and operational efficiencies. Key Responsibilities Provide end-to-end administration and support of the Splunk SIEM platform. Conduct Splunk health checks and performance monitoring across the environment. Support planned migrations, upgrades and platform enhancement activities. Create, maintain and optimise Splunk alerts, dashboards and reports. Produce ...

experience in system administration. Knowledge of big datatechnologies and ecosystems (e.g. Apache NiFi). Knowledge of currentmarket and emerging tools in data analytical and SIEM platforms. Knowledgeof network security implementations (e.g., IDS, IPS, EDR), including theirfunction and placement in an enterprise network. Knowledgeof intrusion detection systems and signature development. Knowledge … network architectures and technologies. Must-have experience withframeworks and technologies that support data-intensive distributedapplications. Must-have experience withmaintaining and administrating data analytical and SIEM platforms such asElastic. Must-have experience with problemsolving and analytical skills and able to collect information, analyse, report,and advise on evidence-based changes. Skillto ...

analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve operational efficiency and incident response. What we're looking for At least one year … relevant experience in a SOC, Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious ...

within a live 24/7 operational environment. * Support incident, problem and change management activities, working closely with specialist engineering teams. * Use monitoring and SIEM platforms to proactively identify issues, reduce operational risk and improve service resilience. * Develop and utilise automation and scripting solutions using technologies such as PowerShell, Python … and/or Security Operations Centre (SOC) environments. * Proven incident, problem and change management experience using enterprise ITSM tooling. * Experience using monitoring, logging and SIEM tools to support operational services. * Strong scripting and automation skills using PowerShell, Python, Shell scripting or similar technologies. * Experience supporting cloud identity or privileged access ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within high-threat government environments. Industry certifications in CISSP, CISM or CRISC To apply, please submit ...

seeking a Cyber Security Analyst to safeguard IT systems, monitor threats, and ensure regulatory compliance. The role requires strong knowledge of threat management, SIEM tools, and incident response. Responsibilities: Monitored IT systems for vulnerabilities and attacks Conducted penetration testing and risk assessments Managed firewalls, IDS/IPS, and endpoint security … Investigated security incidents and breaches Implemented access control and authentication policies Monitored logs and SIEM tools for anomalies Developed and maintained incident response plans Provided security awareness training to staff Ensured compliance with GDPR and ISO 27001 Worked with IT teams for secure deployments Conducted audits of IT infrastructure Recommended ...

Cyber Security Analyst, you'll support and enhance our security operations capability - monitoring, detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms. What you'll do: Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review … University, including awareness and training initiatives What you'll bring: Strong understanding of security technologies and controls - endpoint protection, network security, IDS/IPS, SIEM/EDR Experience working in large, complex IT or network environments supporting critical infrastructure Knowledge of recognised security standards and risk assessment methodologies A relevant ...

security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows, escalation paths … operations within government, defence, or critical infrastructure Previous hands on experience in Vulnerability management and incident response and security operations escalation Understanding of SIEM platforms, detection engineering, and Vulnerability alert management Familiarity with ITSM tooling, ideally ServiceNow Strong stakeholder management and reporting capability Understanding of regulated environments (MOD, HMG, Defence ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...