51 to 75 of 342 SIEM Jobs in the UK excluding London

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

secure environments (e.g. defence, air-gapped)Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, identity, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesHardware Security Modules (HSMs) (e.g. Thales)Cross-domain/secure communications environmentsAutomation of certificate management ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

role in building and optimising detection and response strategies, ensuring robust protection against evolving threats.Key ResponsibilitiesSIEM Engineering & ManagementDeploy, configure, and maintain the QRadar SIEM platform.Onboard and normalise log sources across on-premises and cloud environments.Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis.Playbook Development & AutomationDesign and … DevelopmentLead threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain.Translate threat models into actionable detection use cases and SIEM rules.Prioritise detection engineering based on business risk and impact.Reporting & CollaborationProduce reports and dashboards to communicate security posture and incident trends.Partner with IT, DevOps, and compliance ...

fundamentals of IT Infrastructure Desirable Experience Experience working within financial services or regulated environments Experience with cloud security (e.g. Azure, AWS) Familiarity with SIEM, vulnerability management, and endpoint security tools Understanding of data protection and GDPR requirements Essential Qualifications Degree or equivalent professional experience in a relevant field Industry certifications ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...

and partnering with infrastructure and engineering teams to implement them. Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms. Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities. Experience leading or materially contributing ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot or similar AI-assisted security tooling experience managing or working closely with an outsourced ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and ...

essential things required to be successful in the role 4+ years’ experience in a security or technical operations role Hands-on experience working with SIEM and EDR tools (essential) Experience investigating and responding to security alerts or incidents Familiarity with securing systems through patching, endpoint protection, or similar controls Working ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

ability (Python, Bash, or similar)Nice to haveBGP, FlowSpec, and traffic engineering knowledgeNetFlow/sFlow analysisIDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)SIEM experience (Splunk)Linux proficiencyVirtualisation (KVM, ESXi)Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIHBright Purple is an equal opportunities employer ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

defence environmentsDesirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability ...