101 to 125 of 449 SIEM Jobs in the UK

CASB, FWaaS).Managing App segmentation and connector deployment.Zero Trust Client Connector configuration and rollout.Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc.Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust ...

live and ongoing support. Working within Microsoft 365 and Azure environments. Microsoft security technologies such as Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you’ll also Candidates must hold or be willing ...

Backup & Replication, Veeam ONE and Veeam Recovery Orchestrator (VRO).A key focus will be cybersecurity and infrastructure resilience, including endpoint security and encryption, DLP, SIEM, vulnerability management, security monitoring and patch management. Experience with Symantec, Splunk, Tenable and ManageEngine Patch Manager Plus will be advantageous.You will provide advanced support across ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework ...

IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework ...

enterprise/defence environments Desirable: VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

within secure/enterprise/defence environmentsDesirable:VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar) Data diode/one-way transfer architectures Integration with security tooling (SOC, SIEM, monitoring platforms) Performance and throughput optimisation for secure data transfer systems Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Hands ...

within secure/enterprise/defence environmentsDesirable:VCAP certifcationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.Creating security automations ...

Architect endpoint protection, DLP and advanced threat protection solutions Design application security, API security and secure SDLC integration Architect Security Operations Centre (SOC) and SIEM capabilities Lead security technology evaluation, selection and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture … network security, micro-segmentation and secure access technologies Proficiency in cloud security across Azure, AWS or equivalent platforms Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewalls Understanding of cryptography, encryption standards and secure communication protocols Familiarity with MOD security requirements, defence standards and ...

cloud-first or SaaS environment. Technical Expertise: Hands-on experience engineering and testing security controls across major cloud infrastructure, IAM systems, endpoint tools, and SIEM monitoring platforms. Framework Knowledge: Strong working familiarity with trust service criteria, information security risk models (such as ISO 27001, NIST, or CIS benchmarks), and third ...

protecting organisations from modern cyber threats. You'll ideally have experience with: Microsoft Defender or similar endpoint protection solutions Security Operations and Incident Response SIEM monitoring and security investigations Email security platforms such as Mimecast or Proofpoint Secure Web Gateway technologies such as Zscaler Vulnerability Management Cyber Essentials and ISO27001 ...

technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design.Additional language requirements: N/A.Role Experience: Experience in senior roles at Financial Services ...

e.g., implementing new security tools or architectures).• Own the administration and reliability of key security platforms (such as privileged access management, EDR, and SIEM), ensuring they are well-configured, up-to-date, and fully operational; coordinate upgrades and fixes proactively.• Lead cross-functional security projects (e.g., cloud security improvements … developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).• Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure ...

CloudSec.AWS Certified Security – Speciality or equivalent practical AWS security experience.Terraform or CloudFormation expertise.Incident-management or incident-response experience.Experience with Splunk or similar logging/SIEM platforms.Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction.Experience mentoring or line-managing security engineers.What ...

Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following: EDR, SIEM, NDR, applications, security architecture, IAM, PAM encryption technologies, network security, Zero Trust, secure interconnection patterns and cyber security principles. Experience within Security Operations, Incident Response ...