101 to 125 of 879 SIEM Jobs in the UK

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

producing high standards of work on schedule in a pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM ...

experience with Infrastructure-as-code (e.g Terraform) Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling. Experience operating SIEM and/or SOAR platforms and tuning detection logic. Experience with vulnerability management and patch governance. Ability to write production-quality automation scripts. Demonstrated experience ...

Experience securing both cloud and on-premise environments Strong understanding of attacker tactics, techniques and procedures Experience working with technologies such as Defender XDR, SIEM, EDR, Vulnerability Management and SOAR platforms Familiarity with security and vulnerability frameworks (e.g. MITRE ATT&CK, CVSS, CISA KEV and NIST) Ability to query and ...

and experience with detection technologies such as YARA, along with REST API development and third-party service integrationsDeep technical expertise across security platforms including SIEM technologies (such as Splunk, Elastic, or Sentinel), SOAR platforms (such as Phantom, XSOAR, or Swimlane), and EDR solutions (such as CrowdStrike, SentinelOne, or Microsoft Defender ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...

than retrofitting themConduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely mannerManage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platformsAct as the escalation point for security-related incidents across 2nd and 3rd line, providing expert guidance ...

methodologies and tools, enabling the seamless integration of security into the development process.* Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.* In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

Complex Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore ...

cloud provider (AWS or Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders. ...

Azure). Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible). Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub). Experience working in agile delivery teams and collaborating with diverse technical stakeholders. Strong ...

information exchange and trusted data transfer mechanisms. Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure. Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments. Infrastructure & Engineering Advanced PowerShell scripting ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. ...

frameworks, threat detection, and mitigation strategies Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios Experience working with SIEM, EDR, and vulnerability management platforms Understanding of risk-based prioritisation and regulatory compliance considerations Willingness to support out-of-hours activities based on threat levels ...

environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands‐on experience delivering technical demonstrations, workshops, evaluations, and Proof ...

environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands-on experience delivering technical demonstrations, workshops, evaluations, and Proof ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

defence, air-gapped)## ## Desirable:* Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* Hardware Security Modules (HSMs) (e.g. Thales)* Cross-domain/secure communications environments* Automation ...

Monitorbackup systems, conduct regular restore testing, and support annual external audits and DR testing initiatives. Proactive Monitoring: Manage system uptime, antivirus/EDR, and SIEM tools to quicklyidentifyand resolve performance anomalies. Network Admin: Support Azure VPN connectivity and applied IP routing and subnetting fundamentals to resolve complex connectivity issues. User ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

forwarders Data ingestion and performance considerations Strong experience using Splunk SPL (Search Processing Language). Experience integrating Splunk SOAR with security tools such as SIEM, IAM, EDR, firewalls, and ticketing platforms. Strong understanding of security engineering best practices, including incident response and automation safety. Good understanding of security governance, policies ...

Cloud/Container/API Security/CASB High level understanding of OT/IoT SecuritySecurity IntegrationsGood understanding of integrating multiple cybersecurity platforms, including: SIEM integrationsIdentity integrationsThreat Intelligence integrationsFirewall integrationsEndpoint integrationsCloud integrationsSOAR playbooksAPI-based security integrationsGovernance & ComplianceAwareness of: ISO/IEC 27001NIST Cybersecurity FrameworkCIS ControlsPCI DSSUK GDPRDPDPLeadership & CollaborationLead technical discussions ...

delivery (domestic and international as required). Ideally, You'll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...

case summarisation, evidence collection, threat intelligence analysis, detection engineering support and repetitive investigative workflows. Develop and maintain MCP servers, APIs and integration services across SIEM, EDR, SOAR, PAM, IGA, CSPM, DLP, ticketing and threat intelligence platforms. Build agentic and workflow-driven solutions, making informed decisions on when AI is appropriate ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...