126 to 150 of 450 SIEM Jobs in the UK

workstations and administrative tiering. Experience with identity governance, access reviews and entitlement management. Familiarity with zero-trust principles. Experience integrating identity-security findings with SIEM, SOAR, vulnerability-management or service-management platforms. Knowledge of Microsoft Defender XDR and related security recommendations. Experience with infrastructure-as-code or configuration-management tools. ...

Engineering background (AWS, Azure, or GCP) Cloud Security expertise CI/CD pipelines and DevOps PowerShell, Bash, Python and/or Java Docker & Kubernetes SIEM tools, Security Controls and Cloud Security Tooling Incident, Problem and Change Management Experience with Wiz tooling (Wiz Cloud/Wiz Defend) Windows and ...

recovery readiness. • Maintain infrastructure security standards, patching, and compliance requirements. • Monitor, identify, investigate, and respond to security threats and vulnerabilities. • Manage endpoint protection, firewalls, SIEM, MFA, email security, and access controls. • Implement and maintain security standards, policies, and best practices. • Work with third-party security providers as required. • Leadership and ...

actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking knowledge of identity and access systems and common attack paths, including credential theft, privilege escalation, and session ...

teams.Respond to incidents alongside the Head of CyberWork with the existing MSSP across incident response and proactive monitoring and detectionMaintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools.Track deployment and health of all security products across the business.Stay ahead of emerging threats and evolving ...

optimisation of Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery.Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities.Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

Cybersecurity, Computer Science, or related field.Experience: 3–5 years in SOC, Incident Response, or Threat Analysis rolesStrong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies.Desirable skills:Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC-200, or Splunk Certified Power User.Who ...

ability (Python, Bash, or similar)Nice to haveBGP, FlowSpec, and traffic engineering knowledgeNetFlow/sFlow analysisIDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)SIEM experience (Splunk)Linux proficiencyVirtualisation (KVM, ESXi)Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIHBright Purple is an equal opportunities employer ...

mitigation. Strong understanding of network security architecture and boundary security design. Proficiency in security incident investigation and threat analysis. Knowledge of security event management, SIEM and log analysis. Understanding of vulnerability assessment and remediation processes. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of managed service delivery ...

levels.Ability to work independently and collaboratively in a fast-paced environment.Strong analytical and problem-solving skills.Keen to learn new technologies.Nice to have:Familiarity with SIEM, detect security threats and event correlation is a plus.Experience with data replication, backup, and recovery strategies.Next generation firewall experienceScripting Languages – Eg Bash and PythonTech stack ...

Infrastructure Engineer/Analyst ( Hybrid/Chesterfield) - 12 Month FTC. VMWare, AD, Exchange, Windows Server, Azure, O365, Siem tooling, PowerShell, Networking, Meraki, Firewalls Infrastructure Engineer/Analyst: Do you have a background in supporting business or technical applications? Do you have a broad technical skill set but looking ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

desirable.Infrastructure as Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferredSecurity tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable.ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial.Personal and other skills Able to manage complexity ...

Public Key Infrastructure (public and private), Endpoint and Workload Protection, Web Application Firewalls, Secure Email Gateways and Filters, Cloud Security, Secure DNS Large-scale SIEM or security data lake implementations A strong understanding of the fundamental operations of servers, operating systems, networks, cloud services, and infrastructure An expert understanding ...

deployments.Monitoring and SecurityConfigure and maintain monitoring solutions across Azure and third-party platforms.Apply and enforce security best practices, ensuring compliance and risk mitigation.Work with SIEM tools for security monitoring and incident response.Key ExperienceProven experience as an Azure Cloud Engineer or similar role (3–5+ years).Strong expertise in cloud computing ...

security operations or boundary security environments. Proven leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government ...

services to multiple external clients rather than managing only an internal SOC. 2. Technical security operations experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft ...

SaaS and IaaS environments. Device and mobility management. Windows Server and Windows operating systems. VMware and enterprise storage. VPN, SASE and cloud security technologies. SIEM and security monitoring platforms. Experience with technologies such as Mimecast, Varonis and Cisco Umbrella would be highly beneficial. You should also have experience with scripting ...

Waterfall or hybrid delivery methodologies.Experience using AI-powered tools such as Microsoft Copilot to enhance analysis and decision support.Desirable criteria: Knowledge of IAM, PAM, SIEM/SOC, network segmentation, vulnerability management, data protection, operational resilience, FCA, DORA, ISO27001, NIST, Microsoft 365, Azure, Entra ID, Active Directory, ServiceNow and Microsoft Sentinel.We ...

flow.Familiarity with identity and access management concepts such as Okta, Azure AD, SSO, and SAML, along with how email security integrates into SOC and SIEM/SOAR workflows.Experience engaging technical administrators, CISOs, C-level executives, and legal and compliance teams, with the ability to translate complex security architecture into clear ...

management. • Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. • Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and ...