126 to 150 of 893 SIEM Jobs in the UK

delivery (domestic and international as required). Ideally, You'll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...

implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.Creating security automations ...

case summarisation, evidence collection, threat intelligence analysis, detection engineering support and repetitive investigative workflows. Develop and maintain MCP servers, APIs and integration services across SIEM, EDR, SOAR, PAM, IGA, CSPM, DLP, ticketing and threat intelligence platforms. Build agentic and workflow-driven solutions, making informed decisions on when AI is appropriate ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...

Security 1+ years of experience with either programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM's such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

cloud infrastructure. Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools. Offer consultancy as an SME to all business units in relation to technical projects. Requirements and Qualifications: Experience in design, documentation, and configuration ...

Information Protection, Insider Risk and eDiscovery Strong understanding of Zero Trust architecture principles, particularly identity-driven security models Experience deploying and operating Defender and SIEM capabilities, integrated within a wider security ecosystem Experience conducting security design reviews and translating policy into practical controls Experience performing risk assessments aligned to recognised ...

needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences Embrace Challenges ...

environments such as Microsoft 365, Azure, AWS or Google Cloud . Understanding of security technologies and controls such as firewalls, endpoint security, vulnerability management, SIEM and identity security. Strong stakeholder management skills, including experience dealing with senior business stakeholders, customers, suppliers and auditors. A recognised security qualification such as CISSP ...

Essentials Plus and the firm's wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote ...

Azure cloud or hybrid environments. Hands-on experience with the Microsoft E5 security toolset. Experience implementing and supporting a range of security technologies, including SIEM, EDR, firewalls, vulnerability management, identity and access management, encryption and related security controls. Working knowledge of recognised security frameworks such as Essential Eight, NIST Cybersecurity ...

incident calmly under pressure, and when to ask for help. Experience with cloud environments, particularly AWS and familiarity with vulnerability scanners, endpoint protection, and SIEM tooling are important. An awareness of UK data protection requirements and frameworks such as Cyber Essentials or ISO 27001 is a plus. Solid general ...

custom security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...

custom security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic;Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines;DevSecOps Leadership: Experience leading ...

investigation.Solid understanding of core networking concepts — TCP/IP, firewalls, DNS, packet analysis.Hands-on experience with security monitoring tools, such as IDS/IPS, SIEM platforms, or network traffic analyzers.Strong written and verbal communication skills, with close attention to detail — you'll be translating technical findings for both internal teams ...

and firewall concepts; experience collaborating with network teams to design resilient architectures.Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance.Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and technology ...

application log sourcesExperience in Python development, specifically contributing to a shared codebase used for automating SOC operationsMust have experience with one or more SIEM languages (SPL, KQL, SQL)Experience conducting analysis in a data lake environmentBroad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

FWaaS).Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native ...