151 to 175 of 893 SIEM Jobs in the UK

TOGAF or SABSA . Threat and risk modelling experience. Strong understanding of network security, encryption, authentication and access controls. Experience with security technologies including SIEM, firewalls, IDS/IPS and vulnerability assessment tools . Cloud security experience across AWS, Azure or Google Cloud . Experience with DevSecOps, CI/ ...

detection and response capability.Qualifications3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defence.Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and ...

ability (Python, Bash, or similar)Nice to haveBGP, FlowSpec, and traffic engineering knowledgeNetFlow/sFlow analysisIDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)SIEM experience (Splunk)Linux proficiencyVirtualisation (KVM, ESXi)Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIHBright Purple is an equal opportunities employer ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

and analysis Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis Understanding of regulatory stipulations regarding security incidents Experience with SIEM technologies (i.e. Splunk, Sentinel) Understanding of both Windows and Unix/Linux based operating systems Ideally, you’ll also Candidates must hold or be willing ...

Understanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/ ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you’ll also Candidates must hold or be willing ...

topography and protocolsUnderstanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scaleExperience in operationalizing automation to support process efficiencyExperience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis toolsDeep understanding of both Windows and Unix/Linux ...

technologies, with experience managing and operating FortiGate firewalls · Proven experience with Active Directory/Azure AD, including patch and group policy management · Cloud native SIEM, SOCs and SOAR · Windows Server, Windows 11, and Microsoft Application Suite · Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and ...

technologies, with experience managing and operating FortiGate firewalls Proven experience with Active Directory/Azure AD, including patch and group policy management Cloud native SIEM, SOCs and SOAR Windows Server, Windows 11, and Microsoft Application Suite Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

domain or secure transfer products, such as Opswat or similar* Data diode or one-way transfer architectures* Integration with security tooling, such as SOC, SIEM or monitoring platforms* Performance and throughput optimisation for secure data transfer systems* Experience supporting service management processes, including incident, problem, change and configuration management* Experience ...

cloud platforms such as AWS, Azure, and Google Cloud. Experience with Okta, Salesforce, Slack, Jira, and GitHub. Experience with security tools and technologies, including SIEM, IDS/IPS, and endpoint protection. Proven success in contributing to a team-oriented environment. Proven ability to provide creative solutions to problems. Thorough knowledge ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

Desirable:* Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability ...

telemetry standard with the architect: which sources go to Sentinel, at what level, and how a new service is onboarded before go‐live. Build SIEM workbooks and dashboards for coverage, alert quality and response times, and report SOC metrics (time to detect, triage and contain) monthly. Provide tenant‐aware alerting ...

enterprise/defence environments Desirable VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands‐on use of DevSecOps tools and CI/CD pipelines VxRail and hyper‐converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

work some weekends and holidays Post-secondary education in Cybersecurity, comparable Desirable: Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash scripts ...

/defence environments## ## Desirable:* VCP Certification* Expertise with cloud platforms (AWS) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* VxRail and hyper-converged infrastructure* Automation of VCF lifecycle (patching, upgrades, deployment)* Integration with ...

within secure/enterprise/defence environmentsDesirable:VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

/defence environments## ## Desirable:* VCAP certifcation* Expertise with cloud platforms (AWS) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* VxRail and hyper-converged infrastructure* Automation of VCF lifecycle (patching, upgrades, deployment)* Integration with ...

within secure/enterprise/defence environmentsDesirable:VCAP certifcationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

leadership, strong Windows and Linux disk and memory forensics, static and dynamic malware analysis, and deep OS internals knowledge. Proficiency with Splunk or comparable SIEM platforms is essential, as is scripting in Python or similar. Familiarity with Volatility, CrowdStrike Falcon, cloud forensics (AWS/Azure/GCP), EDR tools such ...