151 to 175 of 450 SIEM Jobs in the UK

services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support … cyber security environment Strong hands-on experience us ing Ela stic and/or Sp lunk for security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint ...

lead and manage high-performing security teams. Extensive experience delivering threat intelligence and assessment. Hands-on experience with cyber security solutions such as SIEM, IDS/IPS, antivirus, and endpoint detection tools. Experience managing relationships with MSSPs, vendors, and external agencies. Strategic mindset with the ability to deploy resources effectively. ...

level capability investigating threats in enterprise and production environments, taking ownership from identification to resolution.Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber ...

Agile methods such as SCRUM; Enterprise security packages, security enforcing software and devices, such as identity management and federation, cryptography, public key infrastructure, firewalls, SIEM, vulnerability scanning, etc. Additional Requirements: Must be eligible and willing to obtain UK Government Security Clearance. Find out more information about the Security Clearance ...

with Terraform or CloudFormation.Experience with container or Kubernetes security.Experience with bug bounty, penetration testing or security testing programmes.Experience with Splunk or similar logging/SIEM platforms.Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks.Experience building dashboards, metrics or reports ...

vulnerability management using tools such as Qualys, or Rapid7 InsightVM etc. A background in incident response and SOC operations, ideally with exposure to SIEM platforms like Splunk or Microsoft Sentinel. Working knowledge of network security: firewalls, IDS, RBAC, LAN/WAN/SD-WAN, using platforms such as Palo Alto ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

Security Architect, Solutions Architect, or Security Design Lead within a complex enterprise environment.Strong background across multiple security domains, including Identity & Access Management, SIEM, Cyber Threat Intelligence, Data Security, Application Security, Network Security, and Privileged Access Management.Experience designing security solutions across cloud, infrastructure, networking, automation, containerisation, and end-user technology environments.Strong ...

firewalls, gateways, and load balancers.Strong knowledge of authentication and authorization technologies including SAML, LDAP, and PKI.Proven experience developing security assurance documentation and understanding SIEM operations.Deep understanding of security frameworks, policies, and standards such as MOD JSP, HMG, NCSC, and NIST.Ability to interpret and implement security policies with an emphasis ...

minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using AI tools (Claude, Copilot, ChatGPT) as part of your day-to-day toolkit Strong Azure expertise Bonus points ...

and existing systemsCoordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediationWhat we’re looking forHands-on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) consideredPractical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture managementExperience ...

Bicep) for security tooling.Coordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediation.What you’ll bring:Hands-on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) considered.Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture ...

looking for:Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data.Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations.Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts ...

methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

streamling authentication/authorization to ensure unified access control across the boardDeploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling)Respond to security incidents and harden environments post-incidents.Support control monitoring and remediation for compliance initiativesGather and analyze security ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

leader in consulting, technology services, and digital transformation, committed to delivering positive change through technology and human collaboration. They are looking for a Splunk SIEM Engineer with active SC Clearance in place to design, develop and improve software, utilising various engineering methodologies, that provides business, platform, and technology capabilities … customers and colleagues. You will need to demonstrate your Multi-Platform SIEM Expertise: you need proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience ...

/information security field.Hands-on experience with cybersecurity or IT data sources, such as vulnerability scanners, endpoint detection tools, CMDBs, cloud platforms, identity systems, SIEM/logging platforms, or ticketing systems.Experience with version control tools (e.g., Git/GitHub/Gitlab) o Hands-on experience with data visualization tools (e.g. ...

obtain SC clearance. Interested? Please apply below. SOC Manager, Cyber Security Operations Manager, Security Operations Centre, SOC, incident management, threat intelligence, security monitoring, MSSP, SIEM, CISSP, CISM, ITIL, AWS, Azure, Remote, Contract, Inside IR35 ...

obtain SC clearance. Interested? Please apply below. SOC Manager, Cyber Security Operations Manager, Security Operations Centre, SOC, incident management, threat intelligence, security monitoring, MSSP, SIEM, CISSP, CISM, ITIL, AWS, Azure, Remote, Contract, Inside IR35 ...

years in SOC, Incident Response, or Threat Analysis roles (for Lead role we'll consider 5 - 7years)Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies.Desirable skills:Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC-200, or Splunk Certified Power User.Who ...

management. Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology ...

programme across Asta & its client base. This is a Technical and leading a team of Engineers and provides authoritative security direction across PAM, EDR, SIEM, DLP, identity governance, vulnerability management, and regulatory compliance.The role requires the individual to take responsibility and strengthen Asta’s security posture through hands‐on security … implementing & Integrating security controls into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS/IPS, & other security tools. Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using ...