226 to 250 of 893 SIEM Jobs in the UK

TPRM platform (desirable). Incident management Coordinating security incidents, keeping records and preparing customer or regulatory notifications. Technical literacy Enough understanding of cloud, SIEM and vulnerability management to read a service report or scan output and ask the right questions. You will not be writing detection rules. Communication and ways ...

CloudFormation. Experience with container or Kubernetes security. Experience with bug bounty, penetration testing or security testing programmes. Experience with Splunk or similar logging/SIEM platforms. Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks. Experience building dashboards, metrics ...

Essential Skills & Experience 2-3+ years' experience working in a Security Operations Centre (SOC) Analyst or Security Operations role. Hands-on experience with SIEM, EDR, and MDR technologies. Experience with security tooling such as CrowdStrike , Microsoft Defender , or similar platforms. Proven experience investigating and responding to cyber security incidents. ...

Paris, London, Toronto and NYC MacOS, Windows, Linux workstationsGCP, Kubernetes, Terraform, Postgres, SingleStore, VaultOkta, OAuth, JWT, C#, .NET Core, TypeScript, React, Python, GoDatadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHogGoogle Workspace, Jumpcloud, Vanta, Hibob, SlackGitHub, CircleCI, ArgoCDSOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 42001Who ...

actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking knowledge of identity and access systems and common attack paths, including credential theft, privilege escalation, and session ...

Toronto and NYC MacOS, Windows, Linux workstations GCP, Kubernetes, Terraform, Postgres, SingleStore, Vault Okta, OAuth, JWT, C#, .NET Core, TypeScript, React, Python, Go Datadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHog Google Workspace, Jumpcloud, Vanta, Hibob, Slack GitHub, CircleCI, ArgoCD ...

model and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

privilege . Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation ...

privilege . Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation ...

such as NIST, with the ability to prioritise workloads and make risk-based decisions Experience managing or supporting security technologies including EDR, PAM and SIEM platforms, alongside a good understanding of firewall and web application firewall (WAF) technologies Knowledge of AWS and Azure cloud environments and experience working within regulated ...

governance processes and cyber resilience activities will help you succeed in the role. Professional certifications such as CISSP or CISM, along with experience of SIEM/SOAR technologies, would be advantageous.This is an excellent opportunity to contribute to the security of critical renewable energy infrastructure while working on meaningful challenges ...

and out of hours coverage.* You will keep the lights green on all Security Toolkit Infrastructure within our remit and support various toolsets including SIEM, IDPS, GVM and Malware Protection.* You will record and respond to health alerts from the Security Infrastructure we maintain.* You will learn how to tune ...

experience and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Strong teamwork skills and attention to detailAbility to work independently as needed yet always thinking as part of a teamSelf-motivation and ...

security tooling. Coordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediation. What you’ll bring: Hands‐on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) considered. Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

architecture, responsible AI standards, guardrails or governance, including Generative AI or Agentic AI, within a regulated environmentHands-on experience with security tooling such as SIEM, firewalls and IAM solutionsExperience with regulatory compliance such as GDPR or PCI-DSS within financial servicesFamiliarity with programming languages such as Python, Java or C++ ...

responsible AI standards, guardrails or governance, including Generative AI or Agentic AI, within a regulated environment Hands-on experience with security tooling such as SIEM, firewalls and IAM solutions Experience with regulatory compliance such as GDPR or PCI-DSS within financial services Familiarity with programming languages such as Python, Java ...

response tools and platforms. Experience with managing and operating EDR platforms i.e. Crowdstrike, SentinelOne, or Microsoft Defender for Endpoint. Experience developing and using a SIEM platform e.g. QRadar or Azure Sentinel. Strong knowledge of cybersecurity concepts, tools, and techniques. Ability to work well under pressure in high-stress situations. Strong ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

artefacts, file systems, persistence mechanisms, lateral movement techniques, and file-less attacks.Experience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions.Hands-on knowledge of forensic tools such as X-Ways, EnCase, Autopsy, TimeSketch, and Plaso, with familiarity in cloud forensics and ...

analytics Experience advising senior stakeholders, including CISOs and cyber defense leaders, on strategy, maturity, gaps, target‐state design, and actionable improvement roadmaps Experience with SIEM, SOAR, XDR, EDR, NDR, IAM, cloud security platforms, and enterprise security technologies Experience developing proposals, technical solution narratives, roadmaps, business cases, and client‐ready presentations ...

Proven experience delivering IT or Cyber Security projects. Strong understanding of cyber security principles, technologies and best practices. Experience delivering projects involving cloud security, SIEM platforms, Microsoft security technologies, compliance programmes or infrastructure security. Excellent stakeholder management and communication skills. Previous experience within a Cyber Security or Networking environment. Eligible ...

enterprise-scale digital forensic investigations across Windows and Linux operating systems. Experience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions. Hands-on knowledge of forensic tools such as X-Ways, EnCase, Autopsy, TimeSketch, and Plaso, with familiarity in cloud forensics ...

networking, identity management, cloud services, virtualization, and Windows, Linux, and macOS environments. Solid understanding of cybersecurity technologies and practices, including security operations, incident response, SIEM, XDR, EDR/EPP, IDS/IPS, and related security frameworks. Ability to communicate complex technical concepts and articulate business value to both technical stakeholders ...