26 to 50 of 460 SIEM Jobs in the UK

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

achieve it Within commuting distance (~1 hour) of Canary Wharf, London Technical Skills Strong KQL skills for threat hunting and incident forensics Experience with SIEM, IDS/IPS and threat intelligence platforms Familiarity with incident response frameworks and security best practice Experience with scripting and automation (e.g. Azure Logic Apps ...

Virtualisation: Hyper-V, VMware; cloud platforms (Azure, AWS, GCP). Communication Systems: VoIP, IP CCTV. Backup & DR: Veeam, replication, failover. Security: Firewalls, endpoint protection, SIEM tools (Splunk, Sentinel); ISO 27001, GDPR compliance. OS & Tools: Linux, PowerShell/Bash/Python scripting, ITSM platforms (ServiceNow, Fresh Service). A great opportunity ...

function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple ...

security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive ...

incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats ...

Databricks ITSM : ServiceNow EUC : Intune, SCCM Applications : CRM, ERP, HCM, Finance Infrastructure : servers (cloud/on prem), networking, storage, backup Cloud : Azure Cyber Security : SIEM, XDR, IPS/IDS, NIST, ISO27001 ...

similar) Nice to have BGP, FlowSpec, and traffic engineering knowledge NetFlow/sFlow analysis IDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump) SIEM experience (Splunk) Linux proficiency Virtualisation (KVM, ESXi) Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIH Bright Purple is an equal opportunities employer ...

Microsoft Intune, or similar cloud technologies. PowerShell scripting experience for automation and operational tasks. Familiarity with Microsoft MMC, Event Viewer, and monitoring or SIEM tools. Understanding of backup, recovery, and disaster recovery processes. Experience working within ITIL-based service management environments. Knowledge of security frameworks and standards such as NIST ...

Microsoft Intune, or similar cloud technologies. PowerShell scripting experience for automation and operational tasks. Familiarity with Microsoft MMC, Event Viewer, and monitoring or SIEM tools. Understanding of backup, recovery, and disaster recovery processes. Experience working within ITIL-based service management environments. Knowledge of security frameworks and standards such as NIST ...

Microsoft Intune, or similar cloud technologies. PowerShell scripting experience for automation and operational tasks. Familiarity with Microsoft MMC, Event Viewer, and monitoring or SIEM tools. Understanding of backup, recovery, and disaster recovery processes. Experience working within ITIL-based service management environments. Knowledge of security frameworks and standards such as NIST ...

platform experience (e.g. Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

common cyber threats, attack vectors and malware types A good understanding of networks, operating systems and core security concepts Exposure to any recognised SIEM or security monitoring technology, such as Microsoft Sentinel, Splunk, Microsoft Defender or IBM QRadar Ability to remain calm and perform effectively under pressure Strong communication and ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

enterprise/defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

Threat Detection Engineer required for global legal firm. You will be responsible for advancing the maturity of the SIEM platform alongside other strategic security solutions, working closely with internal teams to improve the organisation's overall security posture. This position focuses on onboarding new log sources, optimising data pipelines, developing … review of security controls. There may occasionally be a requirement to support out-of-hours changes or respond to critical security incidents. Key Responsibilities SIEM Engineering & Optimisation Enhance and optimise SIEM performance, coverage, and detection fidelity Assess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logic Implement automation ...

this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems (IDS/IPS), vulnerability management tools and Firewall, DLP, Web and Email Security Gateways.This … and help coordinate, routine security event monitoring and investigations using available toolsUse, configure and develop the use of a security information and event management (SIEM) and EDR toolMonitor and configure network intrusion detection and prevention systemsAnalyse and create reports for security incidents, to determine root cause and lessons learntCreate and ...

Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast SD-WAN Technologies SIEM and Security Monitoring Platforms About You We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder ...

organisation. • Identify opportunities to improve and automate security processes, reporting, and operational controls. Skills & Experience: • Experience using security monitoring tools such as Microsoft Defender, SIEM platforms, or similar technologies. • Strong analytical and investigative skills. • Understanding of vulnerability management and incident response processes. • Familiarity with security standards and frameworks such ...

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

effective investigation and resolution Oversee vulnerability management and support patching activities, validating effectiveness through scanning and review Operate and support key security technologies including SIEM, endpoint protection and email/web security tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Strong understanding of information security principles, risk management and the threat landscape Experience operating and monitoring security tooling such as SIEM, endpoint protection and email/web security solutions Ability to conduct proactive threat hunting and contribute to improving detection capability Awareness of cloud security controls ...

monitoring and cyber incident response, including internal SOC and third-party services Overseeing detection, triage, investigation and response to threats using security tooling (e.g. SIEM, SOAR, EDR/XDR) and acting as the senior escalation point and cyber incident commander where required Ensuring incident response plans, playbooks, testing, and post ...

areas, including: Identity and Access Management Azure and Microsoft 365 security Secure configuration and hardening Vulnerability management Endpoint and network security Logging, detection and SIEM Proven experience leading remediation, not just conducting assessments Strong track record of delivering measurable outcomes and demonstrable risk reduction Ability to engage credibly from engineering ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...