251 to 275 of 893 SIEM Jobs in the UK

networking, identity management, cloud services, virtualization, and Windows, Linux, and macOS environments. Solid understanding of cybersecurity technologies and practices, including security operations, incident response, SIEM, XDR, EDR/EPP, IDS/IPS, and related security frameworks. Ability to communicate complex technical concepts and articulate business value to both technical stakeholders ...

have an Incident Response or Information Security background that you’re not fully utilizing.Do you work with EDR, DLP, Firewall, and/or SIEM technologies or desire to Are you capable of leading teams and interacting well with customersDo you love working around like-minded, smart people ...

Cloud for security posture and compliance management Proficiency in Entra ID including Conditional Access, Privileged Identity Management (PIM), and identity governance Familiarity with SIEM platforms such as Microsoft Sentinel or Splunk — desirable Working knowledge of data protection legislation including GDPR and practical implementation of compliance controls — desirable Scripting or automation ...

and Active Directory integration* Experience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco Duo* Experience supporting both BAU operations and project-based delivery within complex enterprise environments.* Strong troubleshooting and root-cause ...

preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC‐200, or Splunk Certified Power User. Essential Skills and Experience: Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behavior, and incident handling methodologies. Closing Date for Applications: 01/06/2026 Accenture reserves the right to close ...

Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and … security, network architecture and hybrid environment security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

Housing Association is seeking a Cyber Security Engineer to design, implement and maintain cyber security capabilities. You will work across Microsoft security technologies, IAM, vulnerability management, incident response and cloud security, providing security guidance on ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

capability investigating threats in enterprise and production environments, taking ownership from identification to resolution. Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber ...

systems remain secure, resilient and compliant. You will own vulnerability management, incident triage, and threat detection using Microsoft Defender, Entra ID/AD, and SIEM with KQL. The role offers hybrid working (1 day per week in South London) with potential to move into a #J-18808-Ljbffr ...

capabilities, including: Zscaler Digital Experience (ZDX)Zscaler DeceptionZPA Privileged Remote Access (PRA)Experience with AWS cloud platform Experience integrating cloud security with SOC/SIEM platforms Understanding of Telecoms Security Act (TSA) requirements and implementation patterns Experience working in regulated environments such as telecommunications or critical infrastructure Exposure to DevSecOps ...

knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting capabilities. Understanding of vulnerability management, penetration testing and security remediation. Experience developing cyber security KPIs, KRIs and management reporting. Strong people ...

frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or ITIL are desirable. ...

Agile methods such as SCRUM; Enterprise security packages, security enforcing software and devices, such as identity management and federation, cryptography, public key infrastructure, firewalls, SIEM, vulnerability scanning, etc. Additional Requirements: Must be eligible and willing to obtain UK Government Security Clearance. Key Attributes for Success: Ability to engage effectively with ...

Security monitoring, managing security cases & tickets, security incident analysis, and other security tasks. Analysing a variety of security logs to identify actionable events (SIEM reports, alerts, tickets, system, network, security monitoring tools) Determine the attack type based on the triage of events collected Demonstrate analytical & technical thinking when triaging system ...

remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security MonitoringDesign, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks. Develop advanced threat hunting queries and investigation workflows. Onboard and … security initiatives. Required Experience5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell ...

and security-awareness activity, and report on incidents, vulnerabilities and control evidence to technical and non-technical stakeholders. Qualifications Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC. Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure ...