276 to 300 of 458 SIEM Jobs in the UK

operations and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting … common exploits. Understanding of threat vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...

work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats.Key ResponsibilitiesMonitor and respond to security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation … environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering, or infrastructure security roleGood knowledge of networking and common attack types (e.g. SQL injection, phishing, malware)Experience with ...

security telemetry to identify emerging threats, improve detection capabilities and help shape our Security Operations roadmap.Support the administration, configuration and continuous optimisation of our SIEM platform (Splunk), ensuring it remains resilient, up to date, cost effective and aligned with industry best practice.Partner with Engineering and Technology teams to embed security … investigate security events and make informed, risk-based decisions.Experience working with security technologies such as Microsoft Defender, endpoint detection and response (EDR) solutions and SIEM platforms.Experience working with Web Application Firewalls (WAF), including creating, tuning and maintaining WAF rules to protect internet-facing applications, would be highly beneficial.Experience with vulnerability ...

globe every day.Perform ongoing threat hunting, analysis, containment, and remediation of threats identified through advanced endpoint detection and response (EDR), endpoint prevention (EPP), SIEM, and related security tools.Collect and review relevant forensic artifacts to identify root cause and understand nature of threats.Develop and communicate written and verbal threat reports associated … various scripting languages and tools (PowerShell, Python, VB, Yara)Working knowledge of TCP/IP and related networking concepts.Prior experience using Splunk or other SIEM solutions, intrusion detection solutions, or related security products.Relevant cyber security certifications including CISSP, GCIA, GCIH, GCFA, GMON, or GREM a plus.Excellent written and verbal communication ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

deployment. Automate cloud security processes, escalations, and remediation activities. Ensure cloud infrastructure follows security, governance, compliance, and software lifecycle standards. Monitor cloud environments using SIEM, cloud security tooling, and observability platforms. Support incident, problem, and change management processes. Work with container platforms such as Docker, Kubernetes, ECS/ ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...