276 to 300 of 893 SIEM Jobs in the UK

storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. Ability to analyze and interpret logs from various sources. Familiarity with SIEM and SOAR solutions. Ability to perform threat research and analyze current threats. Understanding of business email compromise (BEC) cases and investigation techniques. Business Responsibilities Fluent ...

experience with security tools and technologies fit for a cloud environmentExperience working across a technology stack on difficult security challenges and initiativesExperience with SIEM platforms and the ability to extend their functionalityExperience with SOAR tools and automating manual security processesExperience in either AWS, GCP, or other large cloud platformExcellent written ...

response, and managed security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement ...

artifact signing and provenance, pipeline integrity, datacentre network segmentation, ML framework exposure, data flows between datacentre and cloud. Detection & Response : Logging strategy, alerting and SIEM concepts, threat hunting, incident response, forensics fundamentals, tabletop exercises, backup and recovery testing. Nice to Have Certifications such as OSCP, OSWE, CRTO or AWS Certified ...

Chronicle/Siemplify, Microsoft Sentinel, Palo Alto XSOAR, Torq, Tines). Hands‐on experience with APIs and security tool integrations. Understanding of security technologies (SIEM, EDR, VM, Networking & Firewalls, IDS/IPS, Cloud, Web proxy, etc.). The role hybrid with travel to their London office 2-3 days ...

environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such ...

/Entra ID, Group Policy, O365, IntuneSolid networking foundations: TCP/IP, VLANs, DNS, VPNs, Wi-FiSecurity engineering knowledge: System hardening, endpoint security, SIEM, incident handlingISO27001, GDPR or PCI compliance exposureCertificates (SSL/TLS), WAF/DDoS, email securityAzure engineering background: Governance, networking, identity and security configurationOwnership mindset and strong ...

Engineering, Traditional Network Security, Storage and access security, Sandboxing, Compute security, etc.). Experience with Enterprise Security and SaaS applications. Working knowledge of a SIEM and SOAR. Experience building Incident Response Tooling, scripting language skills and experience with AI coding tools. About Databricks Databricks is the Data and AI company. ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security Monitoring Design, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks. Develop advanced threat hunting queries and investigation workflows. Onboard … initiatives. Required Experience 5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell ...

vendor/third‐party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

capabilities at scale. Serve as the Windows platform product owner for cross‐portfolio teams, including Sophos XDR, EDR, MDR, Workspace Protection, X‐Ops, NG‐SIEM, and Endpoint Management. Use endpoint telemetry, customer feedback, field input, support trends, competitive analysis, and platform data to prioritize work and make clear product decisions. ...

platforms: AWS (S3, RDS, Glue), Azure (ADLS, Purview), GCP (BigQuery) Data cataloguing tools — Collibra, Alation, Informatica ETL pipelines and data lineage concepts Security & Privacy SIEM/DLP tools integration (Splunk, Microsoft Purview) Identity & Access Management basics (IAM, RBAC) Encryption, tokenization, and data masking techniques Scripting & Automation Python/Bash ...

Service Manager System Center Operations Manager Trelix Endpoint Protect/Trend Micro Apex One Security/Nextcloud/Cireson Asset Management/ManageEngine Log360 SIEM/IRIS CACADE/Veeam Backup and Restore/Solutions Factory Symphony Desirable Qualifications: TOGAF - The Open Group Architecture Framework CISSP - Certified Information Systems Security ...

efficiency and drive business outcomes. Deep technical knowledge of modern cybersecurity technologies including endpoint security, XDR/EDR, cloud security, identity and access management, SIEM/log management, incident response, and threat intelligence Experience with security transformation programs, including Zero Trust architecture, cloud migration security, legacy estate modernisation, and security ...

incremental, waterfall) with senior stakeholders and government systems. Technical & Architectural Competencies SOC Technologies: Design, build, and deployment experience using at least two core technologies: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Architectural Frameworks: Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and system modeling. Environments: Proficiency in both On-Premises ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

Develop and maintain our Operational Technology infrastructure including VMWare vSphere, Microsoft and Unix based platforms. Implement and maintain security tooling such as firewalls, AV, SIEM, and vulnerability scanning. Support the OT Incident and Change process. Support system testing for new releases and assist projects with testing standards. Represent ...

detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with SIEM, IDS, and EDR, plus problem-solving skills to drive rapid uplifts in security posture. #J-18808-Ljbffr ...

security, having worked within a compliant environment, and comfortable in security audits and risk conversations.* Comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC.* Observability ownership with Datadog (or equivalent), having defined SLOs, built the dashboards and set the alerting culture.* Experience leading or mentoring a DevOps ...

roles. Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC‐200, or Splunk Certified Power User. Essential Skills Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies. #J-18808-Ljbffr ...

engineering experience. Advanced Python development skills including REST APIs, JSON processing, testing and debugging. Experience developing and maintaining production Splunk SOAR playbooks. Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows. Experience using Git and software development best practices. Strong understanding of SOC operations and incident ...

detection-as-code discipline across the detection lifecycle: version-controlled content, release rigor, automated testing, and telemetry quality standards, executed jointly with the SIEM, SOAR, & Agent Development team that owns the underlying pipeline and platform. Drive operational measurement toward compressing the defender's detect-decide-act cycle against AI-accelerated ...

high-pressure, time-sensitive incident environments Willingness to work some weekends and holidays as part of a rotation Desired: Hands-on experience with EDR, SIEM, and forensic collection tools Familiarity with OSQuery, SQL, or KQL Knowledge of MITRE ATT&CK and incident response frameworks Industry certifications such as GCIH, GCED ...