301 to 325 of 893 SIEM Jobs in the UK

systems. ✔️ Manage and configure firewalls, IDS/IPS, and endpoint security. ✔️ Investigate security alerts and coordinate incident responses. ✔️ Maintain and analyze logs using SIEM tools. ✔️ Conduct digital forensics and root‐cause analysis of incidents. ✔️ Implement data encryption, MFA, and secure access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace and security events with features such as APM, RUM, SIEM, Kubernetes monitoring and more, all enhancing operational efficiency and reducing observability spend by up to 70%.****The Role**As a Technical Account Manager ...

hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity ...

Office 365) and security monitoring. Implement identity and access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices … Squarcle policies and processes. KNOWLEDGE, SKILLS & EXPERIENCE ESSENTIAL Experience in cyber security roles across enterprise or complex environments, including SOC delivery and/or SIEM operations. Strong understanding of: Network security, identity management, and endpoint protection Cloud security (AWS, Azure, or similar) Security frameworks (ISO 27001, NIST, CIS) Proven experience ...

infrastructure, applications and data.Work collaboratively with engineering and security teams to embed security best practices throughout technology environments.Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling.Support firewall and network security management across cloud, hybrid and on-premises environments.Develop, maintain and enhance security policies, standards and … with CI/CD pipelines, virtualisation and Infrastructure as Code (IaC).Strong Linux or WSL experience, with software development or scripting capability.Practical experience with SIEM and log management platforms, including technologies such as:SplunkMicrosoft SentinelCriblELKExperience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP).Scripting or programming skills ...

infrastructure, applications and data.Work collaboratively with engineering and security teams to embed security best practices throughout technology environments.Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling.Support firewall and network security management across cloud, hybrid and on-premises environments.Develop, maintain and enhance security policies, standards and … with CI/CD pipelines, virtualisation and Infrastructure as Code (IaC).Strong Linux or WSL experience, with software development or scripting capability.Practical experience with SIEM and log management platforms, including technologies such as:SplunkMicrosoft SentinelCriblELKExperience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP).Scripting or programming skills ...

infrastructure, applications and data.Work collaboratively with engineering and security teams to embed security best practices throughout technology environments.Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling.Support firewall and network security management across cloud, hybrid and on-premises environments.Develop, maintain and enhance security policies, standards and … with CI/CD pipelines, virtualisation and Infrastructure as Code (IaC).Strong Linux or WSL experience, with software development or scripting capability.Practical experience with SIEM and log management platforms, including technologies such as:SplunkMicrosoft SentinelCriblELKExperience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP).Scripting or programming skills ...

infrastructure, applications and data.Work collaboratively with engineering and security teams to embed security best practices throughout technology environments.Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling.Support firewall and network security management across cloud, hybrid and on-premises environments.Develop, maintain and enhance security policies, standards and … with CI/CD pipelines, virtualisation and Infrastructure as Code (IaC).Strong Linux or WSL experience, with software development or scripting capability.Practical experience with SIEM and log management platforms, including technologies such as:SplunkMicrosoft SentinelCriblELKExperience with AWS, Microsoft Azure and/or Google Cloud Platform (GCP).Scripting or programming skills ...

Infrastructure Security role. Strong understanding of vulnerability management processes and remediation workflows. Experience investigating and responding to security incidents. Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions. Knowledge of operating system security across Mac, Windows and Linux environments. Experience with identity and access management concepts. Understanding … Experience securing public cloud platforms. Knowledge of Microsoft 365 security technologies. Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance ...

Infrastructure Security role. Strong understanding of vulnerability management processes and remediation workflows. Experience investigating and responding to security incidents. Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions. Knowledge of operating system security across Mac, Windows and Linux environments. Experience with identity and access management concepts. Understanding … Experience securing public cloud platforms. Knowledge of Microsoft 365 security technologies. Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance ...

provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect … Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk ...

management/recording, credential rotation, least privilege, EPM/PRA) across on-prem and cloud workloads.* Lead complex integrations with AD/EntraID, IdPs, SIEM/SOAR, CSPM, ITSM, DevOps tooling (CI/CD), and secrets management.* Be responsible for the operational model: backup/recovery, DR, platform upgrades, policy … identity protocols (SAML/OIDC/OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal ...

managing security incidents through their full lifecycle while collaborating with technical and business stakeholders. Key Responsibilities Monitor and investigate security alerts generated by SIEM, EDR/XDR, identity, email, cloud and network security tools. Lead and support cyber security incident investigations, including phishing, malware, account compromise, unauthorised access and data … trend analysis and security governance reporting. Essential Experience Experience working within Incident Response, Cyber Security Operations or SOC environments. Strong hands-on experience with SIEM and EDR/XDR technologies. Proven ability to investigate and respond to cyber security incidents. Knowledge of Windows and Linux security investigations, authentication events, security ...

Operations: Act as the technical lead for major cyber security incidents and critical vulnerabilities impacting West Midlands Police. Establish operational frameworks, playbooks, security monitoring (SIEM/XDR), and simulated wargaming exercises. Governance, Policy & Compliance: Own and update Information Assurance policies aligned with national frameworks (NCSC, NIST CSF, ISO 27001). ...

hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities and security information and event management (SIEM)Lead security technology evaluation and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and operational governanceDrive technical … application securityStrong understanding of threat models, attack vectors and defence-in-depth strategiesProficiency in cloud security (AWS, Azure security, or equivalent)Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.)Understanding of cryptography, encryption and security protocolsFamiliarity with MOD security requirements, Classification Guides and defence standardsKnowledge of compliance frameworks ...

and Engineering to resolve incidents across Security Operations, incident response, vulnerability management and cloud security, with opportunities to develop expertise across platforms like SIEM, EDR/XDR and related tooling. #J-18808-Ljbffr ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Minimum qualifications: Bachelor's degree or equivalent practical experienceCompleted relevant industry course/certification offerings such as CEH, GIAC or CompTIA Sec+.5 years ...

Provides input and support to operational projects related to cyber security Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Experience of delivering/supporting cloud focused security solutions with a solid understanding of current cyber threats (essential) Strong cyber ...

continuous improvement mindset, with a strong focus on protecting essential services and reducing operational disruption. Experience with Azure, identity and access management, network segmentation, SIEM/SOC integration, incident response, critical national infrastructure, water utilities or other regulated operational environments would all be advantageous. What We Offer You’ll join ...

relevant industry certifications (e.g. CySA+, Security+) and risk management knowledge (essential) Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Self-motivated with a willingness to go the extra mile to achieve important goals (essential) Excellent verbal and written communication ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative ...

ensure secure delivery across the programme. Experience Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and ...

high standard on threat hunting, threat intelligence utilisation, and automated response, not just SLA compliance. Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves. Build the internal team into a trusted escalation layer, with clear incident response playbooks ...

security design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation ...