301 to 325 of 458 SIEM Jobs in the UK

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

enabled risk.Key ResponsibilitiesLead security and IT projects to enhance the security posture of infrastructure and the companyDetect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling (e.g. CrowdStrike, SentinelOne)Conduct threat hunting across cloud and endpoint environments using a Zero Trust frameworkAdminister company-wide IAM and security monitoring … Science or a related field, or significant professional security experience 3+ years of hands-on experience in security engineering and incident response Experience with SIEM platforms and security monitoring systems Experience with EDR tools such as CrowdStrike or SentinelOne Knowledge of SOAR platforms and automation of security workflows Familiarity with ...

network security configurations and changes accuratelyPerform routine security device maintenance and updates under guidanceSecurity Technology Configuration Support deployment and configuration of security technologies including SIEM, EDR, and endpoint protectionAssist in integrating security tools with existing infrastructure under supervisionConfigure security monitoring rules and alerts based on approved templatesSupport security technology testing … and exceptionsSupport remediation activities for configuration vulnerabilitiesMaintain secure configuration templates and standard operating proceduresSecurity Monitoring and Incident Support Monitor security alerts and events from SIEM and security tools under guidancePerform initial triage of security incidents and escalate appropriatelyAssist in security incident investigations and evidence collectionDocument security incidents and response actions ...

and maintain detection coverage for cloud-native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud.Vulnerability & Configuration Management: Own vulnerability management for cloud workloads … Terraform, CloudFormation) and integrating security scanning into CI/CD workflows.Good experience with container and image security — scanning, runtime protection, supply chain risk.Experience with SIEM and detection engineering — building and tuning cloud-native detection rules, threat hunting across CloudTrail and application logs.Familiarity with automation platforms and AI-driven security tools ...

problem solving and influencing best practice, this role offers real scope to make an impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with … Proven experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding ...

problem solving and influencing best practice, this role offers real scope to make an impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with … Proven experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding ...

/CD pipelines; integrate and maintain code scanning platformsDetection, operations & toolingMonitor and respond to security events and incidents in cloud and hybrid environmentsMaintain SIEM data pipelines needed for reliable alertingBuild, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (e.g., Puppet)Develop dashboards and alerts from security … and configuration management (e.g., Puppet)Hands-on experience building GitHub Actions and workflowsExperience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)Experience in building custom cloud security tools or integrationsInterest in leveraging AI for cloud security monitoring and automationContributions to open-source ...

shaping the future of fintech – and we’re just getting started.The roleYou will evolve Checkout.com's security posture across our multi-cloud environments and SIEM platform. This role sits at the intersection of cloud security engineering and detection capability — responsible for both hardening the infrastructure we operate on and ensuring … security baseline across AWS, Azure, and GCP.You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking on the most complex cloud security and detection engineering challenges across the organisation.What you’ll be responsible forCloud SecuritySecure and continuously improve ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology.A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements.Key ResponsibilitiesOwn the incident … definition, SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance.Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks.Own the vulnerability management programme (on‐prem ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

department evolves. Regular team events and knowledge-sharing sessions create a supportive, engaging place to work.Key ResponsibilitiesDetect and investigateMonitor and triage alerts across SIEM, EDR or XDR, email and web security platforms.Investigate suspicious activity and determine whether escalation is required.Follow SOC runbooks and investigation workflows.Build clear timelines of activity and … indicators of compromise such as unusual processes, network connections, irregular logon activity or file changes.Hands-on experience with at least one major security platform (SIEM, EDR or XDR).Familiarity with ticketing tools such as ServiceNow, Salesforce, or JIRA.Familiarity with Windows event logs, authentication logs, basic process trees, and command-line ...

incident reviews and ensure improvements are implemented and follow-upscompleted.• Support incident metrics (MTTD, MTTR, recurrence, etc.)SOC Tooling & Platform Operations• Operate and improve SIEM, EDR, email security, case management, and vulnerabilitytools.• Monitor health, coverage, data quality, and integrations.• Troubleshoot ingestion, parsing, API, and configuration issues.• Build and maintain integrations … 7+ years in SOC, incident response, detection engineering, or security engineering.• Experience leading complex security incidents end-to-end.• Strong hands-on experience with SIEM, EDR, and security tooling.• Experience building and tuning detections and queries.• Experience with log onboarding, telemetry pipelines, and data quality issues.• Strong vulnerability management and ...

start or grow their career in cybersecurity, with opportunities for advancement and skill development.RequirementsKey Responsibilities:Monitor security alerts and events from Microsoft Defender, SIEM and other security tools.Perform initial triage and analysis of security incidents.Escalate verified incidents to Tier 2/3 analysts as needed.Document incidents, investigations, and response actions … Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts (TCP/IP, DNS, firewalls).Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and endpoint protection.Strong analytical and problem-solving skills.Excellent written and verbal communication skills.Ability to work in a fast-paced, team-oriented ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures ...

state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and deliveredcompelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … capacityProven, demonstrated experience leading technical client conversations at the CISO, security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementProven experience with enterprise security architectures ...

custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing. Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics. Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques. Current and active UK Developed … Vetting (DV) Security Clearance. Responsibilities: Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents ...

storage requirements.Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure.Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate ...

EngineerAs a Senior SOC Engineer at Nomios, you'll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection … intelligent workflows. You’ll also lead customer onboarding in collaboration with SOC Operations, ensuring secure, efficient deployments aligned with our model. Working directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and ...