351 to 375 of 871 SIEM Jobs in the UK

and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.* Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.* Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities … security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, etc.).* Hands-on experience with security technologies including Microsoft Defender, Zscaler, SIEM platforms (e.g. Google SecOps), and identity platforms (e.g. Azure/Entra, Okta).Hands on experience in incident response, threat detection, and vulnerability management within an enterprise ...

and evidence collection. Develop command line tools, APIs, integrations and workflows that simplify assurance activity. Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools. Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities. Use data ...

hunting, support detection automation, and help drive remediation with cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...

and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands-on SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...

handling incident remediation and guiding both technical and non-technical teams with security best practices. The ideal candidate brings cloud security expertise, familiarity with SIEM/SOAR/EDR tools, and knowledge of frameworks like NIST/ISO. Willingness to obtain required UK clearance is essential. #J-18808-Ljbffr ...

monitor threats, investigate incidents, and drive improvements in security posture with advanced tooling and automation. Role requires hands-on expertise with firewalls, WAFs, VPNs, SIEM/SOAR, and Zero Trust. Hybrid working with in-office presence in Osterley is expected as part of Sky’s campus culture. #J-18808-Ljbffr ...

customers. What are we looking for? Understanding of managed security services and the wider cyber security market. Awareness of modern cyber security technologies, including SIEM, XDR and EDR solutions. Good understanding of the Microsoft Security ecosystem. Experience supporting cyber security sales, pre-sales or customer engagement activities. Ability to communicate ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

having an understanding of Linux.Awareness of the following roles with a knowledge of at least one:First Line SupportCyber SOC AnalystSecurity Platform Administration – i.e. SIEM or EDRTechnical Account ManagementService Operations – WorkflowCyber Project ManagementMust Have:• Ability to articulate with a customer or team member written or verbally• Ability to listen and ...

Analysts to manage Authority’s environment’s systems. Skills/Experience: Previousexperience of Enterprise ICS/network architectures and technologies Experienceand knowledge of SIEM solutions; having the ability to identify use cases andtheir creation, their deployment and tuning. Experienceas a mentor/coach to junior analysts Previousexperience of utilising ...

with SOC 2 and ISO‐27001 Strong understanding of cloud security principles (networking, IAM, secrets management, logging, monitoring) Experience implementing security tooling such as SIEM, EDR, and CSPM security platforms Track record of building scalable, pragmatic security programs in high‐growth environments Ability to balance strong security practices with usability ...

incidents, and support continuous improvement. You should have a background in IT or cybersecurity, strong analytical thinking, and good communication. Nice-to-have SIEM experience (QRadar, Splunk, Sentinel) and knowledge of TCP/IP and common threats. #J-18808-Ljbffr ...

Proactive individual, able to handle multiple topics/incidents in parallel. Essential Skills: Good knowledge of multiple SOC tooling including IDPS/Firewalls/SIEM/Splunk/Email & Web Protection etc. Experience of implementing and fault finding Firewall technologies including Cisco ASR/Palo Alto/Fortinet Excellent understanding ...

Intune. Experience ofIdentity & Access Management Principles and Practices. Experience of Cyber Security principles and practices, including the administration and use of Microsoft Defender and SIEM tools. Experience ofApplication Packaging Principles and Practices. There will be opportunities for development and training. Part of the EUC Development role is packaging applications ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

with senior level executives Solid understanding of enterprise networking technologies: switches, routers, firewalls, load balancers, WAN optimization technologies, AI/Agentic AI, Data Lake, SIEM, SOAR and so forth is a plus Background in software/hardware sales and distribution with large software, hardware, and/or networking companies Ability ...

control environments. Experience with SDN, network virtualisation, data-centre technologies or network automation . Knowledge of cyber-security technologies such as next-generation firewalls, SIEM, IAM and OT security monitoring. Experience planning design packages and preparing deliverables for formal client submissions. Why This Opportunity? This is an opportunity to work ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

telemetry uplift. Minimum Qualifications Experience in detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

commercial enterpriseExperience working with and relationships across financial services, manufacturing, retail or CPG, healthcare, or energy or utilities marketKnowledge of modern security stack, including SIEM/SOAR, EDR/XDR, IAM, data security, or cloud security, and where AI is being adopted across itKnowledge of emerging AI-security topics, including ...

Customer Experience, Engineering, Sales, and MarketingNice to HaveFamiliarity with adjacent security infrastructure such as Crowdstrike, Netskope, or Palo Alto mail/gateway solutions, EPP, SIEM, or DLPFamiliarity with AI tools (e.g., Claude) to aid in day-to-day enablement and content developmentRelevant industry certifications (vendor-specific, CompTIA Security+, CISSP ...

Sanderson Government and Defence seeks a SOAR/SIEM Security Engineer for a critical national infrastructure project. You will design and automate detection workflows, tune Splunk dashboards and support live incident response in OT/IT environments, while maintaining high availability and safety standards. This 18-month FTC role requires ...

setup (1 day onsite per week initially, potential for remote work after week one). You will monitor, triage, and investigate security incidents using SIEM (Microsoft Sentinel) and Defender, with emphasis on incident response and root-cause analysis in a large enterprise environment. #J-18808-Ljbffr ...

industry standards for log source onboarding. Ready to take your expertise to the next level? Get in touch today! Responsibilities: Onboard clients to the SIEM platform and integrate relevant log sources to detect and investigate security intrusions Measure and improve the quality of security telemetry, identifying insufficient logging levels and ...