351 to 375 of 458 SIEM Jobs in the UK

join our SOC. The role focuses on monitoring security s, performing initial triage, and escalating potential incidents to higher-level analysts.Key ResponsibilitiesMonitor security tools (SIEM, EDR, IDS/IPS) for s and suspicious activityPerform initial triage and classification of security eventsEscalate confirmed or high-risk incidents to SOC L2/… common threats and attack techniquesRequirementsBasic knowledge of networking (TCP/IP, DNS, HTTP)Understanding of cybersecurity fundamentals (malware, phishing, brute force, etc.)Familiarity with SIEM and EDR tools (e.g., Splunk, Sentinel, Defender and CrowdStrike) is a plusStrong analytical and problem-solving skillsGood written and verbal communication skills in englishAbility ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniquesAdvanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem, cloud ...

community relying on our solutions.Bonus PointsPrior experience at an open-source or developer‐centric infrastructure company.Familiarity with observability (logs, metrics, traces) or security analytics (SIEM/XDR) use cases.If you’re driven to build your own pipeline, master complex deal cycles, and help customers unlock the power of Search ...

storage requirements.Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate ...

assets from threats and risks by monitoring, detecting, analysing, and responding to security incidents. Key Responsibilities Oversee the day to day running of our SIEM solution (Chronicle) working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team. Define and facilitate the creation of new rules … fine-tuning existing rules within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these ...

Operations (SecOps) team reporting into the IT Security Manager for the firm. Responsibilities: - Maintain and optimise the Security platform, including configuring EDR policies, tuning SIEM rules, and optimising the system for performance - Monitor for security threats, analyse alerts, and respond to incidents using security tools; conduct vulnerability scans and support … Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access Required Skills/Experience: - EDR - platform management, EDR policy configuration, and SIEM tuning - Microsoft Security: Defender (ATP), Azure Security Centre, Entra ID, Intune, Conditional Access - Identity and Access Management: CyberArk, Entra ID, SSO, MFA, and PAM solutions ...

Microsoft 365, Azure, Entra ID, Intune and Defender would be helpful. We would also welcome experience of areas such as vulnerability management, incident response, SIEM or Managed Detection and Response services, supplier assurance, cyber security frameworks or NHS information governance requirements. At NTW Solutions, our work supports better care. … technologies or security analytics. Desirable Experience of line managing, supervising, supporting, coaching or providing technical direction to cyber security or technical staff. Experience of SIEM, Managed Detection and Response, threat intelligence, supplier assurance or third-party cyber security activities. Skills and Knowledge Essential Good understanding of cyber security principles and ...

lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons learned and ensuring improvement actions are delivered. Alongside this, you'll configure and optimise SIEM, threat protection and case management platforms, developing new detection rules, alerts and automation to improve our ability to identify and respond to emerging threats.You … Defence or Incident Response in a complex enterprise environmentProven experience managing the end-to-end security incident management lifecycleHands-on experience configuring and administering SIEM, threat protection, logging and case management platformsExperience developing threat detection use cases, alerts, dashboards and operational reportingStrong understanding of security monitoring, investigation, triage, containment, recovery ...

Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting … clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities ...

e.g. Fluent Bit). Understanding of container security principles and cloud-native security. Scripting and automation skills (Python, Bash or similar). Experience configuring SIEM platforms. Understanding of security frameworks and threat frameworks such as MITRE ATT&CK . Desirable Experience with Microsoft Defender. Experience with additional SIEM or observability ...

customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.Your role as Senior Security Engineering ConsultantThe Security Engineering Consultant role sits within the Security Operations … within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A key aspect of the role ...

enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies, procedures … cyber threats and recommend improvements where appropriate Key Skills & Experience: * 2-4 years' experience within a cybersecurity or infrastructure security role * Experience working with SIEM tools and vulnerability management platforms * Strong understanding of EDR, XDR, MDR, IDS/IPS technologies * Good knowledge of Microsoft security technologies and infrastructure environments * Understanding ...

workflows.Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse … and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing consumer-facing web and iOS/Android applicationsExperience designing policies and administering Vault & other Hashicorp products.Experience managing ...

playbooks in SOAR platforms to streamline investigation, triage, and response actionsDevelop PowerShell and Python scripts for security enrichment, remediation, and basic forensic functionsAssist with SIEM query integration into automated workflows to provide context for security investigationsApply data parsing techniques using JSON and Regular Expressions for security data manipulationMonitor and optimize … logic within automation or workflow platformsDesign and execute workflow validation and quality assurance testing strategies to ensure automation reliability and detection integrityBasic understanding of SIEM query languages and security analyticsFamiliarity with data formats (JSON) and Regular Expressions for data parsingUnderstanding of incident detection and response workflows in SOC/ ...

Designs, including specification of interfaces between solution components. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment … tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating … role include:Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environmentsProactively hunting for threats and developing detection logic across SIEM and cloud security systemsParticipating in red and purple team exercises to test, validate and enhance detection and response capabilitiesDeveloping and maintaining automation workflows using tools ...

workflow and delivery management. Understanding of cloud and container security principles. Exposure to core cyber defence technologies (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)). Strong data analytics capability, using insights to inform incident response and continuous improvement. Awareness of software development lifecycles and product … workflow and delivery management. Understanding of cloud and container security principles. Exposure to core cyber defence technologies (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)). Strong data analytics capability, using insights to inform incident response and continuous improvement. Awareness of software development lifecycles and product ...

Vodafone customer environments and internal infrastructure by providing continuous 24/7 security monitoring and initial alert triage.You will review and analyse security alerts generated by SIEM platforms and associated security tools, assess their relevance and severity, and escalate suspected security incidents in accordance with documented procedures and service level … areExperience working in a Security Operations Centre or similar operational environment.Ability to interpret and analyse logs and alerts from IT, network, and security systems.Experience with SIEM technologies such as Huntsman, Securonix, or Splunk.Foundational knowledge of IT and network security concepts (e.g. Windows, firewalls, IPS, web proxy, email security).Demonstrated interest ...

customer environments and internal infrastructure by providing continuous 24/7 security monitoring and initial alert triage. You will review and analyse security alerts generated by SIEM platforms and associated security tools, assess their relevance and severity, and escalate suspected security incidents in accordance with documented procedures and service level … working in a Security Operations Centre or similar operational environment. Ability to interpret and analyse logs and alerts from IT, network, and security systems. Experience with SIEM technologies such as Huntsman, Securonix, or Splunk. Foundational knowledge of IT and network security concepts (e.g. Windows, firewalls, IPS, web proxy, email security ...

identifying improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practicesConfigure and utilise SIEM, vulnerability management and other security-based tooling.Innovate in the areas of SIEM and SOC and develop best practice.Mentor and oversee development of junior analysts.Work … Qualifications (Required Skills/Experience): 3+ years’ experience in the following areas:Working in a Security Operations Centre (SOC).Working with SIEMs and evaluating SIEM alerts.Experienced in using log aggregation and correlation tools (Splunk preferred).Experienced in interpreting systems, application and network device logs.Experienced in packet capture and analysis.Experienced ...

Cyber Security Engineer: Develop and maintain information security plans, policies and procedures Implement and manage security controls across internal and customer networks Monitor SIEM platforms, IDS/IPS systems and other security tools for threats and vulnerabilities Investigate and resolve cyber security incidents and security alerts Carry out vulnerability assessments … continual security improvement initiatives Some of the technologies and platforms you may be working with include: Cisco Firewalls Cisco Routers Cisco Switches Juniper Platforms SIEM Solutions IDS/IPS Vulnerability Management Tools Penetration Testing Tools Computer Forensic Tools ISO27001 Compliance ITIL Qualifications and requirements for the Cyber Security Engineer: Strong ...