376 to 400 of 461 SIEM Jobs in the UK

operations and the continuous improvement of detection capability and SOC tooling. This is a hands-on role with a strong focus on incident response, SIEM optimisation, and threat detection. Key Responsibilities Monitor, investigate and respond to security incidents across secure environments Develop and tune SIEM detection rules and correlation logic … Support SIEM and SOAR tooling optimisation and automation Integrate and onboard log sources to improve visibility across systems Conduct threat analysis, including TTPs and IOCs Carry out network and host-based forensic investigations Support vulnerability management and reporting activities Work closely with internal stakeholders to ensure effective cyber defence What ...

Cyber Security Engineer, Cloud Security, SIEM, Incident Response, COR7555 An exciting opportunity has arisen for a Cyber Security Engineer to join a growing technology company based in Oxfordshire, working on a hybrid basis.This is a hands-on role focused on strengthening cyber security across cloud platforms, applications and business systems. … Security Engineer? Proven hands-on experience within Cyber Security Engineering or Security Operations Experience with cloud security across AWS, Azure or GCP Experience with SIEM, EDR/XDR and security monitoring technologies Strong knowledge of vulnerability management and remediation Experience responding to and investigating security incidents Good understanding of network ...

Asset & Application Visibility Programme — bringing continuous, automated discovery to the full estate • Zero Trust enforcement — identity-aware access across remote and internal services • SIEM engineering, detection tuning, and vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms … security engineering or architecture, with clear technical depth and autonomy • Proven hands-on delivery across cloud security (GCP/AWS), identity (Entra ID), SIEM/detection engineering, DLP, or zero trust — ideally three or more • Strong foundations in networking, operating systems, identity protocols, and cloud architecture • A track record ...

Cryptographic principles and secure communications. \n\n \nEnterprise Integration\n \n \n \n Active Directory. \n Identity and access management solutions. \n Monitoring and SIEM platforms. \n Enterprise security service integration. \n\n \nNetworking & Automation\n \n \n \n TCP/IP, DNS, DHCP, and Firewall technologies. \n Automation and … Azure cloud platforms. \n DevSecOps and CI/CD pipelines. \n VxRail and hyper-converged infrastructure. \n VMware Cloud Foundation life cycle automation. \n SIEM/SOC integration. \n Hardware Security Modules (HSMs), including Thales. \n Cross-domain and secure communications environments. \n Kubernetes and Docker container platforms. ...

events Drive proactive threat hunting campaigns to identify emerging threats, vulnerabilities, and anomalous behaviour Develop and improve detection logic, alerting, and monitoring content within SIEM platforms including Elastic Stack Analyse threat intelligence, indicators of compromise (IOCs), and attacker TTPs to strengthen detection capability Produce detailed post-incident reports with clear … leadership, curiosity, and a proactive mindset. You should have experience in areas such as: Security Operations Centre (SOC) environments Threat hunting and incident response SIEM technologies, ideally Elastic Stack Threat intelligence and attacker methodologies Windows and Linux operating systems Networking fundamentals including protocols, IP addressing, and traffic analysis Understanding ...

memory management - Bash Scripting - Containers - Cache - Understanding of IP Networking and RADIUS - Use of SQL for Database queries - Hazelcast Caches - Apache Kafka Streaming Architectures - SIEM event management tools - Cassandra Database Replication LA International is an award-winning partner of choice for many of the world's most influential companies and ...

Cache \n - Understanding of IP Networking and RADIUS \n - Use of SQL for Database queries \n - Hazelcast Caches \n - Apache Kafka Streaming Architectures \n - SIEM event management tools \n - Cassandra Database Replication \n LA International is an award-winning partner of choice for many of the world's most influential ...

Hybrid - Law firm The SOC Engineer role sits within the Information Security function and focuses on the ongoing development and maturity of the firms SIEM platform and wider security monitoring capability. The position involves onboarding and integrating new log sources, improving data pipelines, and developing detection use cases to enhance ...

memory management Bash scripting Containers Cache Understanding of IP networking and RADIUS Use of SQL for Database queries Hazelcast Caches Apache Kafka Streaming Architectures SIEM event management tools Cassandra Database Replication If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website. ...

Security-focused approach to platform management Desirable Skills Bash scripting SQL Kafka, Cassandra or Hazelcast Monitoring tools (e.g. CheckMK, Selenium) IP Networking and RADIUS SIEM tools If you have a strong Linux infrastructure background and experience supporting enterprise-scale platforms, we'd like to hear from you. ...

services Design and implement enterprise grade logging and monitoring solutions using OCI Logging, OCI Monitoring, Events and Alarms. Integrate OCI monitoring with third party SIEM, ITSM and APM tools (e.g. Splunk, BMC etc.) Demonstrable experience with Oracle Cloud Infrastructure (OCI), including proficiency in the design and build of services such ...

Cyber Security, with the following skills and experience: Experience in SOC operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform ...

including AWS and Azure . Infrastructure as Code (IaC) implementation experience. Experience integrating with enterprise services such as Active Directory, PKI, monitoring platforms, and SIEM solutions. Experience with DevSecOps tooling and CI/CD pipelines. API-driven automation of privileged account lifecycle management. Integration of PAM platforms with SIEM/ ...

including AWS and Azure . Infrastructure as Code (IaC) implementation experience. Experience integrating with enterprise services such as Active Directory, PKI, monitoring platforms, and SIEM solutions. Experience with DevSecOps tooling and CI/CD pipelines. API-driven automation of privileged account lifecycle management. Integration of PAM platforms with SIEM/ ...

Security Manager (Utilities Purview DLP SIEM) London/WFH to £90k Do you have a broad range of security knowledge? Would you relish the opportunity to take ownership and build a security function from the ground up? You could be progressing your career at a fast-growing energy technology company … experience in a similar Security Manager role in a start-up or scale-up environment You have hands-on experience with security tools e.g. SIEM, EDR, vulnerability management, network security tools, query writing and alert tuning You have experience implementing and managing Purview DLP solutions You have experience monitoring and ...

Ensure tooling is optimised and actively protecting client environments. Collaborate with teams to assess risks and design effective security controls. Support senior engineers across SIEM, threat intelligence and malware platforms. Apply updates, manage changes and follow robust operational processes. Stay ahead of emerging threats and drive continuous improvement. What … focus on delivery. CompTIA Network+ (or equivalent knowledge). It would be great if you had: Experience with Azure or AWS security features. Broader SIEM experience (especially Splunk). Sopra Sterias Aerospace, Defence & Security business delivers digital solutions that support the UKs national security ambitions. Youll be working ...

activity, emerging attack techniques, and advanced threats. Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. Proven ...

activity, emerging attack techniques, and advanced threats. ·Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. ·Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. ·Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. ·Proven ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology … strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have ...

Security Manager (Utilities Purview DLP SIEM) London/WFH to £90k Do you have a broad range of security knowledge? Would you relish the opportunity to take ownership and build a security function from the ground up? You could be progressing your career at a fast-growing energy technology company ...

detection frameworks and lead the technical direction within the organization. With over 7 years of experience in detection engineering and expertise in enterprise SIEM platforms, you will mentor junior practitioners, manage client relationships, and respond to major security incidents. The position offers a hybrid work model with competitive benefits. #J ...

from incidents, helping tune detections, and strengthening operational procedures and documentation. Key Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business … time-pressured environments, with excellent written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge of incident and event management/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong ...

responsibilities: This is an interesting opportunity where you will work with the cyber resilience team and assist with the Security Operations function, including EDR, SIEM, gathering security control framework evidence and general day-to-day assistance with security tasks. You will help deliver a strategy which will enhance the organisation … campaigns. Stay informed about emerging cyber threats and vulnerabilities. You will need: Good knowledge and understanding of SOC processes and procedures. Basic experience using SIEM systems such as MS Sentinel, LogRhythm, AlienVault, Splunk Good understanding of incident response stages and handling. Basic knowledge and experience using leading endpoint detection and ...

Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting … clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities ...

prem infrastructure, while supporting both BAU operations and ongoing transformation projects. Key Responsibilities of the Cyber Security Engineer: Deploy, configure, and maintain security tooling (SIEM, EDR, DLP, vulnerability management, PAM) across cloud and on-prem environments Monitor, investigate, and respond to security incidents, including root cause analysis and forensic support … Cyber Security Engineer: Experience in a Cyber Security Engineer, SecOps, or similar hands-on security role Strong experience with enterprise security tooling including SIEM, EDR, DLP, and vulnerability management platforms Familiarity with tools such as CrowdStrike, Absolute, Sumo Logic, and Rapid7 (or similar technologies) Experience supporting cloud environments, ideally Azure ...