401 to 425 of 458 SIEM Jobs in the UK

trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendationshands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments6+ years of experience with Security Operations Center (SOC) tooling, processes, and workflowsHands-on technical mastery across SIEM, SOAR … cloud security, and threat intelligenceAbility to conceive, architect, and develop effective correlation and detection rulesFamiliarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.Strong expertise in Regular Expressions (Regex)Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plusMust ...

bold, but will have crossover into other areas:Threat & Exposure Management (eg. Red Teaming, Penetration Testing, CTEM, VM, OT)Security Operations and Governance (eg. SIEM, GRC, TPRM, Workshops and Assessments)Identity and Access Management (eg. PAM, PIM, NHI, ITDR, MFA, SSO)DataCentre and Cloud Security (eg. CNAPP, Micro-Segmentation, CSPM … and scoping sessionsDESIRABLEStrong written and verbal communication skillsESSENTIALAwareness of industry frameworks and regulations applicable to the UK and EU marketESSENTIALUnderstanding of security operating models, SIEM or SOC conceptsDESIRABLECORE COMPETENCIES & SKILLS – BASED ON POSITION AND GRADE CompetencyDescriptionTechnical JudgementAbility to make sound scoping and design decisions across aligned Security portfolioDESIRABLECustomer EngagementConfident leading ...

lived in UK for 10+ years to obtain clearance. What you’ll be doing• Monitor, analyse, and respond to security alerts and events from SIEM, EDR, NDR, and other security monitoring platforms.• Act as an incident repose lead for cyber security incidents where required, ensuring timely resolution and effective communication … Incident Response environments.• Strong knowledge of cyber security frameworks (e.g. MITRE ATT&CK), threats, attack techniques, and defensive controls.• Hands-on experience with SIEM, EDR/XDR, vulnerability management, and email security technologies.Desirable Skills/Experience• Microsoft Security technologies (Microsoft Defender, Sentinel, Entra ID, Purview).• Elasticsearch, Kibana, Elastic Security ...

delivering clear and effective stakeholder communication, and mentoring other members of the SOC team.What you will doSupport SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activitiesUse cases preparation and implementation, connector deployment, maintenance & health checksResponsible for operational activities, Technology escalation support … powershell, Unix shell)Experience working in all phases of the SDLCDeep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM ToolsPrior SOC experience a plusExtensive knowledge of network and server security protocols, technologies, and productsIndustry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferredStrong oral and ...

candidate availability.RESPONSIBILITIES:• Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.• Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.• Utilise playbooks, existing knowledge and accurate online resources for guidance … date with current vulnerabilities, attacks, and countermeasures.• Identify, respond and remediate cyber events generated through monitoring technologies.EXPERIENCE:• Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm).• Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused ...

high level designs, low level designs and deployment level designs. Support the design of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate. Understand and leverage BAE Systems experience, IP and expertise, with support of product and subject matter … Policy and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy ...

techniques and procedures (TTPs). Indicators of Compromise (IOCs) and Indicators of Attack (IOAs). Cyber Threat Intelligence (CTI). Elastic Stack or other SIEM technologies. Open-Source Intelligence (OSINT) methodologies. Communicating technical information clearly to varied audiences. Coaching, mentoring or supporting less experienced analysts. Desirable Experience CompTIA Security+, SecurityX … CISSP, CISM or similar certifications. Experience working within highly secure or government environments. Advanced SIEM engineering and detection content experience. What You'll Gain At DXC, you'll join a team where learning, innovation and career development are actively encouraged. You'll benefit from: Exposure to cutting-edge cyber security ...

Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender/Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and scripting Improving security event detection and … Sentinel/Azure Sentinel Microsoft Defender/Defender XDR Strong KQL/Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, scripting, SOAR or Sentinel playbooks Cloud security assessments, controls ...

Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender/Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and Scripting Improving security event detection and … Sentinel/Azure Sentinel Microsoft Defender/Defender XDR Strong KQL/Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, Scripting, SOAR or Sentinel playbooks Cloud security assessments, controls ...

high-severity security incidents. Support containment, eradication and recovery efforts in partnership with technical stakeholders. Produce detailed incident reports and recommendations. Tune and optimise SIEM and detection rules to improve threat visibility. Identify opportunities to strengthen detection capabilities, processes and response playbooks. Provide mentoring and technical guidance to junior … within a SOC, Incident Response or Threat Analysis environment. Strong understanding of cybersecurity operations, incident response methodologies and threat investigations. Hands-on experience with SIEM and EDR platforms. Knowledge of malware behaviour, attack techniques and threat detection. Excellent analytical and problem-solving skills. Bachelor's degree in Cybersecurity, Computer Science ...

technical guidance to L1 analysts. You'll be responsible for: Leading investigations into medium and high-severity security incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning … looking for We're particularly interested in candidates with: 510 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment and remediation Experience acting as a technical escalation point ...

hybrid basis, paying a salary range up to £62,000 plus bonus. Lead IT Security Analyst: Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve … Analyst: Technical Experience Proven experience in IT security/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based ...

meaningful work that drives real impact.Key Skills, Experience & Qualifications:· 5+ years experience in Security Engineering, Tooling, or Detection Engineering roles· Hands-on experience with SIEM, EDR, NDR, or security posture tooling· Experience building, tuning, and governing detections· Experience working within structured change control and governance frameworks· Working knowledge of SIEM ...

will be responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS/IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements.The … mentor colleagues and contribute to ongoing security improvements.The Role:Design, implement and maintain network security solutions across internal and customer systemsMonitor security tools (SIEM, IDS/IPS) and respond to incidents and vulnerabilitiesProvide third-line support and act as a key escalation point for security issuesDevelop and maintain security policies ...

and physical layers) in collaboration with other design team members. Support the design of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate. Understand and leverage BAE Systems experience, IP and expertise, with support of product and subject matter … Policy and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations ...

will be responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS/IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements. … colleagues and contribute to ongoing security improvements. The Role: Design, implement and maintain network security solutions across internal and customer systems Monitor security tools (SIEM, IDS/IPS) and respond to incidents and vulnerabilities Provide third-line support and act as a key escalation point for security issues Develop and ...

proactive threat hunting using intelligence-led and hypothesis-driven approaches. Investigate complex security incidents and provide technical escalation within the CSOC. Develop and optimise SIEM detections, analytics, use cases and KQL queries to improve threat detection and reduce false positives. Identify gaps in logging, monitoring and telemetry across cloud, identity … Cyber Security, IT or a related technical discipline. Strong knowledge of cyber security operations, threat hunting, incident response and security monitoring. Experience with SIEM platforms (ideally Microsoft Sentinel), KQL or similar analytics tools. Good understanding of cloud, endpoint, identity, network and application security. Knowledge of security frameworks such as NIST ...

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us:EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...

and threat activity. Conduct root cause analysis and produce detailed incident reports. Coordinate containment, eradication and recovery activities with technical teams. Correlate data across SIEM, EDR and other security platforms to build comprehensive incident assessments. Support detection engineering by identifying gaps in monitoring, alerting and response processes. Provide technical leadership … point when required. What We're Looking For 7+ years' commercial experience within a SOC, Incident Response or Threat Detection environment. Strong knowledge of SIEM, EDR, threat hunting and incident response methodologies. Experience leading investigations and coordinating security responses across multiple teams. Excellent analytical and problem-solving skills. Ability ...

customer experience and operational continuity. • Awareness of core cyber defence technologies and patterns, for example detection and response platforms, Security Information and Event Management (SIEM) platforms, security data pipelines, and automation orchestration. • Exposure to security architecture and practical approaches to evaluating and testing whether security controls work as intended. • Evidence … customer experience and operational continuity. • Awareness of core cyber defence technologies and patterns, for example detection and response platforms, Security Information and Event Management (SIEM) platforms, security data pipelines, and automation orchestration. • Exposure to security architecture and practical approaches to evaluating and testing whether security controls work as intended. • Evidence ...

Senior Network and Security Engineer - L2/L3 Network Infrastructure - Cyber Security - SIEM tools My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

program, scanners, and dependency checks.Support incident response: develop fixes, track resolution, update tickets, and contribute to post-mortems.Monitor and process security alerts from our SIEM and other monitoring tools.Identity & access managementImplement and maintain SSO/MFA configurations for product and infrastructure systems, leveraging Okta and Google Workspace to manage downstream … adoption of AI coding tools across engineering teams: flag insecure usage patterns, identify data leakage risks, and help maintain internal AI usage guidelines.Monitoring & detectionMonitor SIEM alerts, investigate suspicious activity, and escalate when needed.Maintain and tune detection rules under guidance from the Senior Security Engineer.Help operate and maintain SIEM infrastructure (ElasticSearch ...

across areas including: Investigating and responding to medium and high-severity security incidents Performing detailed analysis of alerts, logs and suspicious activity Working with SIEM, EDR and wider security tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators … experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with analysts ...

Cloud. Design privileged credential management, vaulting and session monitoring solutions. Define privileged access policies and least privilege models. Integrate CyberArk with Active Directory, LDAP, SIEM and ITSM platforms. Conduct security assessments, gap analysis and remediation planning. Produce High Level Designs (HLDs), Low Level Designs (LLDs), security architecture documents and operational … solutions. Strong understanding of Identity & Access Management (IAM) principles. Experience with privileged credential lifecycle management and session recording. Integration experience with: Active Directory LDAP SIEM platforms ITSM tools Experience producing HLDs, LLDs, security architecture documentation and implementation runbooks. Excellent stakeholder engagement and communication skills. Desirable Skills Experience with: DevSecOps Secrets ...

lead on complex or high-severity findings.Lead security incident response: qualification, forensics (including fraud investigations), fix coordination, post-mortem, and resolution tracking.Detection & SIEMOwn our SIEM platform (ElasticSearch, multi-node Linux): architecture, detection rules, and indicators of compromise.Build and evolve detection coverage, focusing on signal quality over manual toil.Build and maintain … owning security outcomes end to end, with hands-on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response.Ability to own a roadmap: identify priorities, build a plan, execute autonomously, and communicate progress to non-specialists.Deep understanding of modern web architectures ...