401 to 425 of 461 SIEM Jobs in the UK

experience in Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with security testing, attack … Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity ...

enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies, procedures … cyber threats and recommend improvements where appropriate Key Skills & Experience: * 2-4 years' experience within a cybersecurity or infrastructure security role * Experience working with SIEM tools and vulnerability management platforms * Strong understanding of EDR, XDR, MDR, IDS/IPS technologies * Good knowledge of Microsoft security technologies and infrastructure environments * Understanding ...

with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing … client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing … client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

contribute to threat detection, incident response, and continuous security improvement across the business. What You'll Be Doing Monitoring and analysing security events (SIEM, endpoints, networks) Investigating incidents, performing root cause analysis and remediation Identifying vulnerabilities and driving proactive security improvements Acting as the go-to escalation point for security … teams to embed security across systems What We're Looking For Experience in a cybersecurity/IT security role Strong knowledge of security tools (SIEM (Sentinel), EDR/XDR, firewalls, IDS) Experience working in a SOC/NOC or similar environment Good understanding of security frameworks (ISO 27001, NIST, GDPR ...

detect and respond to threats quickly and efficiently. Install, configure and maintain security monitoring tools Ensure SOC tooling is optimised and operating effectively Support SIEM platforms and threat intelligence tooling Work with teams to assess risk and design security controls Apply updates, patches and follow change processes Stay current with … emerging threats and recommend improvements SOC ENGINEER ESSENTIAL SKILLS Strong understanding of information security fundamentals Experience with SIEM tools such as Sentinel or Splunk Familiarity with security monitoring technologies Analytical mindset with strong problem solving skills Ability to manage multiple priorities and meet deadlines Strong communication and collaboration skills ...

events, alerts and incidents across cloud, platform, and application layers. Execute vulnerability scanning, patch assurance and configuration compliance checks. Maintain security tooling such as SIEM, EDR, vulnerability scanners, and cloud-native controls. Support ISO 27001 control operation and evidence collection. Ensure compliance with MoD security standards including JSP 440 and … Decision Making. Ability to translate technical security findings into pragmatic recommendations and actions that support operational, business, and technical objectives. Hands-on experience with SIEM (e.g. ELK), EDR and vulnerability tooling Experience securing Linux and Windows environments Understanding of ISO 27001 and secure configuration principles Experience supporting cloud or virtualised ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small … engineering teams Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR Experience onboarding data sources and services into SIEM platforms Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth Experience deploying applications across cloud, containerised and on-premises environments Strong understanding ...

Management (SIEM) platforms, with a focus on enhancing detection capabilities and proactively identifying threats. Key Responsibilities : Detection Engineering: Design, develop, and optimise security detections across both SIEM platforms Continuously improve detection rules to enhance coverage and reduce false positives Threat Hunting : Conduct proactive threat hunting activities across both SIEM environments … incidents Act as an escalation point for security-related issues within the IM process Key Skills and Experience: Strong hands-on experience with enterprise SIEM platforms (multi-SIEM environments preferred) Proven capability in detection rule creation and tuning Demonstrated experience in proactive threat hunting methodologies Deep understanding of incident response ...

incidents swiftly and effectively. Digital Forensics: Support the collection and analysis of digital evidence during security investigations. Technical Tools Utilisation: Leverage foundational knowledge of SIEM platforms, vulnerability scanners, and operating systems (Windows/Linux) to enhance security posture. Strong analytical skills with keen attention to detail Understanding of security tools ...

SIEM Engineer - (Havant/Reading/Hybrid) - Inside IR35 Day Rate - up to £700 Duration - 6 months Harvey Nash's Client have a requirement for a SIEM Engineer, you must be SC Cleared to commence this post. You will support the team in: Lead onboarding and integration of log sources … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

department, working in security operations. Strong alert triage, incident response, security monitoring, and threat analysis. Experience handling real-world security incidents and working with SIEM, EDR, or vulnerability management tools. Ideally have a strong bachelor’s degree in computer science, Information Security, Cyber Security or related field with any SIEM ...

satellite communications and maritime technology sector. Duties and responsibilities of the Cyber Security Engineer: Develop and maintain information security policies, procedures and standards. Monitor SIEM, IDS/IPS and security monitoring tools, investigating and resolving cyber security incidents. Design, build, implement and support secure network solutions across internal and customer … Support colleagues with cyber security advice, training and best practice. Technologies you will work with include: Cisco Firewalls, Routers and Switches. Juniper networking platforms. SIEM and IDS/IPS solutions. Vulnerability Management and Penetration Testing tools. Computer Forensic tools. ISO27001, ITIL and GDPR. Qualifications and requirements: Minimum 5 years' experience ...

technical work and mentoring others. Senior SOC Analyst essential skills Proven experience working within a SOC environment, ideally 3+ years Strong knowledge of SIEM, incident management and threat intelligence Experience with cloud security, networking and information security principles Understanding of IDAM, RBAC and joiners, movers and leavers processes Ability … consent for your application to be processed and submitted to the client in conjunction with this vacancy only. Key skills: Senior SOC Analyst, SOC, SIEM, Incident Response, Cloud Security, Threat Intelligence, IDAM, ISO 27001, Team Leadership ...

improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards, and governance Represent engineering in client governance and audit activities … issues Experience & Knowledge Essential: Significant experience in security engineering and platform management Strong leadership experience managing technical teams Deep knowledge of Microsoft Defender and SIEM platforms (e.g. Sentinel) Experience in hybrid cloud and on-prem environments Strong understanding of security architecture and frameworks Experience in regulated environments (e.g. financial services ...

serviceswhile helping to shape and develop our cyber offering. What Youll Be Doing Analysing security alerts and detections from SOC tools, including SIEM Working with automation and playbooks using SOAR tools Implementing mitigation and remediation activities following cyber incidents Supporting the efficiency and effectiveness of SOC operations Contributing … What Were Looking For Essential Skills & Experience Strong understanding of advanced cyber security concepts Experience working in SOC or cyber advisory environments Knowledge of SIEM technologies and security monitoring Understanding of malware concepts and cyber risk management Ability to communicate complex technical findings to stakeholders Desirable Scripting experience (Python ...

technologies and play a hands-on role in building a more resilient and secure environment. Key Responsibilities Take ownership of monitoring and developing SIEM activity across the environment, helping to improve detection capability over time Manage and enhance endpoint and threat detection tooling (including EDR, XDR, and MDR platforms … backup, disaster recovery, and data protection measures Skills & Experience: Demonstrable experience in a cybersecurity or infrastructure-focused security role Practical, hands-on exposure to SIEM platforms and vulnerability management tools Strong understanding of endpoint detection and response technologies (EDR, XDR, MDR) Good working knowledge of common cyber threats, attack methods ...

/secure environments (e.g., air-gapped, defence) Desirable Cloud platforms (AWS/Azure) + Infrastructure as Code Integrating enterprise services (Active Directory, PKI, monitoring, SIEM) DevSecOps tooling and CI/CD pipelines API-driven automation of onboarding/offboarding SIEM/SOC integration for audit/monitoring Containers (Kubernetes, Docker ...

Analyst to its Security Operations team. This is a great opportunity for someone with experience investigating security alerts, responding to incidents and working with SIEM and EDR technologies in a fast-paced environment. What you'll be doing: Monitoring and investigating security alerts and incidents. Triaging and responding to security … response activities. Improving detection rules and SOC processes. Producing incident reports and documentation. What we're looking for: Previous SOC Analyst experience. Experience with SIEM platforms such as Sumo Logic, Splunk, Sentinel or QRadar. Exposure to CrowdStrike or similar EDR technologies. Good understanding of networking fundamentals (TCP/ ...

using automation, scripting and best practice. Ensure detections are clearly documented and operationally usable. What youll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding … SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/ ...

Job summary Join Us in Transforming Healthcare Through Digital Innovation! At BCUHB ICT , we're on a mission to revolutionise patient care, outcomes through cutting-edge technology and smarter ways of working. Our vision? To ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities for NMC Cyber Security Engineers. Working with wider NMC teams, contributing to Continual Service Improvement and innovations. What … need to succeed in the role Essential Experience of supporting and developing SIEM platforms in the context of a Security Operations Centre across a multi-tenant environment. Practical experience in the creation, testing, implementation, and support of custom tooling to support Security Operations. Initiative and the ability to produce quality ...

threats, supporting vulnerability remediation across the estate, and helping ensure compliance with industry standards and regulations. What this role involves: Develop, monitorand mature the SIEM solution. Support ongoing development and monitoring of IDS/IPS, detection and response solutionsand other threat detection systems. Analyseincidents and coordinate appropriate responses, including containment … restorationand disaster recovery, aligning solutions with business objectives. What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDRand MDR. Solid understanding of common attack vectors, security principlesand risk ...

Responsibilities 🛡️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using … than high-level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management ...