476 to 499 of 499 SIEM Jobs in the UK

and prospective clients. Acting as the final escalation point for on-call incidents (rota-based, paid on-call). Supporting service improvement initiatives across SIEM, EDR, email security and associated detection and response tooling. Developing and maintaining customer relationships to promote a partnership between Littlefish and the end client. What … Operations. Previous experience leading or mentoring a technical security team. Strong exposure to customer facing security services and contractual delivery. Hands on experience with SIEM, IDP, ITDR, EDR and email security platforms. Proven ability to mentor analysts at varying levels of experience. Strong understanding of modern cyber threats, attack techniques ...

Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt threats at scale. You’ll design, architect, and develop world-class case management and investigation capabilities … enhance decision-making, streamline workflows, and drive business outcomes. Bonus points: Currently developing Go-based microservices for scalable, high-throughput architectures; experience in cybersecurity, SIEM, SOAR, or adjacent security domains; hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks. Benefits Market-leading compensation and equity ...

Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team, helping revolutionize security management with our AI-native Falcon Next-Gen SIEM platform – enabling customers to detect, investigate, and hunt down threats 150x faster at Petabyte scale.You'll design, architect, and develop world-class case management and … making, streamline workflows and processes, improve efficiency and drive business outcomes.Bonus points:Currently developing Go-based microservices for scalable, high-throughput architecturesExperience in cybersecurity, SIEM, SOAR, or adjacent security domainsHands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks#LI-GO1#LI-HYBRIDBenefits of Working at CrowdStrike:Market ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech company. The Security Architect … travel. Therefore, you must be based at a commutable distance from London. As Security Architect, you will take ownership of key security architecture across SIEM, SOAR, EDR, cloud security, detection engineering, threat hunting and automation. The Security Architect will work closely with internal and 3 rd party engineering and ...

Nessus) including: Configuration to enable Risk based vulnerability assessment. Definition of classification schemas, workflows and reports for operation. Integration with other tools such as SIEM applications, Case Management and Asset Management applications. Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for SIEM applications Support deployment of application to both cloud … NESSUS) including: Configuration to enable Risk based vulnerability assessment. Definition of classification schemas, workflows and reports for operation. Integration with other tools such as SIEM applications, Case Management and Asset Management applications. Experience deploying and configuring Vulnerability Management applications (e.g. NESSUS) in a performant manner on cloud and/ ...

experience in researching, analysing, and reporting on cyber threats or related security issues. Experience in Threat Modelling System and Security Information and Event Management (SIEM) solutions Ability to triage security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Relevant professional qualifications or training ...

optimise the Palo Alto firewall estate Support core networking (LAN/WAN, Wi-Fi, remote access, load balancing) Monitor and respond to security incidents (SIEM/EDR) Improve network security, segmentation, and resilience Manage vulnerability scanning and patching (Qualys) Lead and contribute to network and security projects Produce clear, accurate … technical documentation Tech Stack Palo Alto | Cisco (L2/3) | Aruba | SIEM | EDR | Qualys What We're Looking For Minimum 5 years' experience in networking (essential) Strong hands-on experience with networking fundamentals and technologies (Cisco, LAN/WAN) Exposure to security tools or environments (SIEM, EDR, vulnerability management ...

/Unix servers, network devices and applications to the PAM platform Configure Just-in-Time (JIT) access workflows and approval processes Integrate PAM with SIEM tools for monitoring and alerting Manage platform upgrades, patching and ongoing health monitoring Troubleshoot connector issues and session failures Maintain technical documentation and support audit … credential vaulting, password rotation and privileged access workflows Experience onboarding systems into PAM platforms Strong understanding of Active Directory privileged account management Experience with SIEM integration Ability to obtain SC level security clearance If this sounds like a role for you please apply with an up to date version ...

senior engineering teams and communicating risk effectively to cross-functional stakeholders. Detection Engineering Support: Proactively suggesting fine-tuning requests, updating signatures, and optimizing SIEM correlation rules to lower false-positive rates and enhance alert fidelity. Threat & Vulnerability Awareness: Keeping your finger on the pulse of the wider threat landscape, tracking … Clearance at the point of application. SOC Exposure: Prior experience working within a dedicated enterprise SOC environment. Security Toolkit: Good working knowledge of enterprise SIEM platforms, EDR/XDR tools, and host intrusion prevention systems. Network & OS Essentials: A strong foundational grasp of network principles (TCP/IP, DNS) and ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech company click apply ...

Engineer, Cloud to join the Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt threats at scale. You’ll design, architect, and develop world-class case management and investigation capabilities ...

capability, defending critical public services and guiding a team of engineers and analysts in Scotland. You will own the core security tooling estate, oversee SIEM, SOAR, EDR/XDR, NDR and CTI in a cloud-first environment, shaping strategy, managing risk, and delivering robust security controls across our organization. #J ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

service portfolio and delivering those services to end clients. Responsibilities include: Security Portfolio Development Support the definition and development of Security Services portfolio: MDR, SIEM, Identity, Compliance, and AI SOC Help productise security services with clearly defined scope, SLA, and pricing Contribute to the security attach strategy Assist in developing … Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA ...

proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

Experience with OPA (Open Policy Agent) policy authoring in Rego and sidecar deployment patterns Hands-on with OpenTelemetry (traces, metrics, logs), Dynatrace, and Splunk SIEM integration Working knowledge of CDN/WAF platforms (Akamai Ion, Kona, Cloudflare) and WAF-as-code automation Experience with PostgreSQL (HA, connection pooling, PITR) and … maintain OPA policy bundles for coarse-grained authorization at the gateway layer Build and extend OpenTelemetry instrumentation pipelines (OTel Collector, Dynatrace OTLP ingest, Splunk SIEM forwarding) Manage GitOps-driven deployments via ArgoCD and Helm across multi-cluster Kubernetes environments Automate WAF rule management across Akamai and Cloudflare using ...

supporting a portfolio of customers across multiple sectors. You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and … help mature playbooks and runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs ...

Responsibilities Own and manage cyber incidents from detection through to resolution. Review, enhance, and develop Incident Response frameworks, runbooks, and playbooks. Ensure alerts from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology … leading on the creating, reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested ...

join the Threat Detection and Incident Response team. You will design, implement, and scale Go-based microservices powering our AI-native Falcon Next-Gen SIEM platform and assist security analysts with rapid incident response. You will own system design, mentor engineers, collaborate across product groups, and contribute to AI-enabled ...

Network Engineer/Network Analyst - Cisco, CCNP, LAN/WAN, SD-WAN, CheckPoint, Zscaler/NetScaler, Cisco ISE, Meraki WiFi, SIEM, BAU/Projects. 12 Month FTC. London Hybrid. c.£70k-£80k + Oncall + Bonus + Excellent Benefits Global Law Firm seeks an experienced Network Support Engineer to join … and network security technologies. Knowledge of load balancing, VPNs, Wi-Fi and DDoS mitigation. Solid BAU experience, problem identification and resolution Experience with SIEM platforms, threat prevention and secure network design. Experience with Business Continuity, Disaster Recovery and IT Infrastructure projects. CCNP certification (or equivalent) and strong understanding of ITIL ...

United Kingdom, is seeking a Software Engineer III (Cloud) to develop Go-based microservices and RESTful APIs for the AI-native Falcon Next-Gen SIEM platform, focusing on threat detection and incident response. You will own technical initiatives, mentor peers, and collaborate across product groups. Responsibilities include delivering scalable backend ...

incident response, lead major cyber incidents, and mentor junior SOC members in a Tier 3 capacity. You will design, implement, and maintain SIEM/IR tooling, oversee security standards, and align security programs with Colt’s global priorities. A strong focus on communication and stakeholder engagement is essential. #J ...