51 to 75 of 449 SIEM Jobs in the UK

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...

serve as a point of contactDevelop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risksIdentify, implement, and automate cybersecurity measures and best practicesCoordinating incident response across the organisation ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...

Security Framework.Experience developing and delivering information security strategy, roadmaps, policies and controls.Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies.Experience using technology, automation or AI to improve security outcomes or operational efficiency.Experience managing security risk ...

and agile working arrangements, helping our people achieve a positive work-life balance.Main tasks: Monitor security alerts, logs and events across key platforms including SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools.Support timely incident response, containment, remediation, recovery and post-incident review ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

pursuit of ISO 27001 certification and the implementation of CIS controls.Roles and Responsibilities•Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance•Work with the network engineers to implement posture management i.e. ICE/NAC segmentation/lateral movement control and ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism, seeking and acting on feedback, and sharing learning ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

cloud provider (AWS or Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders.Strong ...

cloud and data security risks, and third-party/supply chain risk.Hands-on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity.Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture choices, not just tooling.Data security: experience ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...