51 to 75 of 879 SIEM Jobs in the UK

framework Experience with SQL query construction Experience with OSQuery Programming and scripting skills - proficient knowledge of PowerShell Experience with enterprise information security data management - SIEM Advanced Cyber Security certifications Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates ...

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of scripting/automation using PowerShell or Python is desirable. Key Competencies Strong analytical and troubleshooting ...

accelerate operational and scripting work.Security and assuranceFirewall policy administration, ideally Palo Alto, and load balancing or reverse proxy work.Endpoint protection, vulnerability management or SIEM platforms.System build following NIST standards, hardening, SELinux and server firewalls.Information security frameworks such as ISO 27001 or Cyber Essentials.Ways of workingWorking within a formal RFC and ...

Ability to work some weekends and holidays Being curious and asking questions Desirable Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash ...

leadership, and stakeholder management skills. 8+ years of experience in cybersecurity, with at least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ...

remediation and patch‐management tooling Good understanding of cloud platforms, particularly Microsoft Azure Experience with security monitoring, vulnerability management or incident response Familiarity with SIEM, EDR/XDR or SOC tooling Strong troubleshooting, documentation and communication skills Qualifications Relevant degree, technical qualification, apprenticeship or equivalent professional experience. Relevant Microsoft, networking ...

work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco, F5, or similar enterprise networking ...

desirable Python, PowerShell or other scripting experience would be advantageous Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team, NSD #J-18808-Ljbffr ...

configuration management and cloud service protection. Identity and access management: Directory services, multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security ...

Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment. You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools. You're proficient in scripting languages (e.g. Python) for automating security processes and customizing ...

security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions. Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms. Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

within Cyber Security Operations, Incident Response or Threat Detection environments. Demonstrable experience investigating and managing complex cyber security incidents. Strong knowledge of Security Information and Event Management platforms, Endpoint Detection and Response technologies, and Threat Detection and Response solutions. Experience analysing logs, alerts, security telemetry and security incident data. Strong ...

5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...