526 to 550 of 787 SIEM Jobs in the UK

management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help ...

management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product As a Software Engineer on the Security EDR Workflows team, you will help ...

controls across cloud infrastructure, data platforms, and application services. You will own CSPM, DLP capabilities, and integrate controls with CI/CD pipelines and SIEM tools. The role emphasizes hands-on security engineering, cloud-native architectures, and collaboration with platform engineers, product teams, and security partners to deliver scalable, reliable ...

security engineer focused on AI risk, protection, detection and response. The role emphasizes ownership of AI security tool selection, deployment, and integration with existing SIEM, SOAR and EDR environments. The candidate will address AI threat landscapes, align with governance standards, and develop demonstrators that show tangible security improvements while communicating ...

with a focus on safeguarding client IT infrastructure across hybrid environments. This role requires strong knowledge of security tooling (MS Defender, Sentinel, Email Gateway, SIEM, IDPS, GVM) and practical experience in DLP deployment, security policy tuning, and client engagement in an IT outsourcing context. #J-18808-Ljbffr ...

this hybrid UK-wide role, you will advise engineers, implement cloud-native security controls, and support the rollout of commercial tooling such as SIEM, SAST and CNAPP across ITV. #J-18808-Ljbffr ...

security, infrastructure and application teams to translate requirements into practical technical solutions. Key experience: - Strong Microsoft Sentinel/Azure security architecture experience. - Experience designing SIEM integrations, log ingestion pipelines and custom connectors. - Knowledge and experience of Azure Data Factory and Azure integration services. - Hands-on experience designing and implementing Microsoft ...

base package from £80,000 to £120,000 plus extras. You will define IAM use cases, architect solutions and integrate with cloud platforms and SIEM tools while ensuring ongoing operation and maintenance of IAM environments across client environments. #J-18808-Ljbffr ...

handle escalated incidents, perform threat hunting, and help implement secure configurations with a focus on privacy and availability. Role requires familiarity with SIEM, cloud security, and hands-on security tooling. A UK Clearance pathway is noted, with potential benefits and a modern remote-friendly environment. #J-18808-Ljbffr ...

increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

seeking a Senior Security Operations Engineer (SOC Engineer L3) to join its security function. The role is highly technical, focusing on SOC engineering, detection, SIEM/SOAR, automation and AI-driven operations. You will design and improve monitoring across a large enterprise with emphasis on AI agents and agentic workflows ...

International is seeking a skilled Detection Engineering & Automation Specialist to strengthen the Global Cybersecurity Operations. You will build, maintain and enhance security tooling across SIEM, SOAR, EDR and email security, delivering high-quality telemetry and automated detections. You will develop CI/CD pipelines, onboard new log sources and support ...

products for enterprise clients. You will partner with SOC analysts to advance threat protection and secure cloud adoption. The role requires strong KQL skills, SIEM experience, and Microsoft certifications (AZ-104, SC-200, AZ-500, AZ-305). It offers hybrid work with a monthly London office presence and clear ...

Lead Threat Detection Engineer in London to own and evolve our threat detection lifecycle across a multi-cloud environment. You will build and refine SIEM detections, automate response, and work with engineering to turn findings into scalable security improvements. The role emphasizes hands-on threat hunting, threat intelligence, and clear ...

experience. Preferred Qualifications Experience in B2B or enterprise software, ideally within security, law enforcement, defence, or intelligence-related markets. Familiarity with digital forensics, OSINT, SIEM, or related technologies. Experience with product analytics, CRM, or customer feedback platforms such as HubSpot, Salesforce, Pendo, or UserVoice. Perks and Benefits Hybrid working arrangement ...

leaders · Experienced at working on bids and large or complex changes · Excellent understanding of a variety of networks and routing protocols · Network management or SIEM designs, tooling or support This contract is based on-site in Baskingstoke, some travel may be required. This is a great opportunity for an experienced ...

sizes of $200K–$1M+ ARR. Experience in one or more adjacent technologies: Observability, IT Infrastructure Monitoring, AIOps, Application Monitoring, Digital Experience Monitoring, Log Analytics, SIEM, Cybersecurity, or related enterprise software. Comfortable managing long, complex sales cycles with multiple stakeholders, including procurement, legal, technical buyers, and C-level executives. Experience generating ...

sizes of $200K–$1M+ ARR. Experience in one or more adjacent technologies: Observability, IT Infrastructure Monitoring, AIOps, Application Monitoring, Digital Experience Monitoring, Log Analytics, SIEM, Cybersecurity, or related enterprise software. Comfortable managing long, complex sales cycles with multiple stakeholders, including procurement, legal, technical buyers, and C-level executives. Experience generating ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

blue team operations. Expert understanding of network protocols and infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and … Nice to Have Background in intrusion analysis, detection engineering, or penetration testing. 10+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content. Relevant certifications such as: Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, OSCP Education Bachelor's degree in a related field ...

blue team operations. Expert understanding of network protocols and infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and … Nice to Have Background in intrusion analysis, detection engineering, or penetration testing. 10+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content. Relevant certifications such as: Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, OSCP Education Bachelor's degree in a related field ...

vulnerability exposure and progress.Support penetration testing, security assessments and the remediation of identified findings.Security PlatformsSupport the operation, maintenance, development and governance of security platforms, including SIEM, Network Access Control, firewalls, endpoint security, email security, vulnerability management and identity security.Support the secure operation of cloud and SaaS services, ensuring risks … this profile.To be successful in the role you will have:Strong experience with security vulnerability management.Good experience and knowledge of using Security Information and Event Management tools.Good experience and knowledge of implementing and supporting Network Access Control.Good experience and knowledge of advanced detection and response systems.Good understanding of exploits, malware ...

work with ownership, influence and responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical … cyber security role, ideally within security operations, incident response, threat detection or a similar technical security environment. ** Practical knowledge of security technologies including SIEM, firewalls, endpoint detection and response (EDR), DLP and vulnerability management tools. ** Experience investigating security incidents, analysing logs and identifying threats across complex IT environments. ** A good ...

peer backup. Each Security Engineer also owns formal responsibility for Vulnerability & Compliance and Identity & Access Management as defined disciplines. Responsibilities Security Operations Monitor the SIEM platform and security tooling daily - triaging alerts, investigating anomalies, and escalating confirmed threats. Act as the named internal interface to the external SOC - receiving escalations … and recovery. Own and manage Defender for Endpoint/XDR and Defender for Cloud Apps - maintaining configuration, reviewing alerts, and tuning detection policies. Manage SIEM rule sets - adding new detection use cases, tuning existing rules, and reviewing rule coverage. Vulnerability & Compliance Own and operate the vulnerability management programme - running regular ...