551 to 575 of 787 SIEM Jobs in the UK

Cloud Apps, Intune, Conditional Access Policies, Identity Protection, ANY.RUN, Purview, Zscaler, Mimecast, Thinkst Canary Devices, Nessus, Secret Server, Cisco Firepower Awareness of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, EDR, AV, ATP, Threat & Vulnerability Management, Threat Intelligence, Sandboxing … Solutions, Attack Surface Reduction Rules, Web Control/Category Based URL Blocking, Controlled Folder Access, API's, SIEM Connectors Awareness of security approaches: ISMS, risk analysis and assessments, the CIA triad, attack vectors including social engineering, cryptography, confidentiality issues and the law relating to them, such as PACE ...

peer‐review detection content — treat detections as code (version‐controlled, reviewed), translate threat intelligence into new rules, and contribute to iterative improvement of the SIEM ruleset; onboard new log sources, including cloud and application feeds, to close coverage gaps. Own sub‐cycles of the intelligence lifecycle — run structured collection against … opportunities proactively, and contributing subject‐matter expertise to proposals or bids. Tools and practice familiarity Hands‐on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling or indicator lifecycle management ...

reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering … and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder ...

reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering … and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder ...

within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security events using enterprise monitoring techniques. Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques. Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques. Experience analysing information … environment. Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalent Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing to the development ...

include: Degree-level qualification in Information Technology, a related discipline, or equivalent professional experience Advanced knowledge across at least three security technologies such as SIEM, EDR/XDR, CTEM, WAF/DDoS, Entra ID, IPS/IDS, PKI, SASE, AWS or Infrastructure as Code Strong security data collection, analysis and … programming language including Python, PowerShell, SQL, Shell, Perl or Assembly Experience analysing and resolving complex security issues Hands-on experience with technologies such as SIEM, XDR, WAF, Windows/Linux, Firewalls, Web Proxies, Active Directory/Entra ID, Containers or Virtualisation Desirable skills for the Senior Infrastructure Specialist - Red Team ...

include: * Degree-level qualification in Information Technology, a related discipline, or equivalent professional experience * Advanced knowledge across at least three security technologies such as SIEM, EDR/XDR, CTEM, WAF/DDoS, Entra ID, IPS/IDS, PKI, SASE, AWS or Infrastructure as Code * Strong security data collection, analysis and … programming language including Python, PowerShell, SQL, Shell, Perl or Assembly * Experience analysing and resolving complex security issues * Hands-on experience with technologies such as SIEM, XDR, WAF, Windows/Linux, Firewalls, Web Proxies, Active Directory/Entra ID, Containers or Virtualisation Desirable skills for the Senior Infrastructure Specialist - Red Team ...

within a SOC or comparable cyber security operations environment. Experience leading security monitoring activities and supervising analysts during live operational service. Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation. Experience investigating complex cyber security events and determining appropriate escalation paths. Good understanding of cyber … environment. Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent. Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing ...

within a SOC or comparable cyber security operations environment. Experience leading security monitoring activities and supervising analysts during live operational service. Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation. Experience investigating complex cyber security events and determining appropriate escalation paths. Good understanding of cyber … environment. Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent. Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing ...

start or grow their career in cybersecurity, with opportunities for advancement and skill development. Key Responsibilities: Monitor security alerts and events from Microsoft Defender, SIEM and other security tools. Perform initial triage and analysis of security incidents. Escalate verified incidents to Tier 2/3 analysts as needed. Document incidents … related field (or equivalent experience). Basic understanding of networking concepts (TCP/IP, DNS, firewalls). Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and endpoint protection. Strong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to work in a fast-paced ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

security incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical and ...

security incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical and ...

rota, which you will be expected to join. Skills and Qualifications: Experience investigating and responding to cyber incidents. Experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents. Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent … SIEM tool is acceptable). An understanding of the tools, techniques and procedures commonly used by threat actors. Good analytical and problem-solving skills. Good verbal and written communication skills. Active SC clearance. At least 2-3 years experience in a position of Cyber Security Analyst. Working experience of M365 ...

rota, which you will be expected to join. Skills and Qualifications: Experience investigating and responding to cyber incidents. Experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents. Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent … SIEM tool is acceptable). An understanding of the tools, techniques and procedures commonly used by threat actors. Good analytical and problem-solving skills. Good verbal and written communication skills. Active SC clearance. At least 2-3 years experience in a position of Cyber Security Analyst. Working experience of M365 ...

element. You’ll be involved in the evaluation and administration of enterprise security tooling across areas such as endpoint security, vulnerability management, logging and SIEM, as well as supporting detection, investigation and incident response when required. You’ll need to be comfortable moving between technical detail and wider business conversations … incident response activities, including investigation, containment and remediation. Evaluate, implement and administer enterprise security technologies across areas such as endpoint protection, vulnerability management and SIEM/logging. Work with infrastructure teams to embed security into new systems, services and technology initiatives. Contribute to threat‐driven security initiatives and improvements ...

Engineers, ensuring stability, availability and security of a complex technology estate spanning LAN/WAN/WLAN, cloud, IAM, EUC and security tech like SIEM, EDR/XDR and next-generation #J-18808-Ljbffr ...

detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response, tuning what our SIEM catches, and building automation to speed response, while acting as a first responder when issues arise. You’ll work on end-to-end detections, investigate incidents ...

Intact Insurance is seeking a Cyber Defence Engineer to strengthen cyber defences across cloud and on‐prem environments. You will engineer, configure and optimise security tooling, develop threat detection logic and ensure telemetry pipelines are ...

ensuring resolution within agreed SLAs. Troubleshoot issues across the CyberArk platform, including Vault, CPM, PSM, PVWA, Entra ID integrations, MFA solutions, and SIEM integrations. Perform root cause analysis and manage escalations with CyberArk support where required. Support privileged account onboarding and offboarding, safe administration, policy management, and access reviews. Carry ...

ensuring resolution within agreed SLAs. Troubleshoot issues across the CyberArk platform, including Vault, CPM, PSM, PVWA, Entra ID integrations, MFA solutions, and SIEM integrations. Perform root cause analysis and manage escalations with CyberArk support where required. Support privileged account onboarding and offboarding, safe administration, policy management, and access reviews. Carry ...

Defining the system specifications to support optimal performance. Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

written and verbal communication skills in English Experience with Kafka/Pulsar, CAEP, RISC, feature stores, OPA/Rego, Zero Trust, post-quantum cryptography, SIEM/XDR architectures, or mobile threat defence is highly valued. Spanish is a plus. Recruitment Process Introductory conversation with Talent CTO & CPO conversations Collaborative ...

platform, and cloud engineering to deliver robust detections and governance. You will partner with security and engineering teams to implement detection-as-code practices, SIEM tuning, and KPI tracking, ensuring delivery against strategic priorities. #J-18808-Ljbffr ...

and optimise the Cortex XSIAM platform across enterprise SOC environments, delivering hands-on engineering leadership to client teams and ensuring seamless integration with existing SIEM, SOAR and EDR tooling. Responsibilities include guiding customers through implementation, tuning detections, and enabling AI-driven automation to improve visibility, response and security #J ...