576 to 600 of 771 SIEM Jobs in the UK

cyber security operations team, providing technical guidance, mentoring and support. Take ownership of security incidents, coordinating investigations, containment and recovery. Improve security monitoring, SIEM detections, threat hunting and incident response playbooks. Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management. Manage outsourced security … operations team. Strong technical expertise in security operations, incident response and detection engineering. Experience with cloud security, particularly Microsoft Azure and Entra ID, alongside SIEM and endpoint security technologies. Strong stakeholder management and communication skills, with the ability to explain technical risks to non-technical audiences. Relevant qualifications such ...

and access provisioning in partnership with ITSM. Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR/SIEM, and incident response. Manage vendors and core infrastructure partners, ensuring cost-effective delivery, timely patching, and contract governance. Maintain secure, high-performance connectivity for offices, labs … Okta or similar) Endpoint Management (Intune, Jamf, or similar) Corporate Networking (LAN/Wi-Fi/VPN/firewalls) Cyber Security Operations (EDR, SIEM, vulnerability management, incident response) Demonstrated ability to define and enforce standards and processes that combine agility with control. Strong vendor and stakeholder-management capability. Excellent communication ...

uncommon? (not required) Certifications such as Network+, Security+, CySA+ 1-3 years' experience as a Security/Network Administrator or equivalent knowledge Prior SIEM experience and/or administration Hands‐on experience with parsing data, log formats, regular expressions Scripting experience (bash, PowerShell, python) Multiple OS experience (mac, windows) Knowledge … various security methodologies and processes, and technical security solutions (SIEM, IDS/IPS, Firewall Solutions, Offensive Security tools) #J-18808-Ljbffr ...

SIEM Content Engineer –Sentinel – London – £550–£700 per day - 5 Months - Hybrid/2 Days p/w in London We are seeking an experienced SIEM Content Engineer to join a Cyber Security team on an initial 5-month contract. This is an excellent opportunity for a technically strong security … play a key role in strengthening enterprise security monitoring and cyber resilience. You will be responsible for developing high-quality detection content, engineering SIEM integrations, optimising security telemetry and implementing automation to improve threat detection and response capabilities across a complex enterprise environment. Working closely with Security Operations, Cloud, Infrastructure ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … with strong judgement, clear communication and the ability to turn threat intelligence and adversary behaviour into practical defensive capability. Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … with strong judgement, clear communication and the ability to turn threat intelligence and adversary behaviour into practical defensive capability. Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: SIEM Content and Platform Engineer Location: Hybrid; 1 day per month reporting in London office Employment Type: Full Time Purpose of Role We are seeking … experienced SIEM Content & Platform Engineer to join the Cyber Security team. The role combines SIEM platform engineering, detection content development, security engineering, automation, and operational support to improve enterprise monitoring and cyber resilience. The engineer will work with Security Operations, Infrastructure, Cloud, and Application teams to deliver scalable telemetry, high ...

and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: SIEM Content and Platform Engineer Location: Hybrid; 1 day per month reporting in London office Employment Type: Full Time Purpose of Role We are seeking … experienced SIEM Content & Platform Engineer to join the Cyber Security team. The role combines SIEM platform engineering, detection content development, security engineering, automation, and operational support to improve enterprise monitoring and cyber resilience. The engineer will work with Security Operations, Infrastructure, Cloud, and Application teams to deliver scalable telemetry, high ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. Responsibilities: Deploy, configure, and manage cloud security … platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. Responsibilities: Deploy, configure, and manage cloud security … platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. About the job As a part … ensure security incidents can be swiftly resolved. Responsibilities Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and ...

protective monitoring and SOC transformation engagements across enterprise environments. The role demands progression through architecture, engineering, SOC or consultancy roles and delivering enterprise-scale SIEM, EDR/XDR and managed security service changes. The successful candidate will own engagements from discovery and target-state design through migration, assurance and service ...

cybersecurity threats. The job description for a SOC Analyst typically includes the following elements: Key Responsibilities: Continuously monitor security alerts from various sources (SIEM, IDS/IPS, firewalls, antivirus, etc.). Analyze security incidents and events to identify potential threats and vulnerabilities. Use threat intelligence to understand and anticipate cyber … management. Stay up to date with the latest cybersecurity threats, trends, and technologies. Skills and Qualifications: Proficiency with security information and event management (SIEM) systems. Experience with intrusion detection/prevention systems (IDS/IPS), firewalls, and antivirus software. Familiarity with network protocols, operating systems, and security architectures. Strong analytical ...

business strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … designed solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success ...

scale SOC modernization. You will guide customers through log migration, detection strategy development, and transformation programs in dynamic enterprise settings. With 10+ years in SIEM/security analytics and 8+ years in SOC tooling, you will partner with executives, sculpt roadmaps, and mentor high-performing teams to deliver measurable security ...

public sector clients. You will build and tune detection logic in a live SOC and own the pipelines feeding it, working hands-on across SIEM/detection and log ingestion/normalisation. This delivery role requires translating technical risk into government-friendly decisions, collaborating with analysts and system owners, and ...

solutions. Bonus Points: Prior experience at an open‐source or developer‐centric infrastructure company. Familiarity with observability (logs, metrics, traces) or security analytics (SIEM/XDR) use cases. If you’re driven to build your own pipeline, master complex deal cycles, and help customers unlock the power of Search ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace and security events with features such as APM, RUM, SIEM, Kubernetes monitoring and more, all enhancing operational efficiency and reducing observability spend by up to 70%. We are looking for Strategic Events Associate who will ...

working hours If You’ve Got It - We Want It 5+ years of quota carrying Public Sector Enterprise Security sales experience calling on Security (SIEM & Observability) & IT Personas (CISO/CIO’s) Experience working with at least one earlier stage start-up organization #J-18808-Ljbffr ...

standard working hours If You’ve Got It - We Want It 5+ years of Enterprise/Strategic sales or pre-sales experience in Security (SIEM & Observability) or IT infrastructure, including direct sellers, overlay specialists, or Solutions Engineers ready to transition into a closing role Experience working with at least ...

able Technologies Ltd. is seeking two experienced Senior Sales Engineers to lead pre-sales activities for MDR, SIEM, and EDR. You will partner with account executives, channel partners, and customers to run compelling demos, POV trials, and position our solutions for MSPs and mid-market buyers. This high-impact role ...

improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practices Configure and utilise SIEM, vulnerability management and other security-based tooling. Innovate in the areas of SIEM and SOC and develop best practice. Mentor and oversee development of junior … Required Skills/Experience): 3+ years’ experience in the following areas: Working in a Security Operations Centre (SOC). Working with SIEMs and evaluating SIEM alerts. Experienced in using log aggregation and correlation tools (Splunk preferred). Experienced in interpreting systems, application and network device logs. Experienced in packet capture ...

threats using cutting‐edge tools, collaborate with global teams on incident investigations, and mentor colleagues to uplift skills across the CSOC. From fine‐tuning SIEM systems and automating response actions to delivering insightful security reports and advisories, your expertise will help shape Vodafone’s resilience against evolving threats. This … least 4 years in security event analysis and incident response Strong technical knowledge of networking protocols, operating systems (Windows/Linux), and security technologies (SIEM, EDR, IDS/IPS, firewalls, proxies) Hands‐on experience with SIEM tuning and SOAR automation Familiarity with frameworks like MITRE ATT&CK and cyber kill ...

including network security, malware analysis, threat hunting, threat intelligence production, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem ...

Minimum 5+ years of experience with Cyber Security products or platforms, such as but not limited to Endpoint Security, Vulnerability Management, SIEM (Security Information and Event Management), Network Security, Firewall, UTMs, Compliance solutions, etc. Must have previous experience in designing and developing materials and writing assessments for technical training. Excellent ...