626 to 650 of 688 SIEM Jobs in the UK

program, scanners, and dependency checks.Support incident response: develop fixes, track resolution, update tickets, and contribute to post-mortems.Monitor and process security alerts from our SIEM and other monitoring tools.Identity & access managementImplement and maintain SSO/MFA configurations for product and infrastructure systems, leveraging Okta and Google Workspace to manage downstream … adoption of AI coding tools across engineering teams: flag insecure usage patterns, identify data leakage risks, and help maintain internal AI usage guidelines.Monitoring & detectionMonitor SIEM alerts, investigate suspicious activity, and escalate when needed.Maintain and tune detection rules under guidance from the Senior Security Engineer.Help operate and maintain SIEM infrastructure (ElasticSearch ...

time permanentposition, based in Glasgow with hybrid working.Main responsibilities include:Oversee and enhance monitoring ofsecurity alerts and events using advanced security information andevent management (SIEM) toolsLead the analysis of security logsand alerts to identify potential security incidentsPerform and supervise comprehensiveanalysis of security logs, network traffic, and data to detect andrespond … successful candidate will have:Relevant Cyber Security and/or IT experienceExperience in metric reporting andKPI/SLA managementExperience with securitytechnologies such as firewalls, SIEM, DLP and endpoint protectionExperience working with Jira, AzureDevOps, ITSM tools such as Cherwell and ServiceNow and the MSOffice suiteExcellent communication skills,both verbal and written ...

responsibilities of the Cyber Security Engineer: Develop and maintain information security plans, policies and proceduresImplement and manage security controls across internal and customer networksMonitor SIEM platforms, IDS/IPS systems and other security tools for threats and vulnerabilitiesInvestigate and resolve cyber security incidents and security alertsCarry out vulnerability assessments and … ToolsISO27001 ComplianceITILQualifications and requirements for the Cyber Security Engineer: Strong experience with Cisco Firewalls, Routers and SwitchesExperience with Juniper networking platformsHands-on knowledge of SIEM, IDS/IPS and vulnerability managementExperience carrying out or supporting penetration testing activitiesUnderstanding of ISO27001, GDPR and ITIL best practicesAbility to communicate technical cyber security ...

structured roadmap based on MITRE ATT&CK, NIST, and CIS benchmarks Lead security investigations and digital forensics through incident response Design, tune, and scale SIEM and standardized logging pipelines Strengthen perimeter and authentication security through WAF configuration, authorization tuning, and suspicious-traffic monitoring Implement DLP controls aligned with sensitive-data … risk reduction through monetary impact, incidents contained, or forensics that changed outcomes Strong development and engineering background, including writing automation Hands-on SOC and SIEM management experience Experience in detection engineering and log pipeline design Experience building security capability in scale-up environments Strong understanding of cloud architectures, especially ...

lead on complex or high-severity findings.Lead security incident response: qualification, forensics (including fraud investigations), fix coordination, post-mortem, and resolution tracking.Detection & SIEMOwn our SIEM platform (ElasticSearch, multi-node Linux): architecture, detection rules, and indicators of compromise.Build and evolve detection coverage, focusing on signal quality over manual toil.Build and maintain … owning security outcomes end to end, with hands-on experience across at least three of: code auditing, infrastructure security (AWS/Linux), penetration testing, SIEM operations, incident response.Ability to own a roadmap: identify priorities, build a plan, execute autonomously, and communicate progress to non-specialists.Deep understanding of modern web architectures ...

Requirements Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data. Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security … MITRE ATT&CK and enhancing security telemetry through automation and tooling. Highest-signal resume keywords Incident Investigation Detection Logic Development MITRE ATT&CK Framework SIEM Tooling Cloud Security Practices ATS Optimization Keywords Hard Skills Security Incident Investigation Detection Rule Development Threat Hunting Forensic Investigation Scripting (PowerShell, Python) Industry Keywords Adversary ...

and external partners (e.g. SOCaaS providers), and running post‐incident reviews and tabletop exercises. Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001/27017/… post‐incident review. Working knowledge of SOC 2 and the ISO 27000 series. Comfortable evaluating and operating security tooling such as EDR, DLP, or SIEM platforms. A strong cross‐functional operator, comfortable bridging IT, Security, Engineering, and GTM teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks ...

protect proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction.Automate critical security workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including … Teaming/Penetration Testing against agentic frameworks and LLM integrations.Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework).Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance policies ...

proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction. Automate critical security workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI.Execute regular offensive security operations, including …/Penetration Testing against agentic frameworks and LLM integrations. Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework).Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance policies ...

from suspicious traffic through to full incident response, and bring the findings back into how we detect and prevent. Design, tune, and scale our SIEM and logging pipeline through standardized log ingestion across services so signal isn't lost in the noise. Strengthen our perimeter and authentication posture, including … forensics that changed outcomes. A strong development and engineering background. You are comfortable writing the automation, not just specifying it. Hands-on SOC and SIEM management experience, including detection engineering and log pipeline design. Experience in scale-up environments, where you've built capability rather than inherited a mature one. ...

and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real-time response.Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped … experience.Proven expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes.Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules.Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns ...

security technologies including Mimecast, Netskope and CyberArk . Investigating and responding to security alerts and incidents. Working alongside the firm's external SOC/SIEM provider. Maintaining security documentation and evidence. Supporting the organisation's ISO 27001 certification programme. Assisting the Lead Cyber Engineer with security projects and improvements. Helping … particularly interested in candidates who have: Good knowledge of cybersecurity and security operations. Experience investigating security alerts, incidents or vulnerabilities. Exposure to SIEM and security monitoring . Experience with technologies such as Mimecast, Netskope, CyberArk, PAM or similar . Strong analytical and problem-solving skills. A collaborative approach and willingness ...

and customer-facing teams to develop modern security capabilities and influence long-term technology strategy. Key responsibilities include: Designing enterprise security architectures across SIEM, SOAR, EDR and Cloud Security platforms. Defining architecture standards and technical governance. Designing secure integrations between security platforms and cloud services. Improving detection engineering, security automation … experienced Security Architect or a Senior Security Engineer ready to step into an architecture role. You'll ideally have experience with: Enterprise Security Architecture SIEM SOAR EDR Microsoft Security Microsoft Sentinel Microsoft Defender SentinelOne Cloud Security Azure Detection Engineering Security Automation Security Governance API integrations Security Platform Design Experience with ...

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us:EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us: EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...

SOAR/SIEM Security Engineer - Critical National Infrastructure (OT) 18-Month FTC | SC Cleared A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology ...

centre of that growth. This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps … architecture Strong understanding of SOC operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills ...

fixes, build them, and measure the outcomeMain Duties & Responsibilities of the Role Detection engineering and tuningBuild, test and maintain high-quality detections across our SIEM, XDR and email security platforms, mapped to the MITRE ATT&CK frameworkContinuously tune existing detections to reduce false positives and improve fidelity, using a data … that give analysts and leadership a clear view of operational healthPlatform health and configurationOwn the configuration and ongoing health of assigned SecOps platforms, including SIEM, EDR, email security and identity protection Monitor for configuration drift, agent coverage gaps and ingestion failures, and resolve them at sourceLead technical onboarding ...

pressure and brief client leadership, up to board level, in language they can act on Run proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture … breach cases you can walk through in depth Advanced hands-on malware analysis capability, spanning behavioural analysis and reverse engineering Deep expertise across enterprise SIEM platforms and EDR tooling (CrowdStrike knowledge a strong advantage) A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling Cloud ...

and improve security platforms controlling privileged access, credentials and administrative activity across critical infrastructure. There is also a requirement within the team for Elastic SIEM capability, so if you have strong Elastic experience alongside your security engineering background, that would also be relevant. The role You'll work across identity … group access. Monitoring privileged sessions and investigating failed authentication activity. Maintaining, patching and upgrading security platforms. Reviewing audit logs and integrating security events with SIEM tooling. Troubleshooting firewalls, load balancers and connectivity issues. Key experience Hands-on Security Engineering within complex environments. Privileged Access Management (PAM) or identity security solutions. ...

Stevenage on a 24-month contract, onsite. The role focuses on implementing, maintaining, and optimising security technologies across complex environments. Key tasks include SIEM administration, log ingestion, automation via PowerShell/Python, and API integrations. This is a hands-on engineering position within the Defence sector, with strong emphasis ...

infrastructure, high-performance computing environments, or other distributed systems at scale Strong programming skills in Python, KQL, SPL, or similar languages Experience with SIEM platforms, detection technologies, and forensic investigation techniques Ability to build detection for novel attack techniques and conduct forensics in complex distributed environments Track record of securing … and collaborating across security and AI research teams. Highest-signal resume keywords AI Security Threat Detection Incident Response Coordination Forensic Investigation Techniques Python Programming SIEM Platform Experience Hard Skills Detection Engineering Threat Hunting Data Poisoning Prevention Model Extraction Security Adversarial Example Mitigation Automated Response Playbooks Detection-as-Code Frameworks ...

IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...