701 to 725 of 789 SIEM Jobs in the UK

work. This is an exciting opportunity for a hands-on Splunk professional with strong Unix administration skills and a SecDevOps mindset to support ongoing SIEM operations, upgrades, migrations and service improvements. The successful candidate will provide end-to-end support for the Splunk platform, ensuring optimal system health, performance and … security while contributing to automation and operational efficiencies. Key Responsibilities Provide end-to-end administration and support of the Splunk SIEM platform. Conduct Splunk health checks and performance monitoring across the environment. Support planned migrations, upgrades and platform enhancement activities. Create, maintain and optimise Splunk alerts, dashboards and reports. Produce ...

experience in system administration. Knowledge of big datatechnologies and ecosystems (e.g. Apache NiFi). Knowledge of currentmarket and emerging tools in data analytical and SIEM platforms. Knowledgeof network security implementations (e.g., IDS, IPS, EDR), including theirfunction and placement in an enterprise network. Knowledgeof intrusion detection systems and signature development. Knowledge … network architectures and technologies. Must-have experience withframeworks and technologies that support data-intensive distributedapplications. Must-have experience withmaintaining and administrating data analytical and SIEM platforms such asElastic. Must-have experience with problemsolving and analytical skills and able to collect information, analyse, report,and advise on evidence-based changes. Skillto ...

analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve operational efficiency and incident response. What we're looking for At least one year … relevant experience in a SOC, Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious ...

SOAR/SIEM Security Engineer - Critical National Infrastructure (OT) 18-Month FTC | SC Cleared A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology ...

within a live 24/7 operational environment. * Support incident, problem and change management activities, working closely with specialist engineering teams. * Use monitoring and SIEM platforms to proactively identify issues, reduce operational risk and improve service resilience. * Develop and utilise automation and scripting solutions using technologies such as PowerShell, Python … and/or Security Operations Centre (SOC) environments. * Proven incident, problem and change management experience using enterprise ITSM tooling. * Experience using monitoring, logging and SIEM tools to support operational services. * Strong scripting and automation skills using PowerShell, Python, Shell scripting or similar technologies. * Experience supporting cloud identity or privileged access ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Senior SIEM Engineer Birmingham (Hybrid) | 6 Months | Inside IR35 Our client, a leading technology organisation is looking for a Senior SIEM Engineer to support a large-scale security monitoring platform. Responsibilities: Develop and optimise SIEM solutions Build and manage log ingestion pipelines Enhance threat detection, alerts and dashboards Support platform … automation and performance tuning Work closely with Security Operations teams Key Skills: SIEM Engineering/Security Monitoring Elasticsearch, Logstash, Kibana (ELK) Kafka Kubernetes Scripting & Automation Ansible, Helm, ArgoCD or GitLab CI/CD Strong troubleshooting and analytical skills Ideal for candidates from SIEM Engineer, Security Engineer, Detection Engineer, Elastic Engineer ...

NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Knowledgeable and hands-on experience with security architecture and Security Information and Event Management (SIEM) tools. Solid track record in risk and threat modelling within high-threat government environments. Industry certifications in CISSP, CISM or CRISC To apply, please submit ...

multiple audiences including leadership and C-suite teams with excellent communication skills. Experience with Security Operations (SecOps) toolset including Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence and Endpoint Detection and Response (EDR) tools. Channel experience, with an understanding of the Google Cloud Partner ...

expert guidance, clear communication, and consistent value from SOC services. || | • Monitor and analyse network and security events using a variety of tools, such as SIEM, IDS/IPS, and threat intelligence platforms • Identify and investigate potential security incidents, including analysing logs, packet captures, and other data sources • Participate in incident … and apply findings in a range of business functions || | • Knowledge of intrusion detection/prevention systems (IDS/IPS) • Familiarity with SIEM (Security Information and Event Management) tools • Understanding and experience of Cloud b· Analytical skill to perform triage and root cause analysis • Analytical skill to perform triage and root ...

advance threat detection, threat hunting, and security automation within our Proactive Security team in London. The role emphasizes building and refining security tooling, SIEM/EDR configurations, and SOC collaboration. You will develop threat models, implement SOAR capabilities, manage SIEM/EDR and cloud/infrastructure logs across Azure ...

seeking a Cyber Security Analyst to safeguard IT systems, monitor threats, and ensure regulatory compliance. The role requires strong knowledge of threat management, SIEM tools, and incident response. Responsibilities: Monitored IT systems for vulnerabilities and attacks Conducted penetration testing and risk assessments Managed firewalls, IDS/IPS, and endpoint security … Investigated security incidents and breaches Implemented access control and authentication policies Monitored logs and SIEM tools for anomalies Developed and maintained incident response plans Provided security awareness training to staff Ensured compliance with GDPR and ISO 27001 Worked with IT teams for secure deployments Conducted audits of IT infrastructure Recommended ...

Boeing Defence United Kingdom Limited is seeking a Cyber Security Analyst to monitor and improve security operations. You will configure SIEM and vulnerability tools, respond to alerts, and mentor junior analysts. The role requires experience in SOC environments, incident response, and threat analysis, with a focus on continuous improvement and ...

Cyber Security Analyst, you'll support and enhance our security operations capability - monitoring, detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms. What you'll do: Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review … University, including awareness and training initiatives What you'll bring: Strong understanding of security technologies and controls - endpoint protection, network security, IDS/IPS, SIEM/EDR Experience working in large, complex IT or network environments supporting critical infrastructure Knowledge of recognised security standards and risk assessment methodologies A relevant ...

develop, test, and deploy high-fidelity rule-based and anomaly-based detections-as-code Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms Respond to alerts, cyber threats, and drive end-to-end incident response investigations Perform digital forensic investigations to include collection and analysis … automate detection and response operations Conduct threat hunts across corporate, cloud and product environments Support data engineering workflows for core security data lake and SIEM platforms Be an active member of D&R on-call rotations Coach and mentor security engineers within the detection & response team We’d love ...

software, and network components. Develop and maintain the SOC's layout, including physical and virtual configurations. Evaluate, select, and integrate security technologies such as SIEM, IDS/IPS, firewalls, and endpoint protection systems. Ensure seamless integration of security tools and platforms to enable efficient data collection, analysis, and response. Develop … and conduct workshops to ensure the SOC team is well-equipped to handle security incidents. Skills and Qualifications Extensive knowledge of security technologies, including SIEM, IDS/IPS, firewalls, endpoint protection, and threat intelligence platforms. Experience with network architecture, operating systems, and security protocols. Proven experience in designing and implementing ...

senior technical point of contact for customers throughout the deployment lifecycle. Work with customer security and infrastructure teams to understand existing SOC, SIEM, EDR, SOAR and threat intelligence capabilities. Design and implement XSIAM solutions aligned to customer security requirements and operational objectives. Lead migration from legacy SIEM and security platforms … security engineering or security operations roles. 3+ years of hands-on experience deploying and implementing Cortex XSIAM in enterprise environments. Strong practical experience with SIEM technologies, including architecture, implementation, data onboarding and use-case development. Strong understanding of SOC operations, Security Operations workflows and incident response. Proven experience leading technical ...

role is hybrid, with one day per month in the London office. Responsibilities: Implement and support Microsoft security products, primarily Defender, Microsoft Sentinel SIEM and adjacent security suite technologies Design and refine engineering standards and best practices Conduct periodic Microsoft tenant health check assessments, audits and architecture reviews Work alongside … activities, decisions and client interactions Skills/Must have: Solid background as a Security Engineer or SOC Engineer Experience with Microsoft Sentinel and other SIEM solutions (Splunk, Rapid7, LogRhythm, McAfee or equivalent) Strong analytical mindset with hands-on KQL experience and familiarity with related Microsoft Security technologies Ability to lead ...

security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows, escalation paths … operations within government, defence, or critical infrastructure Previous hands on experience in Vulnerability management and incident response and security operations escalation Understanding of SIEM platforms, detection engineering, and Vulnerability alert management Familiarity with ITSM tooling, ideally ServiceNow Strong stakeholder management and reporting capability Understanding of regulated environments (MOD, HMG, Defence ...

delivery roadmap. Key Skills AI solution architecture and technical design Generative AI, LLMs, RAG and agentic AI patterns Cyber security and SOC technology understanding SIEM, SOAR, EDR/XDR and security tooling integration Data architecture, APIs and integration patterns Cloud and AI platform architecture AI security, assurance and responsible … and feasibility assessment Human-in-the-loop and AI control design Stakeholder engagement and technical communication Key responsibilities Assess the existing SOC architecture, including SIEM, SOAR, EDR/XDR, threat intelligence, case management and security data platforms. Assess SOC data availability, quality and suitability for AI-enabled use cases. Identify ...

close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. It unifies detection, investigation, and response … result is a CyberOps experience that scales as threats evolve. Securonix is recognized as a six-time Leader in the Gartner Magic Quadrant for SIEM and a Customers’ Choice on Gartner Peer Insights. The company has been featured by leading publications including WIRED, Dark Reading, and Fortune for its innovation ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

have created content, make sure to share with us some details along with your application. Technology tools & weapons you’ll be using: SIEM, EDR, Wireshark, Windows, Linux, VMware, Cloud Platforms Interesting resources you should check Explore our insights on Threat Ranges to understand the core environments you will be building. … unlock the role of the Senior Defensive Content Engineer at Hack The Box: Tooling & Technical Mastery: Expert proficiency with defensive security tools (e.g., SIEM, EDR, Wireshark, Volatility, Autopsy, IDA) and core domains such as detection engineering, digital forensics, and malware analysis. Content Engineering Experience: Proven track record of designing content ...

Security Engineer – SIEM/QRadar – 6-month contract – London/remote Overview My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs … also be an opportunity to support a future migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation ...