726 to 750 of 788 SIEM Jobs in the UK

security operations team. You will balance hands-on defense with leadership, overseeing alerts, investigations, and incident response across global teams. The role requires strong SIEM/EDR/DLP and firewall experience, familiarity with Agile practices, and mentoring juniors. Hybrid working in Scotland, with a typical early start. #J ...

IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft ...

Sword Group is seeking an OT SIEM Engineer to strengthen cyber security monitoring across complex OT environments, with a focus on Microsoft Sentinel. The role involves implementing automation, integrating telemetry and developing detection content to improve security operations. You will collaborate with Cyber Defence and Security Operations teams, migrate data ...

quality requirements. Establish relationships between business services, applications, infrastructure, OT systems, information assets and accountable owners. Coordinate integration with asset-discovery, ITSM, vulnerability management, SIEM, network management, cloud and other enterprise platforms. Oversee asset discovery and reconciliation across corporate, operational and field environments. Develop safe and proportionate approaches … . Experience with enterprise CMDB/ITSM platforms. Experience with OT asset-discovery or industrial cyber-monitoring technologies. Experience integrating CMDB, vulnerability-management, SIEM and enterprise architecture platforms. Knowledge of the NCSC Cyber Assessment Framework, IEC 62443, ISO 27001, ISO 55001 or ITIL . Experience developing information asset registers, data ...

broad generalist security engineering role in a Microsoft environment. You'll work across identity and access management, cloud security, vulnerability management, and SIEM/detection, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional VPN access and improving … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be beneficial. A great opportunity for a Security Engineer ready to take broader technical ownership ...

operating procedures and security runbooks Optimisation of security controls within the technology estate Reviewing security architecture designs, ensuring they meet firm security standards Maintaining SIEM tools, including their detection rules Oversight of vulnerability management across the firm Providing calm and effective leadership on security incident response activities Working closely with … services) A strong track record of effectively leading cyber security teams Excellent incident response leadership experience A strong technical background, with experience working with SIEM tools, cloud technologies, endpoint and email security, IAM etc. Proven ability to improve operational security, detection rules and threat intelligence Experience working with outsourced ...

operating procedures and security runbooks Optimisation of security controls within the technology estate Reviewing security architecture designs, ensuring they meet firm security standards Maintaining SIEM tools, including their detection rules Oversight of vulnerability management across the firm Providing calm and effective leadership on security incident response activities Working closely with … services) A strong track record of effectively leading cyber security teams Excellent incident response leadership experience A strong technical background, with experience working with SIEM tools, cloud technologies, endpoint and email security, IAM etc. Proven ability to improve operational security, detection rules and threat intelligence Experience working with outsourced ...

Vinted Pay builds, not a parallel workstream. Find and close the operational blind spots: run deep technical reviews of our AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling (e.g. Wiz), and fix what you find - prioritised by exposure, not by finding count. Own PCI DSS and data … and translate technical risk into business consequence for senior audiences, internal and external. Comfortable in our stack - Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM and CSPM tooling - or eager to learn it, with a real interest in security and privacy as a field and the appetite to keep growing ...

including VPNs, VLANs, and Wi-Fi. Monitor and support servers, storage, backups, and virtual environments. Assist with patching, vulnerability remediation, endpoint security, MDR, and SIEM solutions. Support ITIL service desk processes, change management, and major incident management. Essential Skills & Experience Microsoft 365 and Entra ID administration. Intune MDM and Conditional … UniFi, Aruba, Veeam, Bitdefender, PRTG, SQL Server, MySQL, IIS, Apache, WSUS, and related technologies. Desirable ITIL Foundation. Microsoft certifications. VMware experience. Exposure to cybersecurity, SIEM, and MDR solutions. This is an excellent opportunity for a motivated IT professional looking to broaden their experience across infrastructure, cloud services, networking, and security ...

looking for? Commercial experience working within a SOC. Practical experience investigating security alerts and responding to incidents. Hands-on experience with a SIEM platform and familiarity with endpoint security tools. Some exposure to Microsoft 365 environments. Excellent written and verbal communication, including the ability to explain technical findings clearly … Sentinel and Microsoft Defender XDR, but experience with these specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

seeking a Senior Security Engineer in London with strong Microsoft, Azure, cloud and enterprise security experience. The role involves building security controls for SIEM and PKI/BYOK integrations, and configuring Defender for Cloud and Purview across a complex environment. You will lead technical delivery, often guiding a small team ...

project delivery, and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

Data Analytics Engineer | Splunk & Cribl | SIEM Pipelines We're hiring a Data Analytics Engineer to lead the migration, optimisation and secure operation of log ingestion and observability pipelines, with a focus on moving log sources from Splunk ingestion to Cribl Stream/Edge. The role Lead the migration … and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection Monitor and resolve pipeline and SIEM issues, and report on ingest reduction, cost savings, pipeline health and event loss ...

InfraView is seeking an experienced SIEM Content Engineer to join its Cyber Security team on an initial 5-month contract in London. The role focuses on Microsoft Sentinel, detection engineering and security platform development to strengthen enterprise monitoring and threat detection. You will design, develop and optimise analytics rules, ingestion ...

Phoenix Software is hiring a SOC Deployment Engineer to join its Security Operations Centre. You will deploy, configure and optimise SIEM/SOAR tooling, onboard customer environments and monitor security operations across the UK. You will work with SOC Analysts and customers, support onboarding, tune SIEM deployments, maintain infrastructure and ...

secure environments. Your work may include: Documenting security configuration of information systems. Proactive management of technical vulnerabilities. Deployment of security tooling (vulnerability scanning/SIEM/etc). Deploying secure lockdowns to information systems. Deployment of security testing tools to CI/CD pipelines. What We re Looking … challenges. You don't need to tick every box, but we re particularly interested in people with skills/experience in: Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Understanding of CI/CD tools required to secure a pipeline. High standards in written ...

Platform Engineering to design, build, and integrate security monitoring platforms across cloud, hybrid, and on‐prem environments within client engagements. You will work with SIEM and cloud‐native security tooling such as Chronicle, Google SecOps, and Azure/AWS, develop log ingestion pipelines, and contribute to automation and documentation while ...

proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

doing? Driving awareness, adoption and revenue growth across Phoenix's Security Platform offerings. Acting as a subject matter expert for solutions including Endpoint Security, SIEM/SOAR and Endpoint Management. Supporting Account Managers and wider sales teams to identify, qualify and progress security opportunities. Leading customer discovery sessions, workshops and … and a passion for helping customers solve business and technology challenges. Good knowledge of security technologies and platforms, including areas such as Endpoint Security, SIEM, SOAR and Endpoint Management. Experience conducting discovery conversations and translating customer requirements into effective security solutions. Strong communication, presentation and stakeholder management skills with ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

that integrate with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. … with Apigee, and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script ...

that integrate with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization: Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. … with Apigee, and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...