76 to 100 of 879 SIEM Jobs in the UK

qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and ...

confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents. Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response. Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity ...

confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents.* Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response.* Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity ...

and maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focusImplement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security toolsCollaborate with internal IT, development and third-party teams to embed security across the organisationConduct risk assessments, vulnerability scans ...

maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focus Implement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security tools Collaborate with internal IT, development and third-party teams to embed security across the organisation Conduct risk assessments ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

cloud landing zones using automation frameworks. Implement advanced networking (VPC, VPN, hybrid connectivity, load balancing, DNS, CDN) and security controls (IAM, RBAC, KMS, firewalls, SIEM integration). Automation & Infrastructure as Code (IaC): Develop, test, and maintain IaC templates using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong troubleshooting, risk assessment, prioritisation and communication skills. Experience guiding colleagues, maintaining technical documentation and ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...

best practices through documentation, workshops, and knowledge-sharing sessions. Contribute to continuous improvement initiatives across the wider security operations function. Skills & Experience: Experience with SIEM platforms such as Microsoft Sentinel, Splunketc Previous experience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment. Experience developing, testing, and ...

analysing Windows security events, Azure logs and cloud telemetry. Knowledge of cyber security frameworks, attack methodologies and threat actor tactics. Experience developing and tuning SIEM detections. Strong Kusto Query Language (KQL) skills. Ability to work independently within a Security Operations environment. Excellent analytical and problem-solving skills. Desirable Skills Security ...

bringYou'll have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access and Privileged Access.Data Loss Prevention (DLP) technologies and policy management.Vulnerability Management and security hardening.Security ...

and agile working arrangements, helping our people achieve a positive work-life balance.Main tasks:Monitor security alerts, logs and events across key platforms including SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools. Support timely incident response, containment, remediation, recovery and post-incident ...

Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively across technical and ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer,?Detection & Response Engineer,?SIEM Engineer,?Security Detection Engineer,Threat Hunting Engineer,?Security Automation Engineer,?SOC Engineer,?Incident Response Engineer,Cloud Security Engineer,?Network Security Engineer,?Cybersecurity Analyst (Threat Focus ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using Manage Engine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. ...