1 to 25 of 35 SIEM Jobs in the West Midlands

secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security ...

cloud landing zones using automation frameworks. Implement advanced networking (VPC, VPN, hybrid connectivity, load balancing, DNS, CDN) and security controls (IAM, RBAC, KMS, firewalls, SIEM integration). Automation & Infrastructure as Code (IaC): Develop, test, and maintain IaC templates using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines ...

environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands‐on experience delivering technical demonstrations, workshops, evaluations, and Proof ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

systems. ✔️ Manage and configure firewalls, IDS/IPS, and endpoint security. ✔️ Investigate security alerts and coordinate incident responses. ✔️ Maintain and analyze logs using SIEM tools. ✔️ Conduct digital forensics and root‐cause analysis of incidents. ✔️ Implement data encryption, MFA, and secure access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with ...

Operations: Act as the technical lead for major cyber security incidents and critical vulnerabilities impacting West Midlands Police. Establish operational frameworks, playbooks, security monitoring (SIEM/XDR), and simulated wargaming exercises. Governance, Policy & Compliance: Own and update Information Assurance policies aligned with national frameworks (NCSC, NIST CSF, ISO 27001). ...

conduct vulnerability assessments, lead incident response, and implement security policies and procedures across the organization. You will ensure GDPR and ISO27001 compliance, work with SIEM tools for threat detection, manage access controls and firewalls, oversee security awareness, perform audits and risk assessments, and help maintain disaster recovery and business #J ...

Analysts to manage Authority’s environment’s systems. Skills/Experience: Previousexperience of Enterprise ICS/network architectures and technologies Experienceand knowledge of SIEM solutions; having the ability to identify use cases andtheir creation, their deployment and tuning. Experienceas a mentor/coach to junior analysts Previousexperience of utilising ...

infrastructure Conduct vulnerability assessments and penetration tests Lead incident response and mitigation Implement security policies and procedures Ensure compliance with GDPR, ISO27001 Work with SIEM tools for threat detection Manage access controls and firewalls Oversee employee security awareness programs Respond to emerging cyber threats Document incidents and reports Collaborate with ...

Ambikatechs is seeking a Cyber Security Analyst to safeguard IT systems, monitor threats, and ensure regulatory compliance. You will work with threat management, SIEM tools, and incident response to protect our infrastructure. Join a team that collaborates with IT, conducts risk assessments, implements access controls, and develops incident response plans. ...

Security function from the ground up. We seek a Cyber Security Analyst to monitor, detect, and respond to threats across our digital estate using SIEM, EDR/XDR and related platforms. You will lead or support end-to-end incident response, run proactive threat hunting, and develop detection playbooks. ...

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

secure and resilient. You will also work to integrate GCP-native security controls and telemetry with Arden’s wider security tools, including Microsoft Sentinel SIEM/SOAR, to support a consistent and effective approach to security monitoring and response. Reporting to the Senior Information Security Engineer, this is an opportunity … associated with prompt injection, sensitive-data leakage, tool access, autonomous actions and output validation. Experience integrating GCP security logs and findings with Microsoft Sentinel SIEM/SOAR to support monitoring, detection, investigation and incident response. At least two years’ experience in incident detection, incident response and digital forensics. Experience working ...

LRQA seeks a Principal Security Consultant to lead complex security engagements across SOC, SIEM/SOAR, XDR/EDR, identity, and cloud security. You will design, implement and mature security architectures, working with SOC, engineering and pre-sales to deliver secure solutions aligned to regulatory expectations. You will produce reusable ...

Software Engineering Specialist - Birmingham - Inside IR35 - Rate £500-£550 per day We are seeking a skilled SIEM Security Engineer with expertise in SIEM and Security logging and monitoring to join our dynamic team. As a SIEM engineer, you will play a critical role in designing, developing, and maintaining the ingestion … security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. Essential: * Proven experience in Software Engineering roles * Experience in some of the following technologies: o Elasticsearch - Logstash -Kibana o Ansible o Kafka ...

Nettitude Group in Birmingham is seeking a vigilant SOC Monitoring Analyst to join our 24x7 team, using SIEM, EDR, and threat intelligence to triage events and advise on risk. You will produce detailed incident reports, tune alerts, and collaborate on advancing monitoring capabilities, including malware analysis and cross‐team projects. ...

align with Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior … discussions. What You'll Bring: Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments ...

Advert Job Title: SIEM Security Engineer Location: Birmingham- Hybrid 3 days on site a week Contract Type: 5-Month Contract About the Role: We are looking for a skilled SIEM Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and … threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and ...