17 of 17 SIEM Jobs in the Midlands

bringYou'll have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access and Privileged Access.Data Loss Prevention (DLP) technologies and policy management.Vulnerability Management and security hardening.Security ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber ...

Infrastructure Engineer/Analyst ( Hybrid/Chesterfield) - 12 Month FTC. VMWare, AD, Exchange, Windows Server, Azure, O365, Siem tooling, PowerShell, Networking, Meraki, Firewalls Infrastructure Engineer/Analyst: Do you have a background in supporting business or technical applications? Do you have a broad technical skill set but looking ...

management. Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. Network and ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

supporting customers through security events, and helping to continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor … Security Operations Centre or similar cyber security role Experience investigating and responding to cyber security incidents within agreed SLAs Hands-on experience with SIEM, EDR and email security technologies Experience mentoring or supporting analysts at different stages of their careers A strong understanding of cyber threats, attack techniques and compromise ...

engineering, which means its ideal for someone who enjoys solving problems and building security processes. Key Areas include: Build and refine detection logic across SIEM, EDR and related tooling Create automated SOAR workflows and playbooks to streamline response Lead investigations into complex or high severity incidents Carry out deep-dive ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

traffic and security alerts to identify potential threats Supporting investigations into security incidents, gathering evidence and documenting findings Using Security Information and Event Management (SIEM) tools to detect and analyse suspicious activities Collaborating with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update ...

hybrid basis, paying a salary range up to £62,000 plus bonus. Lead IT Security Analyst: Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve … Analyst: Technical Experience Proven experience in IT security/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based ...

across areas including: Investigating and responding to medium and high-severity security incidents Performing detailed analysis of alerts, logs and suspicious activity Working with SIEM, EDR and wider security tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators … experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with analysts ...

Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Support Project Managers with the planning and execution of OT cyber security aspects of projects to ensure they meet the time, cost and quality required … Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Practitioner of the ISA/IEC 62443 suite of standards, with particular focus on -2-1, 2-4, 3-2 and 3-3.Experience working ...