25 of 25 SIEM Jobs in the North West

and Microsoft Defender. Excellent communication and stakeholder management skills. Eligible to gain and maintain HMG Security Clearance at "Security Check" (SC) level. Hands-on experience using Elasticsearch and other SIEM technologies. Exposure to security automation and threat intelligence platforms. Previous experience in delivering training and conducting cyber exercises. About the DCC: At the DCC, we believe in making Britain more More ❯

for this role: 3+ years' experience in a senior cyber security role Strong knowledge of security frameworks (NIST, NCSC, CIS, MITRE ATT&CK) Hands-on experience with security tools: SIEM, IDS/IPS, firewalls, endpoint protection Expertise in Azure security and securing cloud platforms A solid understanding of vulnerabilities, penetration testing, and compliance Experience with network security, encryption, TLS, SSL More ❯

governance bodies to represent the organisations security posture. Desirable: Exposure to private cloud environments and related security tooling. Experience in security toolsets such as antivirus/EDR, vulnerability scanners, SIEM, or MDM solutions. Relevant industry qualifications (e.g. CompTIA Security+, SSCP, CISSP Associate, ISO 27001 Lead Implementer). Knowledge of backup and DR security principles (experience with Acronis, Barracuda, or equivalent More ❯

concepts for clients Confident producing clear documentation and reporting Desirable Skills: Certifications: Security+, SC-200, CEH, ISO 27001 Lead Implementer, PCIP Penetration testing or red teaming exposure Experience with SIEM/SOAR platforms (e.g., Microsoft Sentinel) Familiarity with MSP toolsets (Autotask, IT Glue, Rewst) or automation experience Personal Attributes: Friendly and professional Excited about tech and thrives on developing understanding More ❯

concepts for clients Confident producing clear documentation and reporting Desirable Skills: Certifications: Security+, SC-200, CEH, ISO 27001 Lead Implementer, PCIP Penetration testing or red teaming exposure Experience with SIEM/SOAR platforms (e.g., Microsoft Sentinel) Familiarity with MSP toolsets (Autotask, IT Glue, Rewst) or automation experience Personal Attributes: Friendly and professional Excited about tech and thrives on developing understanding More ❯

improve operational performance. Maintain a continuous understanding of the threat landscape with in-depth knowledge around threat actors, TTPs, and vulnerabilities. Skills/Must have: Demonstrable experience working with SIEM technology, preferably within a CSOC/SOC environment. Demonstrable technical knowledge, skills, and/or experience in intrusion analysis, and network and security investigation using a variety of security tools More ❯

Engineering, Network Security, and/or working in a Security Operations Centre (SOC). Hands-on knowledge of security tools and technologies, including Web Application Firewalls, SASE, access control, SIEM, antivirus, email/web security gateways, firewalls, load balancers, ACLs, and network protocols (TCP/IP, routing, switching). Strong grasp of security infrastructure design, IT security best practices, and More ❯

Engineering, Network Security, and/or working in a Security Operations Centre (SOC). Hands-on knowledge of security tools and technologies, including Web Application Firewalls, SASE, access control, SIEM, antivirus, email/web security gateways, firewalls, load balancers, ACLs, and network protocols (TCP/IP, routing, switching). Strong grasp of security infrastructure design, IT security best practices, and More ❯

end to end network infrastructure automation capabilities Proficiency in configuring, managing, and troubleshooting Firewalls. Cisco, Palo Alto etc, Experience with intrusion detection/prevention systems, as well as with SIEM tools and security incident response. Design and implement secure network architectures, including Firewalls, intrusion detection/prevention systems, and encryption technologies. Be able to communicate to technical and non-technical More ❯

end to end network infrastructure automation capabilities Proficiency in configuring, managing, and troubleshooting firewalls. Cisco, Palo Alto etc, Experience with intrusion detection/prevention systems, as well as with SIEM tools and security incident response. Design and implement secure network architectures, including firewalls, intrusion detection/prevention systems, and encryption technologies. Be able to communicate to technical and non-technical More ❯

ON THE TEAM) Lab 1: Cloud Enterprise and Computer Security Data & Analytics (KQL/SQL or BigQuery for GCP) Kubernetes (K8s) Power Platform and PowerShell Lab 2: Security Operations SIEM management Advanced logging Cyber Defence Centre tooling DLP technical policy development Ability to build and train machine learning models to address business needs Lab 3: Modern Workplace Security Power Platform More ❯

HAVE (DEPENDING ON THE TEAM) Lab 1: Cloud Enterprise and Computer Security Data & Analytics (KQL/SQL or BigQuery for GCP) Power Platform and PowerShell Lab 2: Security Operations SIEM management Advanced logging DLP technical policy development Ability to build and train machine learning models to address business needs Power Platform and PowerShell WORKING WITH US We're proud to More ❯

B2B sales cycles, procurement, and high-value deal closing Confidence in engaging with technical stakeholders and C-level executives Knowledge of cloud platforms (Microsoft Azure, AVD), cybersecurity (EDR, SOC, SIEM), and MSP service models Commercially astute, highly accountable, and results-driven Nice to Have Degree or equivalent in Business, IT, or related field Formal sales training (e.g. Sandler, SPIN, Miller More ❯

experience preferred). Strong understanding of incident response, SOC operations, and endpoint security. Familiarity with security standards (ISO27002, CIS, NIST, CAF). Experience with technologies such as SSE, SASE, SIEM, MDR/EDR. Confident in customer-facing engagements and solution design. Excellent communication, documentation and stakeholder management skills. Engineer certifications in security platforms - an advantage. At Gleeson Recruitment Group, we More ❯

experience preferred). Strong understanding of incident response, SOC operations, and endpoint security. Familiarity with security standards (ISO27002, CIS, NIST, CAF). Experience with technologies such as SSE, SASE, SIEM, MDR/EDR. Confident in customer-facing engagements and solution design. Excellent communication, documentation and stakeholder management skills. Engineer certifications in security platforms - an advantage. At Gleeson Recruitment Group, we More ❯

you'll be doing Designing and implementing security controls & tooling across our hybrid-based infrastructure, with a focus on Microsoft Azure. Monitoring and responding to threats using tools like SIEM and XDR, ensuring rapid detection and resolution of security incidents. Collaborating in an Agile environment with multiple teams to embed security best practices throughout the business. Conducting regular vulnerability assessments … experience, with a focus on cloud environments such as Microsoft Azure. A broad understanding of common infrastructure services and operating systems (Windows based, AD, DNS, DHCP, etc) Familiarity with SIEM and XDR tools for threat detection, monitoring, and incident response. A solid understanding of network security, identity and access management (IAM), and vulnerability management. A proactive mindset with a passion More ❯

internal team, and manage relationships with 3rd party vendors including the SOC providers Build and embed incident response plans, playbooks, and operational standards for the function Drive maturity across SIEM, SOAR and security tooling, ensuring alignment with the latest threat landscape Provide cyber security leadership across new and existing technology programmes Lead response to major incidents, and provide guidance to … in cyber security leadership roles (10–15 years total, with 5+ in senior management) Proven ability to build security operations capability in a global organisation. Strong technical knowledge across SIEM, SOAR, CASB, DLP, endpoint protection, cloud security, firewalls, etc. Prior hands-on experience in security engineering or architecture is highly desirable Exceptional knowledge of global compliance frameworks (NIST, ISO More ❯

internal team, and manage relationships with 3rd party vendors including the SOC providers Build and embed incident response plans, playbooks, and operational standards for the function Drive maturity across SIEM, SOAR and security tooling, ensuring alignment with the latest threat landscape Provide cyber security leadership across new and existing technology programmes Lead response to major incidents, and provide guidance to … in cyber security leadership roles (10–15 years total, with 5+ in senior management) Proven ability to build security operations capability in a global organisation. Strong technical knowledge across SIEM, SOAR, CASB, DLP, endpoint protection, cloud security, firewalls, etc. Prior hands-on experience in security engineering or architecture is highly desirable Exceptional knowledge of global compliance frameworks (NIST, ISO More ❯

project management skills. Strong leadership and team management skills with a minimum of 2+ years in management. Proficiency in using, building, and maintaining a Security Information and Event Management (SIEM) environment (e.g., Microsoft Sentinel, Splunk). Proficiency in using, building, and maintaining an EDR/XDR solution (e.g., Microsoft Defender, Tanium). Broad and comprehensive technical knowledge of IT infrastructure More ❯

e.g. NIST, ISO, PCI DSS etc), and leading audits and examinations. So you should have good knowledge of security tooling and processes, compliance and security management (endpoint protection, cloud, SIEM etc). There is an opportunity to build out a cyber security team in the future with this role Skills & Experience Required: 3+ years of experience working in Cyber Security … range of security policies and standards such as GDPR, ISO, PCI, NIST Confidence when speaking with stakeholders, as well as the ability to provide training and mentoring around cybersecurity SIEM Ideally, some relevant cybersecurity certifications This role is based at the Central Manchester office - with hybrid working 3 days a week in their brand-new UK headquarters. You will be More ❯

e.g. NIST, ISO, PCI DSS etc), and leading audits and examinations. So you should have good knowledge of security tooling and processes, compliance and security management (endpoint protection, cloud, SIEM etc). There is an opportunity to build out a cyber security team in the future with this role Skills & Experience Required: 3+ years of experience working in Cyber Security … range of security policies and standards such as GDPR, ISO, PCI, NIST Confidence when speaking with stakeholders, as well as the ability to provide training and mentoring around cybersecurity SIEM Ideally, some relevant cybersecurity certifications This role is based at the Central Manchester office - with hybrid working 3 days a week in their brand-new UK headquarters. You will be More ❯

e.g. NIST, ISO, PCI DSS etc), and leading audits and examinations. So you should have good knowledge of security tooling and processes, compliance and security management (endpoint protection, cloud, SIEM etc). There is an opportunity to build out a cyber security team in the future with this role Skills & Experience Required: 3+ years of experience working in Cyber Security … range of security policies and standards such as GDPR, ISO, PCI, NIST Confidence when speaking with stakeholders, as well as the ability to provide training and mentoring around cybersecurity SIEM Ideally, some relevant cybersecurity certifications This role is full-time onsite in their Central Manchester office - you must be willing and able to attend the office 4/5 days More ❯

e.g. NIST, ISO, PCI DSS etc), and leading audits and examinations. So you should have good knowledge of security tooling and processes, compliance and security management (endpoint protection, cloud, SIEM etc). There is an opportunity to build out a cyber security team in the future with this role Skills & Experience Required: 3+ years of experience working in Cyber Security … range of security policies and standards such as GDPR, ISO, PCI, NIST Confidence when speaking with stakeholders, as well as the ability to provide training and mentoring around cybersecurity SIEM Ideally, some relevant cybersecurity certifications This role is full-time onsite in their Central Manchester office - you must be willing and able to attend the office 4/5 days More ❯

incident response Designing and evolving secure architectures using defence in depth and threat modelling principles across cloud, networks and endpoints Driving vulnerability management and scaling tooling such as CSPM, SIEM, IAM and endpoint protection to manage risk effectively Contributing to compliance efforts including ISO27001, supplier security and data privacy, helping ensure we remain audit ready Building lightweight processes that make … and delivery Keeping pace with emerging threats and contributing to strategic conversations about how we evolve our approach Experience with vulnerability management Experience with scaling tools such as CSPM, SIEM, IAM and Endpoint protection You're hands on, curious and motivated by solving real problems You enjoy working closely with others to figure things out collaboratively You bring structure to More ❯

be responsible for: Contributing to the setup and ongoing enhancement of the Security Operations Center (SOC). Investigating security incidents and implementing effective countermeasures. Utilizing SOC tools such as SIEM, vulnerability scanners, and incident response solutions. Performing threat hunting by analyzing and assessing security events on central platforms. Documenting incidents thoroughly in ticketing and SIEM systems, and generating detailed reports. More ❯