1 to 25 of 30 SIEM Jobs in the South East

solving skills. Desirable Experience Experience supporting Microsoft 365 and Azure environments. Knowledge of Cyber Essentials, ISO 27001 or similar frameworks. Experience with endpoint security, SIEM platforms and security monitoring tools. Relevant professional certifications such as: CISSP,Security+,SC-200,SC-300,SC-100,AZ-104,Microsoft Cybersecurity Architect certifications About ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. It is the chance to work very ...

and technical audiences. Technical & Industry Knowledge: Understanding of cybersecurity frameworks and compliance (ISO 27001, NIST, GDPR). Familiarity with threat detection, EDR/XDR, SIEM, email security, and identity management solutions. Awareness of current threat landscape and MSSP service models (SOC, vulnerability management, incident response). ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. Not sure what … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

programme A background in a regulated environment, such as financial services, insurance or the public sector Hands-on Sentinel onboarding, including custom connectors and SIEM integration (APIs, Logic Apps, Azure Functions, Logs Ingestion API) Practical Microsoft Purview experience AWS and Azure security experience Experience baselining a partly configured environment and ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

Secure by Design. Ensure that projects integrate with security baseline controls such as IPS/IDS, WAF, Firewall Change Management, Identity & Access Management, SIEM and Vulnerability Management Ensure internal customers, external suppliers and delivery partners are aware of security standards and future strategy to influence development roadmaps ...

associated components. Design and implement privileged access policies, credential management, vaulting, session monitoring and least-privilege controls. Integrate CyberArk solutions with Active Directory, LDAP, SIEM and ITSM platforms. Produce high-quality technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and implementation runbooks. Conduct security ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day Outside IR35 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services click apply ...

threats, reduce risk and strengthen their security posture. Lead complex incident investigations, forensic analysis and root-cause determination. Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling. Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise. Coordinate containment, eradication, recovery … experience in cyber security operations, incident response, threat hunting or security consultancy. Demonstrable experience leading complex incidents and coordinating multiple stakeholders. Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar or ArcSight. Practical knowledge of forensic investigation, threat intelligence and evidence-led root-cause analysis. Broad technical ...

threats using Microsoft security technologies, including Sentinel and Defender tooling. What you'll do Monitor, triage and investigate security alerts and events across SIEM and wider security tooling. Identify suspicious activity, indicators of compromise and potential security incidents. Conduct initial incident investigations, assess severity and impact, and escalate appropriately with … Essential UK national with a minimum of 5 years' UK residency. Microsoft Certified: Security Operations Analyst Associate ( SC-200 ) - mandatory. Practical experience with SIEM technologies and security tooling. Solid understanding of IT infrastructure and networking. Understanding of vulnerability and threat management. Knowledge of the incident response lifecycle. Strong team-working ...

including HLDs, LLDs, architecture patterns and data-flow diagrams. Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security. Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter … ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community are key to our success. Our work model prioritizes ...

doing: Overseeing Security Operators during shifts, ensuring continuous security monitoring Performing initial investigations of potential threats using Security Incident and Event Management (SIEM) tools Monitoring SIEM systems for faults and anomalies Contributing to routine security incident management by identifying, prioritising, and escalating threats Supporting the confidentiality, integrity, and availability ...

implement information security policies, controls and solutions. Monitor security events, risks and vulnerabilities and investigate incidents. Design, build, test and troubleshoot security solutions including SIEM and IDS/IPS. Manage vulnerability testing and recommend improvements. Provide cybersecurity expertise across network design and management. Maintain security policies, procedures and technical documentation. … teams through knowledge sharing and training. Requirements 5+ years' multi-network experience with hands-on secure network design and management. Experience with Cisco, Juniper, SIEM, IDS/IPS, penetration testing and forensic tools. Knowledge of ISO27001, GDPR, ITIL and vulnerability management. Strong communication and customer-facing skills. SC Clearance ...

and configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/… OnPrem to support high data ingest rates. Proven delivery and experience leading conducting onboarding activities onto a SIEM Knowledge of OnPrem architectures & design including: Security controls and detection tools. Networking and Secure network architectures Understanding of OSI and TCP/IP models. IP addressing, subnetting, and routing protocols. Knowledge ...

and validate different configuration options, integration models and system architectures within a controlled sandbox environment. Integrate SAP instances with Security Information and Event Management (SIEM) platforms. Investigate how SAP security events, logs and related data are generated, collected, transferred and monitored. Test connectivity and data flows between SAP systems and … concept through to implementation and operational readiness. Essential Skills and Experience Direct experience with SAP Enterprise Threat Detection (SAP ETD). Experience with SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar. Knowledge of SAP configuration and implementation. Understanding of systems integration, interfaces, connectivity and data flows. Experience connecting ...