1 to 25 of 187 SIEM Jobs in the South East

and/or AWS vulnerability management. Experience with container, Kubernetes or DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP ...

Google Cloud, alongside a strong understanding of identity and access management, MFA, SSO and privileged access controls. Experience with security technologies including SIEM, EDR and vulnerability management tools is highly desirable, as is hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background ...

and/or AWS vulnerability management. Experience with container, Kubernetes or DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP ...

Azure, AWS or Google Cloud. Strong knowledge of identity and access management, MFA, SSO and privileged access controls. Experience with security tools including SIEM, EDR and vulnerability management platforms. Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking ...

Google Cloud. Experience with identity and access management, including SSO, MFA, RBAC and privileged-access controls. Experience deploying and maintaining security technologies including SIEM, EDR, vulnerability-management, secrets-management and intrusion-detection tools. Experience with Linux administration, system hardening, patch management and configuration management. Experience investigating security incidents, reviewing logs ...

supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.Experience with Bash scripting, automation tools, and infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures ...

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of scripting/automation using PowerShell or Python is desirable. Strong analytical and troubleshooting skills. Stakeholder ...

Azure, or Google Cloud.· Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls.· Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools.· Experience with Linux administration, system hardening, patch management, and configuration management.· Experience investigating security incidents, reviewing ...

DKIM, DMARC, and email fraud prevention. • Experience in security incident investigation and remediation. • Strong understanding of malware analysis and advanced email threats. • Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. • Knowledge of scripting/automation using PowerShell or Python is desirable. Key Competencies • Strong analytical and troubleshooting ...

Ability to work some weekends and holidays Being curious and asking questions Desirable Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash ...

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

regulated environment. Essential Experience Cyber Security Operations and Cyber Defence. Vulnerability Management and remediation. Security Incident Response and Major Incident Management. Security Monitoring and SIEM platforms. Threat Intelligence. Cloud Security, ideally Azure. Data Loss Prevention (DLP). Network Security. Security Governance and Risk Management. Working within regulated environments. Technical Knowledge ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and ...

remediation and patch-management tooling Good understanding of cloud platforms, particularly Microsoft Azure Experience with security monitoring, vulnerability management or incident response Familiarity with SIEM, EDR/XDR or SOC tooling Strong troubleshooting, documentation and communication skills Qualifications Relevant degree, technical qualification, apprenticeship or equivalent professional experience Relevant Microsoft, networking ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...

requirements Active SC (Security Check) clearance - STRONGLY PREFERED. 2-3+ years experience as a Cyber Security/Security Analyst. Hands-on experience with SIEM (Splunk preferred; Microsoft Sentinel or equivalent also considered). Experience with M365 security tooling (e.g. Microsoft Defender, Sentinel, KQL). Good understanding of threat actors ...

books, notebooks, and live-response packages deployable via EDR, SOAR, and endpoint management platforms.• Drive incident response tooling and integration strategy across EDR, XDR, SIEM, identity, cloud, network, ticketing, and AI platforms to enable closed-loop response.• Partner closely with the detection product team to ensure detections produce response-ready ...

NewRelic or CloudWatch.* Proficiency in scripting and/or application development (e.g., Python, Shell scripting).* Experience working with security tools such as SIEM, Data Loss Prevention (DLP), Endpoint Detection & Response (EDR), Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), or code analysis tools.* Experience with cloud environments ...

Extensive experience in cyber security management within defence, aerospace, or government environments.Strong knowledge of classified information handling and secure communication protocols.Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems.Proven track record of leading incident response in high-security environments.Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST ...

technical detail. You’ll ideally bring experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/ ...

technical detail. You’ll ideally bring experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/ ...

Exposure to vulnerability management and working with technical teams to remediate findings. Comfortable supporting incident response activities, including triage, investigation and containment. Experience using SIEM and security monitoring tools for alert analysis and threat detection. Strong communication skills with the ability to explain technical findings to technical and non-technical ...