1 to 25 of 37 SIEM Jobs in the South West

Azure, or Google Cloud. Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls. Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools. Experience with Linux administration, system hardening, patch management, and configuration management. Experience investigating security incidents, reviewing ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong troubleshooting, risk assessment, prioritisation and communication skills. Experience guiding colleagues, maintaining technical documentation and ...

Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively across technical and ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

domain or secure transfer products, such as Opswat or similar* Data diode or one-way transfer architectures* Integration with security tooling, such as SOC, SIEM or monitoring platforms* Performance and throughput optimisation for secure data transfer systems* Experience supporting service management processes, including incident, problem, change and configuration management* Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

Desirable:* Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability ...

enterprise/defence environments Desirable VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands‐on use of DevSecOps tools and CI/CD pipelines VxRail and hyper‐converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

/defence environments## ## Desirable:* VCP Certification* Expertise with cloud platforms (AWS) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* VxRail and hyper-converged infrastructure* Automation of VCF lifecycle (patching, upgrades, deployment)* Integration with ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar)* Data diode/one-way transfer architectures* Integration with security tooling (SOC, SIEM, monitoring platforms)* Performance and throughput optimisation for secure data transfer systems* Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code* Hands ...

stakeholders. You'll ideally have: Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

including: Zscaler Digital Experience (ZDX) Zscaler Deception ZPA Privileged Remote Access (PRA) Experience with AWS cloud platform Experience integrating cloud security with SOC/SIEM platforms Understanding of Telecoms Security Act (TSA) requirements and implementation patterns Experience working in regulated environments such as telecommunications or critical infrastructure Exposure to DevSecOps ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

runbooks. Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies. Integrate PAM solutions with Active Directory/LDAP, enterprise SIEM tools, and ITSM platforms. Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks. Key Requirements Demonstrable track record in an enterprise ...

networking integration (vSphere, vSAN, Aria Suite)* Overlay/underlay network design concepts* Automation of network configuration (Ansible, Terraform, APIs)* Integration with security tooling (SIEM, SOC platforms)* Cloud networking (AWS, Azure) and hybrid connectivity* Experience working in secure or regulated environmentsThis is not an exhaustive list, and we are keen ...

What we’re looking for: Proven experience leading SOC/Cyber Security Operations teams Strong background in incident response and threat management Experience with SIEM, monitoring, and detection engineering Knowledge of frameworks such as ISO27001, NIST, GDPR Ability to operate at both technical and strategic levels #J-18808-Ljbffr ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

Access Management (PAM) Knowledge of Kerberos, NTLM, LDAP, SAML and OAuth. PowerShell Scripting and automation experience. Experience integrating Active Directory with enterprise monitoring and SIEM platforms. Excellent stakeholder engagement, documentation and communication skills. ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred: Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...