1 to 25 of 78 SIEM Jobs in the South West

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism, seeking and acting on feedback, and sharing learning ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

enterprise/defence environments Desirable: VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar) Data diode/one-way transfer architectures Integration with security tooling (SOC, SIEM, monitoring platforms) Performance and throughput optimisation for secure data transfer systems Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Hands ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

used to address problems and realise opportuni ties.Strong understanding of cloud networking and architecture principles, Identity and access management models, security monitoring and SIEM integra tion.Proven hands-on experience of at least two cloud environments inclu din g:AWSMicrosoft AzureVMware Cloud Found ationGoogle CloudExperience securing multi-cloud or hybrid environments ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

passionate about identifying sophisticated threats and improving security operations. You'll ideally have experience with: Threat Hunting Detection Engineering Security Operations Centres (SOC) SIEM technologies MITRE ATT&CK Framework Threat Intelligence Detection rule creation and tuning Security telemetry analysis Incident detection and investigation Writing detection use cases and playbooks Developing ...

knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting capabilities. Understanding of vulnerability management, penetration testing and security remediation. Experience developing cyber security KPIs, KRIs and management reporting. Strong people ...

Technology (or related discipline) or significant equivalent industry experience. * Advanced expertise across at least three security technologies or disciplines, including PAM, ADFS, Firewalls, Entra, SIEM, EDR/XDR, CTEM, WAF/DDoS, PKI, SASE, IDS/IPS, security assurance frameworks, incident response or cryptographic systems. * Advanced experience assessing security controls ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will be a satellite site in Hampshire, with occasional travel ...

understanding of; Networking (TCP/IP, firewalls, segmentation), Operating systems (Windows/Linux), Identity and access management concepts, Cloud Fundamentals. Exposure to security tooling (SIEM, IDS/IPS, EDR) Strong understanding of core security principles such as: Defence in depth, Least privilege, Zero trust concepts An understanding of designing and ...

access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer and internal stakeholders ...

networking integration (vSphere, vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder ...

implement privileged access policies, credential management, session monitoring, and vaulting strategies. Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools. Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001). Stakeholder ...