1 to 25 of 293 Remote SIEM Jobs

SIEM Security Engineer Advertised Salary: Competitive with Great Benefits GBR-Birmingham-Three Snowhill The role is hybrid (3 days in office) & based in Birmingham Closing date: 13th Aug 2026 About the role The new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving … Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules, alerts, and dashboards for efficient threat detection. Query Optimization and Performance Tuning Write efficient Elasticsearch queries to retrieve ...

modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ...

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS ...

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

improve operational efficiency and reduce manual effort.Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and ...

Infrastructure as Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience in complex enterprise or multi‐cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

Bash, BatchTechnologies: Experience with Host based firewall, File Integrity Management, Data Protection, Vulnerability Management, Attack Surface Management, IT AutomationCompliance: CIS Benchmarks, STIGs, PCI, HIPPADatabase: SIEM, MSSQL, Splunk, LogScaleIdentity: Identity, Active Directory, Azure-AD, SSOCloud: AWS, Azure, and GCP#LI-GT1#LI-JP2#LI-RemoteBenefits of Working at CrowdStrike: Market leader in compensation and ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

response and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities ...

Assistwith secure remote access/VPN configurations whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

learn deeper DFIR techniques and methodologies.Required ExperienceProven experience in incident response and digital forensics, with capability in host‐based, image, and log analysis.Experience using SIEM, EDR, IDS/IPS, and other security tools to triage, investigate, and respond to incidents.Ability to perform network analysis using tools such as Wireshark, tcpdump ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

core network protocols (TCP/IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP). Framework Knowledge: Solid comprehension ...

incident response, including monitoring and triaging alerts, and coordinating across teams. Understanding of analysis and forensics techniques on macOS, Windows, and Linux. Experience utilizing SIEM tools to perform log reviews. Experience in cloud architecture and security (AWS, GCP) and cloud‐based services. This role will be part of our EMEA ...

portfolio – encompassing the strategic platforms and capabilities that GCS operates on behalf of the Group, including (but not limited to) identity and access management, SIEM/SOAR, endpoint protection, cloud security, network security, and OT security. Provide architectural input to the GCS investment planning cycle, ensuring technology decisions are grounded ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell, bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

with IT, engineering, and compliance on audits, controls, and architecture reviewsReport metrics, incident summaries, and risk posture to leadershipQualificationsRequired SkillsStrong grounding in security operations - SIEM platforms (Sentinel), EDR/XDR (Defender), and SOAR toolingKQL skills for Sentinel analytics, hunting, and workbooksMicrosoft Defender suite (XDR, endpoint, identity, cloud) administrationPhishing analysis and ...

automating processes. Working knowledge of SecDevOps tools and methodologies. Excellent analytical and problem-solving skills. Strong communication and documentation abilities. Hands on experience with SIEM solutions i.e. Splunk, ArcSight, LogRhythm Communication And Soft Skills Experience speaking to and working with leadership as well as ability to write reports and present ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...