1 to 25 of 309 Remote SIEM Jobs

and recovery. Hands‐on experience with Microsoft Defender XDR, particularly Defender for Endpoint, Office 365, Cloud Apps and Entra ID/Identity Protection. Strong SIEM, log analysis, detection engineering and threat‐hunting capabilities. Experience investigating identity, endpoint, email, cloud and application security incidents. A good understanding of MITRE ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

global organisation.* Proven track record of improving threat detection, monitoring, incident response, and SOC operational maturity at scale.* Strong hands-on experience with SIEM platforms, threat intelligence solutions, security orchestration and automation (SOAR), and enterprise security monitoring technologies.* Good understanding of networking and Internet protocols, together with broad knowledge across ...

scripting where appropriate to improve efficiency Essential Skills & Experience Active SC Clearance Sole British National Minimum 3 years' experience within a SOC, Detection Engineering, SIEM Engineering or Cyber Security Engineering role Strong hands-on experience with Microsoft Sentinel Advanced knowledge of Kusto Query Language (KQL) Experience developing and maintaining Sentinel ...

systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.)You have strong experience in Information Security, Security Assurance ...

systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.) You have strong experience in Information Security, Security Assurance ...

Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix. Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms. Hands-on experience with policy development, access control models (RBAC, ABAC), and logging standards. Experience supporting assurance ...

Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI‐enabled development platforms, agent frameworks, retrieval‐augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

practical experience. Experience and expertise in cybersecurity operations, incident response, IT operations, system administration, network security, or a related area. Experience investigating alerts using SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies. Knowledge of common attacker techniques, phishing, malware, account compromise, privilege misuse, lateral movement, exfiltration, and ...

flows across trust boundaries. DevOps, DevSecOps, CI/CD pipelines or Infrastructure as Code. Active Directory, identity services and wider enterprise integrations. Security monitoring, SIEM, endpoint security or integration with SOC tooling. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Relevant ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

line with agreed service priorities, protecting customer services and reducing the time threats remain undetected or uncontained.• Analyse alerts and supporting telemetry from SIEM, EDR and XDR platforms to establish the context, scope, severity and potential business impact of suspicious activity.• Distinguish true positives from benign or false-positive activity ...

line with agreed service priorities, protecting customer services and reducing the time threats remain undetected or uncontained.• Analyse alerts and supporting telemetry from SIEM, EDR and XDR platforms to establish the context, scope, severity and potential business impact of suspicious activity.• Distinguish true positives from benign or false-positive activity ...

work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco, F5, or similar enterprise networking ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

would be great if you also have Experience with Zero Trust architectures beyond baseline identity and access controls, advanced security monitoring, detection engineering or SIEM tuning, or automation and scripting would be a real advantage. We’d also value exposure to enterprise AI tooling beyond standard end-user use, experience ...

Proven experience working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and ...

maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focus Implement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security tools Collaborate with internal IT, development and third-party teams to embed security across the organisation Conduct risk assessments ...