1 to 25 of 164 Remote SIEM Jobs

SIEM Security Engineer Advertised Salary: Competitive with Great Benefits GBR-Birmingham-Three Snowhill The role is hybrid (3 days in office) & based in Birmingham Closing date: 13th Aug 2026 About the role The new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving … Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules, alerts, and dashboards for efficient threat detection. Query Optimization and Performance Tuning Write efficient Elasticsearch queries to retrieve ...

modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ...

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

Infrastructure as Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience in complex enterprise or multi‐cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

understanding of cyber security principles across infrastructure, applications and cloud platforms Experience working with cloud technologies such as AWS, Azure or GCP Knowledge of SIEM technologies such as Splunk, Microsoft Sentinel, ELK or Cribl Experience with networking, firewalls and security within hybrid cloud environments Familiarity with Infrastructure as Code technologies ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

Assistwith secure remote access/VPN configurations whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

core network protocols (TCP/IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP). Framework Knowledge: Solid comprehension ...

incident response, including monitoring and triaging alerts, and coordinating across teams. Understanding of analysis and forensics techniques on macOS, Windows, and Linux. Experience utilizing SIEM tools to perform log reviews. Experience in cloud architecture and security (AWS, GCP) and cloud‐based services. This role will be part of our EMEA ...

portfolio – encompassing the strategic platforms and capabilities that GCS operates on behalf of the Group, including (but not limited to) identity and access management, SIEM/SOAR, endpoint protection, cloud security, network security, and OT security. Provide architectural input to the GCS investment planning cycle, ensuring technology decisions are grounded ...

cyber security role. Strong technical background with solid infrastructure, network and system security knowledge. Experience using vulnerability management tools, Intrusion Detection Systems (IDS) and SIEM platforms. Knowledge of cyber security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework and/or PCI DSS. Experience investigating and responding ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

SOAR Engineer, Splunk SOAR, Splunk Phantom, Splunk Enterprise Security, Splunk ES, Splunk UBA, Cyber Security Engineer, Security Automation Engineer, SOAR Engineer, Python, Security Operations, SIEM, MITRE ATT&CK, NIST, Incident Response, Splunk Developer, Cyber Security Jobs, Security Engineering, Enterprise Security. Circle Recruitment is acting as an Employment Agency in relation ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key Competencies Threat Intelligence Analysis Cyber Threat ...

point of contact Develop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risks Identify, implement, and automate cybersecurity measures and best practices Coordinating incident response across the organization ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non‐technical stakeholders Experience influencing senior leadership ...

reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism, seeking and acting on feedback, and sharing learning ...