1 to 25 of 84 Remote SIEM Jobs

understanding of cyber security principles across infrastructure, applications and cloud platforms Experience working with cloud technologies such as AWS, Azure or GCP Knowledge of SIEM technologies such as Splunk, Microsoft Sentinel, ELK or Cribl Experience with networking, firewalls and security within hybrid cloud environments Familiarity with Infrastructure as Code technologies ...

and enhance the incident response plan and playbooks. Security Operations Center (SOC): Monitor and analyse security alerts and logs from various tools such as SIEM, IDS/IPS, and endpoint detection systems. Identify and escalate potential security threats or vulnerabilities in real-time. Continuously optimize SOC workflows, tools, and processes ...

enterprise Firewalls (Palo Alto, Cisco), WAF/DDoS protection (Imperva), and Microsoft Gateways. Threat Detection & Response: Oversee email/web security gateways (Mimecast, Menlo), SIEM/SOAR platforms, and EDR/XDR alert response (CrowdStrike, Rapid7 IDR). Identity & Access Management: Administer MFA/SSO protocols using Okta and Microsoft ...

cloud platforms - AWS, Azure, Google Cloud Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non-technical stakeholders Experience influencing senior leadership ...

assurance, including evidence gathering and remediation planning. Experience leading incident response, including major cyber events and multi-agency or cross-organisational coordination. Experience managing SIEM platforms, security monitoring or SOC environments. Experience developing and delivering cyber strategies, programmes and roadmaps. Strong track record of supplier assurance, contract cyber compliance and ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

security controls and processes. About you You will have extensive experience of security monitoring and incident response, along with experience working with SIEM platforms, endpoint detection and response (EDR) tools, and email security solutions. You'll be proficient in securing Microsoft 365 and Azure environments (including Entra ID, Intune, Purview ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

best practices. Qualifications & Requirements * Proven experience in Cybersecurity, Computer Science, or related field. * Experience in data protection, encryption, and security frameworks. * Proficiency in firewalls, SIEM tools, and intrusion detection systems. * Certifications such as CISSP, CISM, or CEH preferred. * Strong analytical, problem-solving, and communication skills. ...

incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats ...

platform experience (e.g. Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

enterprise/defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems (IDS/IPS), vulnerability management tools and Firewall, DLP, Web and Email Security Gateways.This … and help coordinate, routine security event monitoring and investigations using available toolsUse, configure and develop the use of a security information and event management (SIEM) and EDR toolMonitor and configure network intrusion detection and prevention systemsAnalyse and create reports for security incidents, to determine root cause and lessons learntCreate and ...

Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast SD-WAN Technologies SIEM and Security Monitoring Platforms About You We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder ...

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

effective investigation and resolution Oversee vulnerability management and support patching activities, validating effectiveness through scanning and review Operate and support key security technologies including SIEM, endpoint protection and email/web security tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Strong understanding of information security principles, risk management and the threat landscape Experience operating and monitoring security tooling such as SIEM, endpoint protection and email/web security solutions Ability to conduct proactive threat hunting and contribute to improving detection capability Awareness of cloud security controls ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

Desirable Experience Security Operations Centre (SOC) experience. Customer Success Engineering or Technical Account Management experience. Experience delivering cybersecurity training and enablement programs. Knowledge of SIEM, SOAR, EDR, Attack Surface Management, Asset Management, Vulnerability Management, or Security Posture Management solutions. Experience working with AI-powered security products. Exposure to enterprise SaaS ...

methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

DevOps experience Excellent communication and organisational skills Eligible to obtain SC Clearance Nice to Have Security Operations Centre (SOC) project experience Microsoft Sentinel SentinelOne SIEM or EDR technologies PRINCE2 Practitioner, PMP, CSM or PMI-ACP certifications Why Apply? Salary up to £65,000 Hybrid working One day per month ...

skills. Full UK driving licence. Desirable Skills Microsoft Azure certifications, Microsoft 365 certifications, Cisco or Meraki networking. Microsoft Defender XDR, Huntress, Sentinel or other SIEM/XDR platforms. PowerShell automation, SharePoint migrations, Azure Virtual Desktop. Cyber Essentials and security compliance. What We Offer £55,000–£70,000 depending on experience. ...

platform experience (e.g. Microsoft Fabric, Databricks) Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 ...

security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder ...