1 to 25 of 104 Remote SIEM Jobs

years’ experience in cybersecurity or information security roles Strong understanding of network protocols, operating systems and enterprise security technologies Experience implementing and managing SIEM and SOAR platforms Knowledge of cybersecurity frameworks such as NIST, ISO27001, CIS benchmarks and Cyber Essentials Experience with threat intelligence frameworks such as MITRE ...

and enhance the incident response plan and playbooks. Security Operations Center (SOC): Monitor and analyse security alerts and logs from various tools such as SIEM, IDS/IPS, and endpoint detection systems. Identify and escalate potential security threats or vulnerabilities in real-time. Continuously optimize SOC workflows, tools, and processes ...

remote access/VPN configurations where required and ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration ...

cloud platforms - AWS, Azure, Google Cloud Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non-technical stakeholders Experience influencing senior leadership ...

implementing security controls, mitigating risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions Oversee ...

within WTW’s Global Cyber Security Defence team. Responsibilities of this role will include: Design, write, test, and maintain high-fidelity detection rules across SIEM, EDR/XDR, cloud, identity, and network data sources. Apply a threat-led approach, developing detections mapped to adversary tradecraft using the MITRE ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

Zero Trust environments • Configure and optimise security policies including DLP, CASB, FWaaS, segmentation, and secure web access • Integrate Zero Trust solutions with identity providers, SIEM/SOAR platforms, and endpoint security tooling • Conduct threat modelling, risk assessments, and security architecture reviews • Troubleshoot complex deployment and access issues across enterprise environments ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

identification, and continuous improvement Lead security engagement within client Design Authority and Enterprise Architecture forums Manage integration with the client SOC, including security reporting, SIEM alignment, and incident response coordination Oversee security incident management in line with the client Cyber Security Incident Response Plan Own joiner/mover/leaver ...

Proven experience in Cybersecurity, Computer Science, or a related field Strong background in data protection, encryption, and security frameworks Hands-on experience with firewalls, SIEM tools, and intrusion detection systems Excellent analytical, problem-solving, and communication skills Desirable Certifications CISSP, CISM, or CEH (preferred but not essential) If you receive ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

best practices. Qualifications & Requirements * Proven experience in Cybersecurity, Computer Science, or related field. * Experience in data protection, encryption, and security frameworks. * Proficiency in firewalls, SIEM tools, and intrusion detection systems. * Certifications such as CISSP, CISM, or CEH preferred. * Strong analytical, problem-solving, and communication skills. ...

clear progression in technical depth Hands‐on delivery across at least three of: cloud security (GCP/AWS), identity and access management (Entra ID), SIEM and detection engineering, DLP, zero trust Sound judgment under uncertainty — you can make and defend security decisions with incomplete data Practical AI and automation fluency ...

incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats ...

platform experience (e.g. Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

enterprise/defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems (IDS/IPS), vulnerability management tools and Firewall, DLP, Web and Email Security Gateways.This … and help coordinate, routine security event monitoring and investigations using available toolsUse, configure and develop the use of a security information and event management (SIEM) and EDR toolMonitor and configure network intrusion detection and prevention systemsAnalyse and create reports for security incidents, to determine root cause and lessons learntCreate and ...

Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast SD-WAN Technologies SIEM and Security Monitoring Platforms About You We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder ...

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

Lead deployment and optimisation of technologies such as Zscaler, Netskope, Prisma Access, or similar platforms • Oversee integration of Zero Trust solutions with identity providers, SIEM/SOAR tooling, endpoint security, and cloud environments • Conduct architecture reviews, threat modelling exercises, gap assessments, and security strategy workshops • Lead proof-of-concept exercises ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...