1 to 25 of 310 Remote SIEM Jobs

Entra ID security concepts. Experience investigating security alerts and suspicious activity. Understanding of endpoint security, malware protection and EDR/XDR technologies. Familiarity with SIEM technologies, log analysis and security monitoring. Understanding of vulnerability management and remediation processes. Good knowledge of fundamental security concepts including least privilege, MFA, network segmentation ...

Experience with vulnerability assessment and management tools, preferably Qualys. Experience with firewall and network-security auditing tools, preferably Nipper Studio. Experience supporting security operations, SIEM, threat intelligence or incident investigations. Experience with Microsoft Intune, Entra ID, Azure or AWS security. Relevant certifications, such as Microsoft SC-900 or CompTIA Security+. ...

Control 7. EDR/XDR Integration: Expert‐level deployment of tools (e.g., CrowdStrike, SentinelOne) to achieve full visibility across endpoints (CIS Control 6). SIEM/SOAR: Experience designing log aggregation and automated response playbooks in platforms like Splunk, Microsoft Sentinel, or Google Chronicle to satisfy monitoring requirements (CIS Control ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

ability to interpret events and drive effective remediation. Working knowledge with security technologies and controls (e.g., Perimeter/edge security controls, data protection controls, SIEM/monitoring controls) and cloud security. Exposure to operational resilience, business continuity (ISO 22301) and IT disaster recovery, with awareness of FCA/PRA operational ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

framework Experience with SQL query construction Experience with OSQuery Programming and scripting skills - proficient knowledge of PowerShell Experience with enterprise information security data management - SIEM Advanced Cyber Security certifications Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

performance and security, and planning or assuring patching, backup, recovery and continuity arrangements Experience supporting security monitoring and incident response, including the use of SIEM tooling, escalation, root‐cause analysis and preventative action A practical understanding of IT service management, including incident, problem, change and asset management Experience creating and ...

flows across trust boundaries. DevOps, DevSecOps, CI/CD pipelines or Infrastructure as Code. Active Directory, identity services and wider enterprise integrations. Security monitoring, SIEM, endpoint security or integration with SOC tooling. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Relevant ...

Ability to work some weekends and holidays Being curious and asking questions Desirable Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash ...

work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco, F5, or similar enterprise networking ...

configuration management and cloud service protection. Identity and access management: Directory services, multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … tech company. The Security Engineer (SIEM/XDR) role is Hybrid, in the London office 1-2 times a month . You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable ...