1 to 25 of 393 Remote SIEM Jobs

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

Entra ID security concepts. Experience investigating security alerts and suspicious activity. Understanding of endpoint security, malware protection and EDR/XDR technologies. Familiarity with SIEM technologies, log analysis and security monitoring. Understanding of vulnerability management and remediation processes. Good knowledge of fundamental security concepts including least privilege, MFA, network segmentation ...

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS ...

information security, a security operations center (SOC), or a closely related IT role with regular security duties Hands-on experience triaging alerts in a SIEM or incidents in an ITSM (ticketing) system Working knowledge of web filtering including how to review and categorize URLs and process requests to unblock them ...

response, vulnerability management, security monitoring, and cyber risk reduction within complex enterprise environments. Proven experience in implementing, configuring, maintaining, and optimising security technologies including SIEM, EDR, XDR, SOAR, vulnerability management platforms, cloud security solutions, identity and access management controls, endpoint protection, and threat intelligence capabilities. Skilled in cyber incident investigation ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. Excellent problem‐solving skills and the ability to analyse complex security issues and develop effective solutions. Strong communication and collaboration skills, with the ability ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.Strong communication and collaboration skills, with the ability to work ...

ability to interpret events and drive effective remediation. Working knowledge with security technologies and controls (e.g., Perimeter/edge security controls, data protection controls, SIEM/monitoring controls) and cloud security. Exposure to operational resilience, business continuity (ISO 22301) and IT disaster recovery, with awareness of FCA/PRA operational ...

. Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities. Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE). Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

enterprise environment. Cloud security across Azure and/or AWS. Identity security, Zero Trust and Privileged Access Management. Network, endpoint and infrastructure security. SOC, SIEM, SOAR, EDR, NDR or XDR technologies. Vulnerability management and security monitoring. Threat modelling, risk assessment and security governance. DevSecOps, Infrastructure as Code or security automation. ...

ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

framework Experience with SQL query construction Experience with OSQuery Programming and scripting skills - proficient knowledge of PowerShell Experience with enterprise information security data management - SIEM Advanced Cyber Security certifications Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates ...

Ability to work some weekends and holidays Being curious and asking questions Desirable Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ...

remediation and patch‐management tooling Good understanding of cloud platforms, particularly Microsoft Azure Experience with security monitoring, vulnerability management or incident response Familiarity with SIEM, EDR/XDR or SOC tooling Strong troubleshooting, documentation and communication skills Qualifications Relevant degree, technical qualification, apprenticeship or equivalent professional experience. Relevant Microsoft, networking ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

within Cyber Security Operations, Incident Response or Threat Detection environments. Demonstrable experience investigating and managing complex cyber security incidents. Strong knowledge of Security Information and Event Management platforms, Endpoint Detection and Response technologies, and Threat Detection and Response solutions. Experience analysing logs, alerts, security telemetry and security incident data. Strong ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...