126 to 139 of 139 Remote SIEM Jobs

Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team and help revolutionize security management with our AI-native Falcon Next-Gen SIEM platform, enabling customers to detect, investigate, and hunt threats at scale. You’ll design, architect, and develop world-class case management and investigation capabilities … enhance decision-making, streamline workflows, and drive business outcomes. Bonus points: Currently developing Go-based microservices for scalable, high-throughput architectures; experience in cybersecurity, SIEM, SOAR, or adjacent security domains; hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks. Benefits Market-leading compensation and equity ...

Infrastructure as Code principles Implement platform hardening and security best practices across the AWS environment Integrate cloud infrastructure and applications with security tooling, including SIEM, DLP, and other security platforms Manage identity and access controls across the environment, including SSO, IAM, and least-privilege access Monitor and improve platform security … networking, including VPCs, subnets, routing, and security groups Experience with cloud security and platform hardening Knowledge of integrating platforms with security tooling such as SIEM and DLP solutions Experience managing identity and access controls, including AWS IAM and SSO Commercial experience working with MongoDB Strong understanding of security best practices ...

Infrastructure as Code principles Implement platform hardening and security best practices across the AWS environment Integrate cloud infrastructure and applications with security tooling, including SIEM, DLP, and other security platforms Manage identity and access controls across the environment, including SSO, IAM, and least-privilege access Monitor and improve platform security … networking, including VPCs, subnets, routing, and security groups Experience with cloud security and platform hardening Knowledge of integrating platforms with security tooling such as SIEM and DLP solutions Experience managing identity and access controls, including AWS IAM and SSO Commercial experience working with MongoDB Strong understanding of security best practices ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech company. The Security Architect … travel. Therefore, you must be based at a commutable distance from London. As Security Architect, you will take ownership of key security architecture across SIEM, SOAR, EDR, cloud security, detection engineering, threat hunting and automation. The Security Architect will work closely with internal and 3 rd party engineering and ...

providing technical assurance and challenging service quality where required Identify detection gaps through incident reviews and trend analysis Drive improvements across Detection Engineering, telemetry, SIEM and Security Operations processes Develop automation opportunities and support AI-assisted investigations and remediation Collaborate with Security Engineering, Architecture and Cyber Defence teams to continuously … organisation's security posture Essential Experience Google SecOps CrowdStrike Darktrace Detection Engineering, including rule creation, tuning and optimisation Enterprise Security Operations and incident investigation SIEM administration and security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and improvement of SIEM capabilities for our customers and colleagues. The ideal candidate will have … bachelor’s degree and proven multi-platform SIEM expertise including Splunk Enterprise Security and Microsoft Sentinel, plus automation and data pipeline experience. #J-18808-Ljbffr ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

experience in researching, analysing, and reporting on cyber threats or related security issues. Experience in Threat Modelling System and Security Information and Event Management (SIEM) solutions Ability to triage security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Relevant professional qualifications or training ...

service portfolio and delivering those services to end clients. Responsibilities include: Security Portfolio Development Support the definition and development of Security Services portfolio: MDR, SIEM, Identity, Compliance, and AI SOC Help productise security services with clearly defined scope, SLA, and pricing Contribute to the security attach strategy Assist in developing … Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA ...

proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

Responsibilities Own and manage cyber incidents from detection through to resolution. Review, enhance, and develop Incident Response frameworks, runbooks, and playbooks. Ensure alerts from SIEM, EDR, CTI, and SOC services are effectively integrated into Incident Response processes. Lead tabletop exercises and testing activities. Work closely with SOC, Threat Intelligence, Technology … leading on the creating, reviewing, and improving runbooks and playbooks. Experience designing or enhancing Incident Response frameworks. Experience running tabletop exercises. Strong understanding of SIEM, EDR, SOC and Threat Intelligence integration. Environment Microsoft Sentinel Microsoft Defender for Endpoint Recorded Future Darktrace Microsoft Purview ThreatLocker If you are interested ...