151 to 175 of 184 Remote SIEM Jobs

Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender/Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and scripting Improving security event detection and … Sentinel/Azure Sentinel Microsoft Defender/Defender XDR Strong KQL/Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, scripting, SOAR or Sentinel playbooks Cloud security assessments, controls ...

including: IAM governance and lifecycle management. Joiner, Mover and Leaver process design and optimisation. Privileged Access Management (PAM). Security Information and Event Management (SIEM) platforms. Monitoring, alerting and logging solutions. DataDog and observability tooling. AWS and Azure cloud administration. SQL and advanced Excel capability. Incident, access and governance processes. ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

multiple cyber and infosec domains. With the support of the Cyber Security Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project life cycles, GRC certifications, 3rd party risk and assurance and more. I'm looking … expecting candidates to be experts across all of these fields, however, the more the better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house ...

background in solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile … and submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps ...

optimise workflows covering triage, investigation, containment, remediation, recovery and closure Automate security incident processes to reduce manual intervention and accelerate response Integrate SIR with SIEM, SOAR, EDR and other enterprise cyber security technologies Configure alert and incident ingestion, enrichment, categorisation, prioritisation, assignment and escalation Work directly with SOC analysts and … problem-solving and stakeholder communication skills It would be great if you also have Broader ServiceNow Security Operations/SecOps experience Integration experience across SIEM, SOAR, EDR and security monitoring platforms ServiceNow Scripting and development experience Experience within large-scale, complex or regulated enterprise environments Financial services or banking cyber ...

Service Management, Automation & Technical Leadership Lead the monitoring, observability, performance and capacity management of network services, integrating operational and security monitoring with ITSM and SIEM platforms. Drive network automation and Infrastructure as Code using tools such as Ansible and Python to improve consistency and efficiency. Manage vendor relationships, technology lifecycles … Experience with advanced network automation toolchains including Terraform, Ansible, or Python-based frameworks applied to infrastructure provisioning and compliance enforcement. Hands-on experience with SIEM platforms (e.g. Splunk, Microsoft Sentinel) in the context of network security monitoring, alert triage, and threat hunting. Experience with Zero Trust technologies such as Zscaler ...

delivering clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will doSupport SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activitiesUse cases preparation and implementation, connector deployment, maintenance & health checksResponsible for operational activities, Technology escalation … powershell, Unix shell)Experience working in all phases of the SDLCDeep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM ToolsPrior SOC experience a plusExtensive knowledge of network and server security protocols, technologies, and productsIndustry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferredStrong oral and ...

partners and security teams. Build and manage CI/CD pipelines that integrate DevSecOps best practices from development through to deployment. Integrate and maintain SIEM and security tooling, ensuring observability and compliance across all deployed systems. Design, develop, and debug microservices in Go (Golang), with a focus on performance, security … classified environments. Experience building and maintaining secure CI/CD pipelines and integrating security throughout the SDLC. Hands-on experience implementing or managing SIEM, monitoring, and alerting systems. Understanding of REST APIs, authentication flows, event-driven architecture, and microservice patterns. IAC and technical experience with Pulumi, Terrraform, argo and flux ...

process, technology and infrastructure. Work across the full lifecycle from concept and architecture through to deployment and operation. Design and support security tooling across SIEM, SOAR, EDR, vulnerability management and threat intelligence. Engage with senior stakeholders to define security and accreditation requirements. Assess existing security capabilities and identify opportunities … address complex requirements. What were looking for Strong experience in SOC architecture and security operations. Hands-on knowledge of at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence. Strong understanding of cloud and on-premise security architecture. Experience with security best practices including least privilege, encryption and ...

capability around the SOC. What you’ll be doing: Proactive security monitoring and threat hunting Investigating and responding to security incidents Engineering and improving SIEM environments Building and tuning detection rules Developing detection coverage around MITRE ATT&CK Supporting and maintaining client security platforms Scripting and automating SOC processes Helping … develop and mature the UK SOC capability What we’re looking for: Strong SOC/Security Operations experience Hands-on SIEM engineering experience Detection engineering and alert tuning Experience with KQL, SQL or similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and ...

security alerts and incidents Leading incident triage, containment and remediation activities Performing threat hunting and identifying suspicious behaviour across the environment Developing and improving SIEM rules, alerts and security use cases Analysing endpoint, network, cloud and identity-related security events Producing clear incident reports and communicating findings to technical and … Skills and experience Strong experience working in a SOC or security operations environment Demonstrable experience investigating and responding to security incidents Good knowledge of SIEM, EDR and security monitoring technologies Experience analysing logs from endpoints, networks, cloud platforms and identity services Understanding of common attack techniques and frameworks such ...

that power operational monitoring, observability and security operations. Designing and architecting enterprise-scale Elastic Stack solutions. Building and optimising high-volume Elasticsearch clusters. Delivering SIEM capabilities, threat detection and security analytics. Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent. Creating impactful Kibana dashboards, visualisations and reporting solutions. Implementing … recovery documentation. What you will bring: Experience administering enterprise Elastic Stack environments. Deep expertise across: Elasticsearch. Kibana. Logstash. Beats. Elastic Agent & Fleet. Elastic Security (SIEM). Elastic Observability. Strong experience supporting large-scale Elasticsearch clusters. Proven track record designing resilient, highly available platforms Experience delivering security monitoring and observability solutions. ...

visits roughly every couple of weeks. No on-call rota. No clearance requirement. What you'll be doing Designing and building detection rulesets across SIEM and XDR platforms Writing and tuning detection logic in KQL, cutting false positives without losing coverage Mapping customer log sources against use cases to identify … code approach — pipelines, version control, deployment Running workshops, coverage assessments and use case catalogues as customer deliverables What we're looking for Hands-on SIEM engineering experience, ideally Microsoft Sentinel Confident KQL — this is the core of the role SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar ...

that power operational monitoring, observability and security operations. Designing and architecting enterprise-scale Elastic Stack solutions. Building and optimising high-volume Elasticsearch clusters. Delivering SIEM capabilities, threat detection and security analytics. Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent. Creating impactful Kibana dashboards, visualisations and reporting solutions. Implementing … recovery documentation. What you will bring: Experience administering enterprise Elastic Stack environments. Deep expertise across: Elasticsearch. Kibana. Logstash. Beats. Elastic Agent & Fleet. Elastic Security (SIEM). Elastic Observability. Strong experience supporting large-scale Elasticsearch clusters. Proven track record designing resilient, highly available platforms Experience delivering security monitoring and observability solutions. ...

them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed. On Behalf of Arup, we are looking for a SIEM Engineer for a 12 month contract based in Cardiff with remote work available. Purpose of the role: We're looking for an experienced SIEM Engineer … large scale cybersecurity transformation programme, migrating security monitoring capabilities from Rapid7 to Microsoft Sentinel. This is a hands-on engineering role focused on SIEM migration, log source onboarding, detection engineering, and the optimisation of security monitoring across a complex enterprise environment with over 1,000 systems. What ...

Cortex XSIAM Engineer - XSOAR, XDR, SIEM, SOAR, Palo Alto Networks, Cortex XSIAM, Fully Remote (UK) Outside IR35 This is an exceptional Cortex XSIAM Engineer opportunity with a leading tech organisation. The Cortex XSIAM Engineer role is fully remote (UK) and you must be eligible for UK security clearance The Cortex … Cortex XSIAM Engineer contract offering fully remote work, enterprise SOC transformation engagements and long-term project stability. Key skills: Cortex XSIAM Engineer,XSOAR, XDR, SIEM, SOAR, Palo Alto Networks, Cortex XSIAM, Fully Remote (UK) Outside IR35, Fully Remote (UK/EU) Outside IR35 *PLEASE READ BEFORE APPLYING* Please ensure ...

enrichment to build a modern, high-velocity SOC function. Key Accountabilities End-to-End Cyber Defence Ownership: Lead the complete operational life cycle across SIEM, SOAR, EDR, NDR, and identity telemetry-covering monitoring, alert triage, incident containment, root-cause eradication, and post-incident learning. Major Incident Response & Crisis Leadership … defence, or incident response functions in complex, regulated environments (Financial Services/Insurance preferred). Technical Depth in Security Tooling: In-depth knowledge of SIEM, SOAR, EDR/XDR, NDR, threat intelligence platforms, and telemetry architectures across cloud and hybrid environments. Incident Management Mastery: Demonstrable experience leading major security incidents ...

and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real-time response. Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault … expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes. Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules. Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/ ...

centre of that growth. This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps … architecture Strong understanding of SOC operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills ...

delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and … programmes within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme ...

delivery across Cyber Security, SOC, Infrastructure, Cloud, IAM, Network and Service Management teams. Drive the implementation and enhancement of Security Operations capabilities, including SOC, SIEM, detection and response, vulnerability management and incident response. Manage the transition of new security capabilities into live operational services. Work closely with security architects and … programmes within enterprise environments. Strong understanding of Security Operations and the delivery of operational cyber capabilities. Experience delivering programmes involving areas such as SOC, SIEM, incident response, threat detection, vulnerability management, security tooling or security service transformation. Proven experience transitioning security capabilities from project delivery into BAU operations. Strong programme ...

reviewing security alerts Learning how to distinguish genuine threats from false positives Investigating potential security incidents Understanding logs and identifying unusual activity Working with SIEM and security monitoring technologies Learning Microsoft Sentinel and the wider Microsoft security stack Understanding when incidents need to be escalated Supporting security reporting and documentation … previous IT, MSP, MSSP or SOC experience would certainly be useful, but commercial cyber security experience is not essential. Exposure to Microsoft Sentinel, another SIEM platform or Microsoft Defender would also be a bonus rather than a requirement. More importantly, we want somebody who: Is fascinated by cyber security and ...