3 of 3 Contract SIEM Jobs in the East of England

/ICS, VLAN 20 – Management, VLAN 40 – SCADA). Experience with Azure AD integration for SCADA IPC authentication. Familiarity with security tools such as SIEM logging, Qualys vulnerability scanning, and Microsoft Defender. Ability to configure MPLS and IPSEC VPN tunnels for remote connectivity and backup links (4G failover). Please ...

will cover analysis, monitoring, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best standard … cause analysis and leading T2 incident investigations Process/Playbook/Runbook development Working knowledge of detection engineering, false positive improvements Capability to tune SIEM rules or create custom detections Scripted automation experience e.g. Python, SOAR, PowerShell Threat modelling and Hunting methodologies ...

/ICS, VLAN 20 – Management, VLAN 40 – SCADA). Experience with Azure AD integration for SCADA IPC authentication. Familiarity with security tools such as SIEM logging, Qualys vulnerability scanning, and Microsoft Defender. Ability to configure MPLS and IPSEC VPN tunnels for remote connectivity and backup links (4G failover). Please ...