1 to 25 of 28 Contract SIEM Jobs in England

Entra ID and/or Ping Security Operations Vulnerability management Tenable.io, Qualys and/or Rapid7 EDR/XDR CrowdStrike and/or SentinelOne SIEM/SOAR Splunk, Microsoft Sentinel and/or Google Chronicle Automated security response and monitoring Infrastructure & Network Security CIS Benchmarks Linux and Windows Server hardening ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

and/or AWS vulnerability management. Experience with container, Kubernetes or DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

Complex Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

incremental, waterfall) with senior stakeholders and government systems. Technical & Architectural Competencies SOC Technologies: Design, build, and deployment experience using at least two core technologies: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Architectural Frameworks: Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and system modeling. Environments: Proficiency in both On-Premises ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

Infrastructure Security role. Strong understanding of vulnerability management processes and remediation workflows. Experience investigating and responding to security incidents. Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions. Knowledge of operating system security across Mac, Windows and Linux environments. Experience with identity and access management concepts. Understanding … Experience securing public cloud platforms. Knowledge of Microsoft 365 security technologies. Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance ...

managing security incidents through their full lifecycle while collaborating with technical and business stakeholders. Key Responsibilities Monitor and investigate security alerts generated by SIEM, EDR/XDR, identity, email, cloud and network security tools. Lead and support cyber security incident investigations, including phishing, malware, account compromise, unauthorised access and data … trend analysis and security governance reporting. Essential Experience Experience working within Incident Response, Cyber Security Operations or SOC environments. Strong hands-on experience with SIEM and EDR/XDR technologies. Proven ability to investigate and respond to cyber security incidents. Knowledge of Windows and Linux security investigations, authentication events, security ...

compliance requirements. Generate audit and compliance reports. Partner with Cyber Security teams for threat response and hardening activities. Integration & Reporting Integrate Tanium with: ServiceNow SIEM platforms CMDB IT Operations tools Develop dashboards and reports for leadership and operational teams. Support automation and reporting requirements. Technical Skills Required Mandatory Strong hands ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing … updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. ...

Head of Cyber Resilience and Cloud Security Successful Contractor will need to have worked within a Regulated Environment - ideally Financial Services Strong SOC/Siem Background and also Incident Management Leadership experience essential Must have experience in providing cyber operations across data centres and cloud environments eg - strategy, governance vulnerability ...

hands-on engineering role focused on the implementation, maintenance, optimisation and integration of security technologies across complex enterprise environments. Key Responsibilities Administer and maintain SIEM and security monitoring platforms Configure and optimise log ingestion, correlation rules and alerting Develop and maintain automation using PowerShell, Python and Regex Integrate security technologies … analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies ...

Implementing Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout … stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable ...

with three specialist contract opportunities across defensive security, security engineering and offensive testing. The roles cover different areas of the security lifecycle: * Security Engineer: SIEM, detection and response engineering, threat hunting, security telemetry, SOAR automation and secure CI/CD pipelines. * Cyber Security Specialist: enterprise security across cloud, AI, endpoint ...

human oversight mechanisms for AI-driven workflows. Technical Skills * Scripting or development experience (Python preferred). * Experience integrating security technologies using APIs. * Understanding of SIEM, EDR, Identity and Cloud Security technologies. * Strong analytical and problem-solving skills. Desirable Experience * Experience designing an AI adoption strategy for a SOC. * Experience with … agentic AI or autonomous security workflows. * Experience with Microsoft Sentinel, Splunk or equivalent SIEM platforms. * Experience with cloud security technologies (Azure, GCP or AWS). * Experience with detection engineering and security use case development. * Experience building automation metrics and measuring operational efficiency. * Familiarity with modern AI platforms including LLMs ...

integrations Elasticsearch ingest pipelines, Data Streams, templates, mappings and ILM End-to-end data/feed onboarding, testing, troubleshooting and validation Elastic Security/SIEM environments High-volume ingestion architectures, including Kafka Elastic platform migrations, upgrades and optimisation We have opportunities available for both permanent consultants and Outside IR35 contractors ...

required eventually . A background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote … Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

with proven capability in SOC deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/ ...

and support cloud, on-premises VM, and container-based hosting. Design and configure network security devices, routers, switches, VLANs, DNS, and identity management. Lead SIEM onboarding activities, ensuring solutions support high data ingest rates. Develop test procedures covering functional and non-functional requirements. Maintain requirements and user stories, ensuring traceability … technical engineering, SOC deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ...

Responsibilities: Tier 2 SOC Analyst You will be responsible for investigating and responding to security incidents escalated from Tier 1, including: Detailed investigation of SIEM, EDR, network and authentication alerts. Threat hunting and identification of indicators of compromise. Investigation of phishing, malware, credential compromise and suspicious activity. Supporting containment, eradication … and mentoring to Tier 1 and Tier 2 SOC analysts. Required experience: Proven experience within a SOC, security monitoring or incident response environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security ...

security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows, escalation paths … operations within government, defence, or critical infrastructure Previous hands on experience in Vulnerability management and incident response and security operations escalation Understanding of SIEM platforms, detection engineering, and Vulnerability alert management Familiarity with ITSM tooling, ideally ServiceNow Strong stakeholder management and reporting capability Understanding of regulated environments (MOD, HMG, Defence ...