14 of 14 Contract SIEM Jobs in London

also contribute to strategic security projects and ensure secure, scalable and resilient solutions across the business. Key Responsibilities: Deploy and manage enterprise security tools (SIEM, XDR, DLP, Email Security, Endpoint Protection). Build automation using Python, PowerShell, Bash. Implement IaC using Terraform and Ansible. Maintain secure baselines for Windows, Linux ...

operations. Contract: 6 months Start: ASAP Location: Local Authority (LBH) What you’ll be doing: Leading CrowdStrike Falcon deployment, configuration, and optimisation Enhancing Splunk SIEM dashboards, alerts, and threat detection capabilities Acting as a senior escalation point for incident response Driving SOAR automation to improve response times Conducting proactive threat ...

embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience ...

Engineer - SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100, Our leading global law firm client are currently looking to take on a new SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) to join their team on a contractual … healthy hybrid working solution 2-3 days per week in London and offer a great deal of autonomy and technical exposure. This SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) role, will be responsible for the enhancement of existing SIEM platform and improve ...

influencing SOC processes and automation Confident communicating risk and recommendations clearly to stakeholders Tech stack experience CrowdStrike (EDR) Microsoft Defender Splunk or similar SIEM tools Qualys (vulnerability management) Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built ...

and profiles Assist with transitioning and duplicating existing NAC/ISE configurations Connect NAC solutions with core enterprise platforms (such as Active Directory, MDM, SIEM, and firewalls) Diagnose and resolve technical issues to keep delivery on track What You'll Bring Demonstrated expertise in Cisco ISE and NAC implementations Strong ...

have: Knowledge of firewalling, VPN, Zero Trust frameworks, and SD-WAN technologies. Experience with Terraform and scripting (Python, Bash, or PowerShell). Experience integrating SIEM platforms Understanding of Zero Trust architecture and SD-WAN optimization If you're interested in this role, click 'apply now' to forward ...

teams. Support NAC policy design aligned to Zero Trust principles. Analyse impacts to wired, wireless, and VPN access. Document NAC integrations (AD, MDM, PKI, SIEM). Support NAC rollouts, upgrades, and compliance initiatives. Assist with operational readiness and change management. Translate security requirements into clear business outcomes. Desirable Experience with ...

planned/unplanned failover, failback, RPO/RTO, subset failover Security: RBAC, AD/Entra ID integration, encryption at rest, network security policies, CyberArk, SIEM (Sentinel/Defender) Ops tooling: monitoring and alerting in Prism/x play, Cohesity backups, alert forwarding into tools like OpsRamp Migration: Nutanix Move from ...

ground running and elevate an evolving security function. Key Responsibilities Endpoint Security Leadership: Own deployment, configuration, and optimisation of CrowdStrike Falcon SIEM Optimisation: Partner with the SOC to enhance Splunk dashboards, alerts, and data models Incident Response: Act as escalation point for high-priority incidents, driving rapid containment Threat Hunting … development Certifications (Desirable) Cyber Security: CompTIA Security+, Network+, CySA+, GSEC CISSP, GCIH, GCIA, CCSP CrowdStrike (ideally 2+): CCFA (Falcon Administrator) CCFR (Falcon Responder) CCSE (SIEM Engineer) Splunk: Splunk Certified Cybersecurity Defense Engineer (preferred) Why Apply? Shape and optimise a modern SOC capability Work with best-in-class tools (CrowdStrike & Splunk ...

telemetry, capable of turning raw data into actionable intelligence. Key Responsibilities Endpoint Strategy: Lead the deployment, policy configuration, and maintenance of the CrowdStrike Falcon SIEM Mastery: Work with our SOC partner to architect and optimize Splunk dashboards, alerts, and data models to identify sophisticated threats. Incident Response: Serve … technical escalation point for high-priority security incidents, utilizing EDR and SIEM tools for rapid containment. Automation: Develop "SOAR" workflows (Security Orchestration, Automation, and Response) to reduce manual intervention and improve response times. Threat Hunting: Proactively search for undetected malicious activity using specialized queries. Training . Build up the Crowdstrike ...

threats from both open-source (OSINT) and commercial threat intelligence. Proven experience operating cyber security solutions and tools e.g. Security Information and Event Management ( SIEM ), maintaining security records and documentation in accordance with security operating procedures. Demonstrated experience in managing relationships with external vendors, managed security service providers ( MSSPs ), and ...

requirements and translate them into detailed interface specifications and solution designs Oversee integration of key platforms, including Customer ERP, ServiceNow, Amazon Connect, SOC/SIEM, and Enterprise Data Platform, ensuring secure, reliable, and scalable data flows Facilitate and lead solution integration workshops with internal and external stakeholders to confirm requirements … Agile and Waterfall delivery methodologies, with a focus on iterative delivery and continuous improvement as per GDS framework Preferred Qualifications Experience with SOC/SIEM integration and incident management processes. Familiarity with cloud platforms (AWS, Azure) and hybrid integration scenarios. TOGAF or similar architecture certification. Experience supporting GDS service assessments ...

requirements.- Integration with identity/directory services for visibility and correlation.- Tuning of detection capabilities, including custom detection logic within agreed capacity.- Integration with SIEM/SOC platforms for alerting, event correlation, and centralised monitoring.- Enablement of response capabilities (host containment, Real Time Response).- Validation, testing, and troubleshooting … experience deploying and engineering CrowdStrike Falcon Strong background in endpoint and server security across enterprise, cloud, and hybrid estates Experience integrating security tooling with SIEM/SOC environments ...