21 of 21 Contract SIEM Jobs in London

leading and managing cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem ...

hooks Experience with Logstash configuration, filtering and parsing. Knowledge of centralised logging architectures and AWS cross-account log aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. ...

Security Operations Centre (SOC) or Incident Response function. Hands-on experience investigating threats across: macOS Linux Cloud platforms Containers and microservices Experience with: SIEM platforms EDR/XDR technologies Cloud security monitoring tools Strong understanding of cyber threat detection and incident response methodologies. Knowledge of attacker tactics, techniques, and procedures ...

environments and applications. Hands-on experience with macOS security investigations and Linux workloads in cloud environments. Understanding of microservices and containerised environments. Experience using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability ...

within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/ ...

within complex security transformation programmes. Strong understanding of Security Operations (SecOps), including service design, operational readiness and implementation. Knowledge of enterprise security technologies, including SIEM, IAM/PAM, vulnerability management, CMDB and security monitoring platforms. Experience working within UK Government, Defence or similarly complex regulated environments. Familiarity with NCSC guidance ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

minimise risk and improve security capabilities. The Role Investigate and respond to cyber security incidents across enterprise environments. Monitor and triage alerts from SIEM, EDR/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment … ideally have: Experience working within a Security Operations Centre (SOC), Cyber Defence or Incident Response function. Strong hands-on experience with SIEM, EDR/XDR and enterprise security monitoring technologies. Knowledge of Windows, Linux, networking, cloud security and identity management. Experience investigating complex cyber incidents and communicating findings to both ...

permanent staff. You'll work alongside Microsoft 365, security operations, information protection and data governance colleagues. Around 20% of the role involves Sentinel/SIEM integration. You'll need current SC clearance and evidence that you have personally run Proofpoint Enterprise DLP in a complex enterprise environment. Hands-on Proofpoint ...

investigation and triage through to containment, eradication and recovery. Strong technical investigation skills across endpoint, network and identity-related threats. Hands-on experience using SIEM and EDR tools to analyse alerts, correlate evidence and establish incident scope. Ability to identify root causes and translate findings into practical remediation recommendations. Clear ...

solving skills. Ability to work effectively with technical and non-technical stakeholders. Desirable Skills Experience working within secure or highly regulated environments. Knowledge of SIEM integrations and security monitoring solutions. Experience with enterprise integration patterns and best practices. Exposure to Oracle Cloud technologies and wider cloud-based integration architectures. ...

security, infrastructure and application teams to translate requirements into practical technical solutions. Key experience: - Strong Microsoft Sentinel/Azure security architecture experience. - Experience designing SIEM integrations, log ingestion pipelines and custom connectors. - Knowledge and experience of Azure Data Factory and Azure integration services. - Hands-on experience designing and implementing Microsoft ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

Vault, and integrations. Drive account discovery and onboarding, remediate privileged access risks (orphan accounts, shared credentials, password gaps), integrate with AD/LDAP, IGA, SIEM, and ServiceNow, and support audits and compliance reporting. Top 5 Skills CyberArk PAM expertise: 8+ years of IT experience with strong CyberArk capability. Mandatory certification ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting activities across enterprise environments Investigating suspicious activity across cloud, endpoint and network technologies Producing detailed incident … experience with Microsoft Sentinel Excellent Incident Response experience within enterprise environments Experience investigating advanced threats, malware, phishing and compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices ...

Assessment Papers, Risk Treatment Plans, Risk Business Cases, and Security Management Plans. Knowledge and experience with security architecture and Security Information and Event Management (SIEM) tools, such as Splunk, Defender, Sentinel, ELK, and Tenable Threat Modelling System solutions. Extensive understanding of cybersecurity threats, attack vectors, vulnerabilities, and security controls. Demonstrable ...

Senior SIEM Engineer Birmingham (Hybrid) | 6 Months | Inside IR35 Our client, a leading technology organisation is looking for a Senior SIEM Engineer to support a large-scale security monitoring platform. Responsibilities: Develop and optimise SIEM solutions Build and manage log ingestion pipelines Enhance threat detection, alerts and dashboards Support platform … automation and performance tuning Work closely with Security Operations teams Key Skills: SIEM Engineering/Security Monitoring Elasticsearch, Logstash, Kibana (ELK) Kafka Kubernetes Scripting & Automation Ansible, Helm, ArgoCD or GitLab CI/CD Strong troubleshooting and analytical skills Ideal for candidates from SIEM Engineer, Security Engineer, Detection Engineer, Elastic Engineer ...

evaluating emerging technologies, identifying high-value use cases and defining a secure target architecture and implementation roadmap. The Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate … Solutions Architecture and technical design. Knowledge of Generative AI, LLMs, RAG and agentic AI. Understanding of cyber security operations and SOC environments. Experience with SIEM, SOAR, EDR/XDR and security tooling integrations. Knowledge of data architecture, APIs, cloud platforms and integration patterns. Understanding of AI security, assurance and responsible ...

Security Engineer – SIEM/QRadar – 6-month contract – London/remote Overview My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs … also be an opportunity to support a future migration to Splunk. Key Responsibilities of the Security Engineer Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts. Review and optimise detection use cases to improve threat visibility and reduce false positives. Configure and maintain log collection, parsing, normalisation ...

suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing content and supporting the adaptation or migration … security monitoring, threat detection and SOC operations. Ability to work independently in a remote project environment. Experience with detection rule development, threat detection engineering and SIEM content migration would be beneficial. ECS Recruitment Group Ltd is acting as an Employment Business in relation to this vacancy. ...