1 to 25 of 39 Contract SIEM Jobs in the UK excluding London

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of Scripting/automation using PowerShell or Python is desirable. Key Competencies Strong analytical and troubleshooting ...

enterprise environments Proven capability in security incident investigation and remediation, with strong understanding of malware analysis and advanced email threats, and familiarity with SIEM platforms such as Splunk, Sentinel, or QRadar Strong analytical, troubleshooting, and stakeholder communication skills - desirable: PowerShell or Python Scripting experience, and SC clearance or SC eligibility ...

Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber ...

Engineering background (AWS, Azure, or GCP) Cloud Security expertise CI/CD pipelines and DevOps PowerShell, Bash, Python and/or Java Docker & Kubernetes SIEM tools, Security Controls and Cloud Security Tooling Incident, Problem and Change Management Experience with Wiz tooling (Wiz Cloud/Wiz Defend) Windows and ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

live and ongoing support. Working within Microsoft 365 and Azure environments. Microsoft security technologies such as Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

Access Proficiency in configuring, managing, and troubleshooting firewalls. Cisco, Palo Alto etc,. Experience with intrusion detection/prevention systems, as well as with SIEM tools and security incident response. Excellent problem-solving skills, analytical thinking, and the ability to communicate effectively with diverse stakeholders. CERTIFICATIONS: (any of below) · Cisco ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

response. They will drive continuous improvement across the outsourced SOC and in-house SOC teams of analysts and engineers. Youll have experience of configuring SIEM tools, onboarding sources, writing processes and alerts, understanding business environments and managing incidents affecting applications and infrastructure across a varied technology stack spanning operational technology ...

access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer and internal stakeholders ...

mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions … knowledge of CI/CD pipelines and DevSecOps practices. Strong understanding of cloud security controls, security frameworks, and compliance requirements. Hands-on experience with SIEM platforms and cloud security tooling. Experience with incident, problem, and change management processes. Working knowledge of Wiz Cloud and Wiz Defend security platforms. Strong containerisation ...

Conditional Access) Azure IaaS and networking (VPN Gateway, routing, connectivity design) Strong working knowledge of: Enterprise networking (routing, switching, firewalls) Security operations, logging, and SIEM integration Proven experience leading engineering teams across infrastructure/network/security transformations Strong data handling capability, including advanced Excel for engineering control and analysis ...

Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk ...

Recruitment specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you. Role Title: SIEM Engineer Location: Wokingham RG41 5BN- hybrid Duration: 30/12/2026 Clearance: Active SC Role Description: SIEM Deployment & Management - Set up, configure, and maintain … SIEM tools like ArcSight, Splunk, or QRadar. Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats. Incident Response - Work with security teams to analyze and mitigate security incidents. Custom Rule Creation - Develop and fine-tune detection rules and alerts to identify malicious activities. Security Reporting - Generate reports ...

integrations Elasticsearch ingest pipelines, Data Streams, templates, mappings and ILM End-to-end data/feed onboarding, testing, troubleshooting and validation Elastic Security/SIEM environments High-volume ingestion architectures, including Kafka Elastic platform migrations, upgrades and optimisation We have opportunities available for both permanent consultants and Outside IR35 contractors ...

hands-on engineering role focused on the implementation, maintenance, optimisation and integration of security technologies across complex enterprise environments. Key Responsibilities Administer and maintain SIEM and security monitoring platforms Configure and optimise log ingestion, correlation rules and alerting Develop and maintain automation using PowerShell, Python and Regex Integrate security technologies … analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies ...