16 of 16 Remote/Hybrid Contract SIEM Jobs

Proven experience working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and ...

leading and managing cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem ...

within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/ ...

perform effectively in high-pressure situations Desirable ITIL certification ISO 22301 and/or ISO 27001 knowledge Experience with Cisco, VMware, ServiceNow, Veeam, Fortinet, SIEM and vulnerability management tools You will play a key role in protecting critical business services, driving operational resilience and leading responses to incidents that have ...

minimise risk and improve security capabilities. The Role Investigate and respond to cyber security incidents across enterprise environments. Monitor and triage alerts from SIEM, EDR/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment … ideally have: Experience working within a Security Operations Centre (SOC), Cyber Defence or Incident Response function. Strong hands-on experience with SIEM, EDR/XDR and enterprise security monitoring technologies. Knowledge of Windows, Linux, networking, cloud security and identity management. Experience investigating complex cyber incidents and communicating findings to both ...

investigation and triage through to containment, eradication and recovery. Strong technical investigation skills across endpoint, network and identity-related threats. Hands-on experience using SIEM and EDR tools to analyse alerts, correlate evidence and establish incident scope. Ability to identify root causes and translate findings into practical remediation recommendations. Clear ...

solving skills. Ability to work effectively with technical and non-technical stakeholders. Desirable Skills Experience working within secure or highly regulated environments. Knowledge of SIEM integrations and security monitoring solutions. Experience with enterprise integration patterns and best practices. Exposure to Oracle Cloud technologies and wider cloud-based integration architectures. ...

Advert Job Title: SIEM Security Engineer Location: Birmingham- Hybrid 3 days on site a week Contract Type: 5-Month Contract About the Role: We are looking for a skilled SIEM Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and … threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

contract. People from a background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote … upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting activities across enterprise environments Investigating suspicious activity across cloud, endpoint and network technologies Producing detailed incident … experience with Microsoft Sentinel Excellent Incident Response experience within enterprise environments Experience investigating advanced threats, malware, phishing and compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices ...

Assessment Papers, Risk Treatment Plans, Risk Business Cases, and Security Management Plans. Knowledge and experience with security architecture and Security Information and Event Management (SIEM) tools, such as Splunk, Defender, Sentinel, ELK, and Tenable Threat Modelling System solutions. Extensive understanding of cybersecurity threats, attack vectors, vulnerabilities, and security controls. Demonstrable ...

SIEM Security Engineer Contract - UK wide, with flexibility across multiple office sites, Hybrid Working (3 Days per week on site), Paying up to £558 Per Day, Inside IR35, Contract until March 2027 Your new role We are looking for an experienced SIEM Security Engineer to join a major long-term … security programme, supporting the continued development and maturity of an established SIEM platform. This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability. Key Responsibilities: Onboard and normalise new security log/data sources Develop ...

suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content. Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing content and supporting the adaptation or migration … security monitoring, threat detection and SOC operations. Ability to work independently in a remote project environment. Experience with detection rule development, threat detection engineering and SIEM content migration would be beneficial. ECS Recruitment Group Ltd is acting as an Employment Business in relation to this vacancy. ...