1 to 25 of 34 Permanent SIEM Jobs in Central London

responsibilities, with opportunities for mentoring junior staff and engaging with senior stakeholders. Key Responsibilities Detection Engineering: Develop, maintain, and enhance security detection content for SIEM platforms (primarily Splunk) to identify threats across cloud, endpoints, and networks Identify gaps in detection coverage, log ingestion, and alerting, aligned with business risks and ...

delivery (domestic and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...

service x4 salary, cycle to work scheme and many, many more perks! Cyber Security Threat Hunter – Key Skills: Incident response processes/methodologies and SIEM operations Security tooling, reporting, and delivering work in a structured/project-based way IT/networking/security fundamentals including operating systems, networking and ...

team, and setting a world class standard. Expertise in network security, application security, cloud security, and data protection. Demonstrable experience with security tools (SIEM, IDS/IPS, vulnerability scanners, endpoint protection). Hands‐on experience in incident response, threat hunting, and forensic analysis. Excellent communication, leadership, and stakeholder management skills. ...

storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. Ability to analyze and interpret logs from various sources. Familiarity with SIEM and SOAR solutions. Ability to perform threat research and analyze current threats. Understanding of business email compromise (BEC) cases and investigation techniques. Business Responsibilities Fluent ...

platforms: AWS (S3, RDS, Glue), Azure (ADLS, Purview), GCP (BigQuery) Data cataloguing tools — Collibra, Alation, Informatica ETL pipelines and data lineage concepts Security & Privacy SIEM/DLP tools integration (Splunk, Microsoft Purview) Identity & Access Management basics (IAM, RBAC) Encryption, tokenization, and data masking techniques Scripting & Automation Python/Bash ...

detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with SIEM, IDS, and EDR, plus problem-solving skills to drive rapid uplifts in security posture. #J-18808-Ljbffr ...

information security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with cloud platforms ...

Minimum 1 years proven experience in a Tier 1 Cyber Security SOC Support Analyst role Working knowledge of Microsoft Defender XDR and Microsoft Sentinel SIEM technologies Working knowledge of Microsoft Defender suite including Endpoint Detection and Response Understanding of key Microsoft 365 Cloud Technologies from a threat landscape perspective Cyber ...

and OAuth Cloud platforms such as: AWS Microsoft Azure Google Cloud Platform (GCP) IBM Cloud Oracle Cloud Monitoring and observability tools, including Splunk and SIEM solutions Pre-Sales and Customer-Facing Experience Proven experience in a customer-facing technical role, solution architecture role, or pre-sales consulting position. Demonstrated ability ...

Cybersecurity Threat Detection team seeks a skilled professional to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms, aligned with MITRE ATT&CK. You will hunt threats, validate log health, and collaborate with threat intelligence and incident response to stay ahead of adversaries. Strong scripting skills and ...

critical business assets. Establish and maintain incident response processes, procedures, and documentation, ensuring they align with industry best practices. Strong hands-on experience with SIEM, EDR, cloud security, identity, email security, and forensic analysis tooling, with the ability to investigate incidents, validate detections, and guide analysts through complex technical findings. … improvement. Conduct periodic threat simulation activities to evaluate the adequacy of deployed detective/preventative controls. About you Proficiency in incident response tooling, including SIEM, EDR, cloud security, threat intelligence and forensic analysis platforms. Demonstrable experience leading and coordinating responses to complex cyber security incidents, acting as a technical lead ...

role focuses on incident detection, investigation, and response, with leadership on complex incidents. You will mentor junior analysts and help develop and improve SIEM rules and detection use cases. You will work four days on site in London with one day remote, collaborating with incident response, security engineering and ...

organisation's cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security , while also providing security advice to technology projects and supporting security‐by‐design principles. Key Responsibilities Design, implement and … Purview, Exchange Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring . Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation ...

response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, and document the intent, data source, and expected behavior of each detection Detection Tuning and Health - Own false positive rates, alert … retest Log Source Health - Validate the health and completeness of security log sources, detect collection failures and silent feeds, and onboard or update SIEM log sources in a timely manner Automation and Tooling - Apply a developer and problem-solving mindset to the work, using scripting to build internal tooling, process ...

strengthen its cyber defence capability. The role focuses on improving detection, investigation, and response while reducing friction for analysts. You will build detections across SIEM, XDR, and email security, tune detections to reduce false positives, and lead threat hunts and incident response support. The role requires proactive, technically capable individuals ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing. Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics. Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques. Current and active UK Developed … Vetting (DV) Security Clearance. Responsibilities: Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents ...

action and decision while maintaining focus on achieving optimal outcomes as part of a collaborative development effort. Experience in enterprise security solutions (endpoint, SIEM, networking, etc). Seasoned with financial services sales (banking) or BFSI market. Team Player, Competitive, Optimistic, Enthusiastic, Trust Builder. #J-18808-Ljbffr ...

scale SOC modernization. You will guide customers through log migration, detection strategy development, and transformation programs in dynamic enterprise settings. With 10+ years in SIEM/security analytics and 8+ years in SOC tooling, you will partner with executives, sculpt roadmaps, and mentor high-performing teams to deliver measurable security ...

coordinating containment, eradication and recovery activities with internal and external stakeholders. Design, develop and optimise detection rules, threat models and advanced monitoring capabilities across SIEM, EDR and cloud security platforms. Conduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats. Develop and … operating in a senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity. Deep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms. Proven experience leading the investigation and response to complex cyber security incidents and ...

concepts, CONOPS and high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation … deployment and operation They're looking for: • Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security ...

and participation in audit/certification such as: GDPR, NIST SP800-53, ISO 27001, NIST CSF, etc Experience evaluating logging activities for ingestion into SIEM as part of continuous monitoring plan Experience with security technologies and tooling, e.g. vulnerability scanners, firewalls, network monitors, IAM, SIEM, IDS/IPS Knowledge ...

custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing. Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics. Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques. Current and active UK Developed ...