5 of 5 Permanent SIEM Jobs in Cheshire

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

Operations Analyst (SecOps) Permanent Location: South Manchester (Hybrid - onsite 2 days a week) Salary: £45,000 - £55,000 (+ benefits) Skills: SecOps, Microsoft Sentinel, SIEM, Incident Response, Microsoft Defender We are recruiting for an experienced Cyber Security Operations Analyst to join an established IT Managed Services Provider, supporting security operations ...

Operations Analyst (SecOps) Permanent Location: South Manchester (Hybrid - onsite 2 days a week) Salary: £45,000 - £55,000 (+ benefits) Skills: SecOps, Microsoft Sentinel, SIEM, Incident Response, Microsoft Defender We are recruiting for an experienced Cyber Security Operations Analyst to join an established IT Managed Services Provider, supporting security operations … incidents across multiple customer environments. Analyse security events, logs and technical evidence to assess threats, identify vulnerabilities and determine appropriate remediation actions. Work with SIEM technologies, including Microsoft Sentinel, supporting the ongoing development and improvement of security monitoring capabilities. Provide advanced technical support for complex security and cloud-related incidents ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...