8 of 8 Permanent SIEM Jobs in Edinburgh

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have: Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

and shape the capabilities to protect critical assets. You will drive improvements in security monitoring, enable AI-aware operations and ensure effective use of SIEM/EDR/SOAR tools while aligning with risk governance and budgets. #J-18808-Ljbffr ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

control validation and emerging technologies including AI.## Responsibilities* Design, build, configure and maintain security platforms and protective controls across our technology environment, including XDR, SIEM, SOAR, cloud security and vulnerability management capabilities.* Develop security tooling, integrations and automation using APIs, scripting, SOAR and other engineering approaches, turning repetitive or manual … management, privileged access, secrets management and associated access-control technologies.* Security platforms, including, Endpoint and XDR technologies, particularly CrowdStrike, as well as experience with SIEM, SOAR and other security platforms.* Automation and integration skills including scripting or development using PowerShell, Python, Bash or similar, API-based integrations and Infrastructure ...

element. You’ll be involved in the evaluation and administration of enterprise security tooling across areas such as endpoint security, vulnerability management, logging and SIEM, as well as supporting detection, investigation and incident response when required. You’ll need to be comfortable moving between technical detail and wider business conversations … incident response activities, including investigation, containment and remediation. Evaluate, implement and administer enterprise security technologies across areas such as endpoint protection, vulnerability management and SIEM/logging. Work with infrastructure teams to embed security into new systems, services and technology initiatives. Contribute to threat‐driven security initiatives and improvements ...

deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead and work closely with the SOC engineers … and evidence them for client audits (ISO 27001, Cyber Essentials Plus). Security tooling & engineering Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security. Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads. Own tooling health: versioncurrency, coverage ...

drive the threat-informed defence programme.* Set the Security Operations roadmap, balancing capability development, operational priorities, capacity and costs.* Oversee the operational use of SIEM, EDR, and SOAR, working with Security Engineering on platform development and integrations.* Develop the team’s ability to monitor and respond to AI-enabled activity. … security investigations, incident management, containment and recovery.* Knowledge of common attack techniques, threat intelligence, threat hunting and prevention methods.* Experience using security telemetry and SIEM, EDR or XDR tools to investigate threats and improve detection.* An understanding of identity, endpoint, network and cloud security.* Experience managing operational costs or supplier ...