1 to 25 of 431 Permanent SIEM Jobs in England

SIEM Security Engineer Advertised Salary: Competitive with Great Benefits GBR-Birmingham-Three Snowhill The role is hybrid (3 days in office) & based in Birmingham Closing date: 13th Aug 2026 About the role The new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving … Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules, alerts, and dashboards for efficient threat detection. Query Optimization and Performance Tuning Write efficient Elasticsearch queries to retrieve ...

modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ...

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

Infrastructure as Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience in complex enterprise or multi‐cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. ...

highly regulated IT environments. Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable. Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews ...

outsourced SOC to ensure rapid detection, escalation, and resolution of security alerts and major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

and workstation estates. Experience with vulnerability-management and compliance frameworks such as CIS, NIST or DISA STIG. Experience integrating Tanium with ServiceNow, ITSM, CMDB, SIEM, identity or reporting platforms. Experience working in operational technology, manufacturing, healthcare, public-sector, defence or other highly controlled environments. Understanding of virtualisation, VDI, server-build ...

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

secure-by-design principles. Cloud, network, identity, application and OT security. Security operations, threat detection, incident response and cyber resilience. Modern security technologies including SIEM, EDR, XDR, SOAR and vulnerability management platforms. Industry frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOX, GDPR and NIS2. What will help ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

core network protocols (TCP/IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP). Framework Knowledge: Solid comprehension ...

Show more Qualifications Technical Expertise: Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources ...

experience. Experience applying CIS Benchmarks or similar hardening standards. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Experience with vulnerability management, SIEM, logging and incident response. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands‐on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

portfolio – encompassing the strategic platforms and capabilities that GCS operates on behalf of the Group, including (but not limited to) identity and access management, SIEM/SOAR, endpoint protection, cloud security, network security, and OT security. Provide architectural input to the GCS investment planning cycle, ensuring technology decisions are grounded ...

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

work independently and as part of a team. A relevant IT, networking or cybersecurity qualification, or equivalent experience. Experience with firewalls, Microsoft Azure, SIEM platforms, vulnerability management tools or backup and disaster recovery technologies would be advantageous. Certifications such as CCNA, CompTIA Network+ or CompTIA Security+ are desirable ...

security-related issues Overseeing security operations, incident response and vulnerability management Supporting secure Azure and AWS environments Managing and optimising security tooling including SIEM, EDR and related platforms Reviewing projects, infrastructure changes and technical designs from a security perspective Driving secure-by-design principles across technology initiatives Managing third-party ...

cyber security role. Strong technical background with solid infrastructure, network and system security knowledge. Experience using vulnerability management tools, Intrusion Detection Systems (IDS) and SIEM platforms. Knowledge of cyber security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework and/or PCI DSS. Experience investigating and responding ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

senior security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

senior security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments ...