1 to 25 of 848 Permanent SIEM Jobs in England

and enable a "Defend as one" strategy across the health and care system.The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment.Main duties of the jobThe Security Advisor SIEM Engineering is responsible for:Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated.Maintaining the SIEM data feed ...

and enable a "Defend as one" strategy across the health and care system.The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment.Main duties of the jobThe Security Advisor SIEM Engineering is responsible for:Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated.Maintaining the SIEM data feed ...

and enable a "Defend as one" strategy across the health and care system.The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment.Main duties of the jobThe Security Advisor SIEM Engineering is responsible for:Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated.Maintaining the SIEM data feed ...

enable a "Defend as one" strategy across the health and care system. The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment. Main duties of the job The Security Advisor SIEM Engineering is responsible for: Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated. Maintaining ...

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

Title: SIEM Application Engineer Req ID: 62567 Job Function: Cyber Security Posting Start Date: 09/09/2026 Posting End Date: 23/09/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62567 Posting Date … Kafka Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development: Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Optimize SIEM rules, alerts, and dashboards for efficient threat detection. Query Optimization and Performance Tuning: Write efficient Elasticsearch queries to retrieve ...

desire to keep developing technical and professional security skills. Desirable Technical Knowledge Microsoft 365 security technologies and the wider Microsoft E5 security ecosystem. SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies. Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control ...

development teams to promote secure development practices.Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation.Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response.Understanding of cyber incident response, including triage, investigation, containment and recovery.Knowledge of Cyber Essentials, Cyber Essentials Plus and ...

Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware ...

gapped, or highly regulated IT environments.Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable.Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutionsDemonstrable experience applying Secure by Design principles in complex IT systems and programmes.Experience conducting security architecture reviews, threat modelling ...

highly regulated IT environments. Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable. Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews ...

strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES• Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

communicate findings clearly to stakeholders.Excellent written and verbal communication skills.Experience working within enterprise-scale or highly regulated environments.Desirable ExperienceSecurity Operations Centre (SOC) experience.Experience with SIEM platforms and security monitoring tools.Knowledge of cloud security and hybrid infrastructure environments.Exposure to vulnerability management and threat hunting activities.Experience supporting government, defence, or public sector ...

bring 4-6 years' experience in a SOC or MSSP environment at Tier 2-3 or Lead level Strong hands‐on experience with SIEM platforms (e.g. Microsoft Sentinel, Splunk, Elastic, LogPoint) Experience with EDR tools such as Microsoft Defender, SentinelOne, or Bitdefender Deep understanding of MITRE ATT&CK and modern ...

experienceGood knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)RoleThrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types.Developing security ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Google Cloud, alongside a strong understanding of identity and access management, MFA, SSO and privileged access controls. Experience with security technologies including SIEM, EDR and vulnerability management tools is highly desirable, as is hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background ...

Google Cloud. Experience with identity and access management, including SSO, MFA, RBAC and privileged-access controls. Experience deploying and maintaining security technologies including SIEM, EDR, vulnerability-management, secrets-management and intrusion-detection tools. Experience with Linux administration, system hardening, patch management and configuration management. Experience investigating security incidents, reviewing logs ...

supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.Experience with Bash scripting, automation tools, and infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Familiarity with MITRE ATT&CKFamiliarity with ITILWorkplace type: About NTT DATANTT DATA is a $30+ billion business and technology services leader, serving ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … tech company. The Security Engineer (SIEM/XDR) role is Hybrid, in the London office 1-2 times a month . You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable ...