14 of 14 Permanent SIEM Jobs in Glasgow

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

information exchange and trusted data transfer mechanisms. Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure. Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments. Infrastructure & Engineering Advanced PowerShell scripting ...

autonomously. Experience with incident response, change management, governance processes and cyber resilience activities. Professional certifications such as CISSP or CISM, along with experience of SIEM/SOAR technologies would be advantageous. Applicants must be eligible to obtain UK Security Clearance. What’s in it for you As well ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

delivering real-world impact and working alongside talented colleagues who care deeply about quality, collaboration and customer success. About the Role: As an OT SIEM Engineer, you will play a key role in strengthening cyber security monitoring and threat detection capabilities across complex enterprise and Operational Technology (OT) environments, with … particular focus on Microsoft Sentinel. This is a hands‐on engineering role where you will support the development and enhancement of SIEM capabilities, integrating security telemetry, developing detection content and implementing automation to improve security operations. You'll work closely with Cyber Defence and Security Operations teams, helping to deliver ...

initial triage of events and incidents; Support the operation and administration of the security stack, including endpoint protection, vulnerability management, email security, cloud security, SIEM/SOC integrations and secure access controls; Assist with vulnerability review, prioritisation, remediation tracking and reporting across servers, endpoints, cloud services and network infrastructure; Support … technical role; Monitoring, triaging and escalating security alerts, incidents or vulnerability findings; Using or supporting common security tools such as endpoint protection, vulnerability management, SIEM/SOC tooling, email security, identity protection, web security or cloud security platforms; Supporting Microsoft Windows, Windows Server, Microsoft Azure, Microsoft 365, Active Directory ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software-defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause … Cyber Security Analyst: Proven experience in a Senior Cyber Security Analyst, Security Operations Analyst, or equivalent technical security role Strong hands-on experience with SIEM technologies, threat detection, security monitoring, and incident response Experience with security technologies including firewalls, endpoint detection and response (EDR), DLP, and vulnerability management tools Demonstrable ...

with a focus on understanding attack paths and mitigations and a strong understanding of security operations, incident response, and detection engineering Excellent understanding of SIEM, IAM and DLP programmes and technologies and expertise in applying operational security requirements in Zero Trust networks Knowledge and experience of managing operational security ...

work with ownership, influence and responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical … cyber security role, ideally within security operations, incident response, threat detection or a similar technical security environment. ** Practical knowledge of security technologies including SIEM, firewalls, endpoint detection and response (EDR), DLP and vulnerability management tools. ** Experience investigating security incidents, analysing logs and identifying threats across complex IT environments. ** A good ...

Senior Cyber Security Analyst – SIEM, EDR, DLP, and firewalls – Scotland – Hybrid - £60,000 - £68,000 Our client is a highly respected, global firm looking to bring on a Senior Cyber Security Analyst to serve as the technical Subject Matter Expert (SME) for their security operations team. Reporting directly … Strong experience in cyber security and IT, ideally with prior experience acting as an SME or technical team mentor. Practical, hands‐on knowledge of SIEM, EDR, DLP, and firewalls. Experience working in global, fast‐paced environments across multiple time zones. Familiarity with Agile ways of working and tools like Jira ...

analysis and correlate events across multiple security platforms. Support incident investigation, response and remediation activities. Deploy, manage, maintain and improve security tooling, including SIEM, EDR and vulnerability management platforms. Develop and implement automation to improve operational efficiency and incident response. What we're looking for At least one year … relevant experience in a SOC, Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious ...

security operations team. You will balance hands-on defense with leadership, overseeing alerts, investigations, and incident response across global teams. The role requires strong SIEM/EDR/DLP and firewall experience, familiarity with Agile practices, and mentoring juniors. Hybrid working in Scotland, with a typical early start. #J ...

Sword Group is seeking an OT SIEM Engineer to strengthen cyber security monitoring across complex OT environments, with a focus on Microsoft Sentinel. The role involves implementing automation, integrating telemetry and developing detection content to improve security operations. You will collaborate with Cyber Defence and Security Operations teams, migrate data ...