1 to 25 of 41 Permanent SIEM Jobs in Hampshire

and/or AWS vulnerability management. Experience with container, Kubernetes or DevSecOps security. Knowledge of application security and common web application vulnerabilities. Experience using SIEM, EDR and threat intelligence alongside vulnerability data. Knowledge of NIST, CIS, ISO 27001 or Cyber Essentials. Relevant security certifications such as CISSP, CISM, GIAC, OSCP ...

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

books, notebooks, and live-response packages deployable via EDR, SOAR, and endpoint management platforms.• Drive incident response tooling and integration strategy across EDR, XDR, SIEM, identity, cloud, network, ticketing, and AI platforms to enable closed-loop response.• Partner closely with the detection product team to ensure detections produce response-ready ...

Extensive experience in cyber security management within defence, aerospace, or government environments.Strong knowledge of classified information handling and secure communication protocols.Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems.Proven track record of leading incident response in high-security environments.Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST ...

Security 1+ years of experience with either programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM's such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune ...

university degree (e.g. Blue Team Labs, Hackthebox, LetsDefend, CTF exercises, home sandbox environment exercises with write ups etc) Familiarity with monitoring tools such as SIEM, IDS/IPS, EDR, and threat intelligence platforms. 1+ years of experience in cybersecurity (SOC or MSSP experience preferred) is advantageous but not required. Basic ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

Architect endpoint protection, DLP and advanced threat protection solutions Design application security, API security and secure SDLC integration Architect Security Operations Centre (SOC) and SIEM capabilities Lead security technology evaluation, selection and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture … network security, micro-segmentation and secure access technologies Proficiency in cloud security across Azure, AWS or equivalent platforms Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewalls Understanding of cryptography, encryption standards and secure communication protocols Familiarity with MOD security requirements, defence standards and ...

sites. At least five GCSEs at grades A–C, or equivalent, including Maths and English. Technical capability Knowledge across multiple security domains, such as SIEM, firewalls, network intrusion prevention, data loss prevention and cloud security. Familiarity with cyber security products and managed security services. The ability to understand customers’ threat ...

service x4 salary, cycle to work scheme and many, many more perks! Cyber Security Threat Hunter - Key Skills: Incident response processes/methodologies and SIEM operations Security tooling, reporting, and delivering work in a structured/project-based way IT/networking/security fundamentals including operating systems, networking and ...

service x4 salary, cycle to work scheme and many, many more perks!Cyber Security Threat Hunter – Key Skills:Incident response processes/methodologies and SIEM operationsSecurity tooling, reporting, and delivering work in a structured/project-based wayIT/networking/security fundamentals including operating systems, networking and digital forensicsMicrosoft ...

multi-cloud environments Architect application security, API security and secure SDLC integration Design security operations centre (SOC) capabilities and security information and event management (SIEM) Lead security technology evaluation and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture patterns and … Strong understanding of threat models, attack vectors and defence-in-depth strategies Proficiency in cloud security (AWS, Azure security, or equivalent) Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.) Understanding of cryptography, encryption and security protocols Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge ...

bank. What you'll get to do/Responsibilities Detection Engineering - Design, build, test, and maintain high-fidelity detection rules and analytics in our SIEM and other security platforms. Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments. … experience analysing attacker behaviour, with a strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands‐on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics. Threat Hunting: Experience conducting proactive ...

Security and an understanding of the wider technology landscape. You'll ideally have some exposure to areas such as: Cyber Security/SOC environments, SIEM and threat detection, Network and endpoint security, Cloud Security, Vulnerability management, Major Cyber Security vendors and solutions. You'll be supported by experienced Cyber engineers ...

and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre (SOC) and SIEM capabilitiesLead security technology evaluation, selection and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and governance processesDrive … solutionsStrong understanding of network security, micro-segmentation and secure access technologiesProficiency in cloud security across Azure, AWS or equivalent platformsKnowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewallsUnderstanding of cryptography, encryption standards and secure communication protocolsFamiliarity with MOD security requirements, defence standards and accreditation ...

hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities and security information and event management (SIEM)Lead security technology evaluation and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and operational governanceDrive technical … application securityStrong understanding of threat models, attack vectors and defence-in-depth strategiesProficiency in cloud security (AWS, Azure security, or equivalent)Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.)Understanding of cryptography, encryption and security protocolsFamiliarity with MOD security requirements, Classification Guides and defence standardsKnowledge of compliance frameworks ...

Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody, and technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder ...

professional services experience Understanding of SOC operations and incident response (essential) Knowledge of Microsoft Defender and/or Microsoft Sentinel (essential) Experience with SIEM, XDR, EDR, SOAR or Threat Intelligence platforms Strong technical presentation skills Ability to engage both technical and business stakeholders What's On Offer ...

maintaining, configuring and continually improving the security controls and services that underpin our technology environment. This is a hands-on role covering endpoint security, SIEM, vulnerability management, identity and access, cloud and network security. We welcome engineers from SOC, infrastructure or cloud backgrounds who are curious and collaborative. #J ...

mature SOC Knowledge of Service Management tools, such as: CRM, Salesforce, Confluence, Power apps, Microsoft 365Solid understanding of cyber security concepts, including SIEM, EDR, XDRStrong team playerAbility to work under pressure, handling escalations calmly and competentlyAbility to use initiative and work independentlyOrganised and professional with the ability to multi-taskExcellent ...

service documentation and reports. Experience working around cyber security services or SOC environments would be particularly useful, with an understanding of technologies such as SIEM, EDR or XDR beneficial. Experience with tools such as Microsoft 365, Salesforce, Confluence or Power Platform would also be advantageous. About ...

EngineerAs a Senior SOC Engineer at Nomios, you'll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection … intelligent workflows. You’ll also lead customer onboarding in collaboration with SOC Operations, ensuring secure, efficient deployments aligned with our model. Working directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and ...

leaders · Experienced at working on bids and large or complex changes · Excellent understanding of a variety of networks and routing protocols · Network management or SIEM designs, tooling or support This contract is based on-site in Baskingstoke, some travel may be required. This is a great opportunity for an experienced ...

plans for the Palo Alto Networks portfolio, ensuring Nomios has a clear commercial approach across areas such as network security, Cortex, XSIAM, XDR, SASE, SIEM, EDR, AI security and OT security.Increase the attachment of Nomios managed and professional services to Palo Alto Networks solutions, including relevant managed NOC, managed SASE ...

plans for the Palo Alto Networks portfolio, ensuring Nomios has a clear commercial approach across areas such as network security, Cortex, XSIAM, XDR, SASE, SIEM, EDR, AI security and OT security. Increase the attachment of Nomios managed and professional services to Palo Alto Networks solutions, including relevant managed NOC, managed ...