2 of 2 Permanent SIEM Jobs in Lancashire

understand and proactively manage risk across the technology estate at both the national and force level. Key Responsibilities Development, maintenance, and deployment of SIEM detection rules for complex technical environments. Working alongside wider NMC functions, maintain knowledge of the threat landscape and TTPs employed by threat actors. Work across wider … Optimization of log collection to align with detection requirements. Maintain documentation for detection rules to be used by analysts. Scoping, testing and implementing new SIEM data connectors. Working with wider NMC teams, contributing to Continual Service Improvement and innovations. Support with the creation of automation and analyst playbooks What ...

Responsibilities Act as the escalation point for all security incidents Report incidents and SOC performance metrics to SOC Leadership Define, specify, and agree SIEM detection content and use-case development Liaise with 3rd party provider on configuration changes, enhancements, and operational alignment Support the establishment and scaling … capabilities against defined quality and compliance criteria Required experience Strong experience in SOC operations within government, defence, or critical national infrastructure Good understanding of SIEM platforms, detection engineering, and alert lifecycle management Experience working with third-party or managed SOC providers Familiarity with ITSM tooling, ideally ServiceNow Current DV clearance ...