1 to 25 of 110 Permanent SIEM Jobs in London

development teams to promote secure development practices.Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation.Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response.Understanding of cyber incident response, including triage, investigation, containment and recovery.Knowledge of Cyber Essentials, Cyber Essentials Plus and ...

Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS ...

Essential Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment. Hands-on experience investigating security alerts and incidents using SIEM and EDR/XDR technologies. Experience analysing Windows and Linux host artefacts, authentication activity, security logs, network traffic and packet captures. Working knowledge of incident ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and ...

cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments. Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms. Develop containment, eradication, and remediation strategies aligned to business risk. Produce executive briefings, technical reports, board-ready updates, and ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

configuration management and cloud service protection. Identity and access management: Directory services, multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security ...

qualifications5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

incidents and strengthen security across the organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

across the organisations systems and networks. Full training will be provided. Your responsibilities will include: Monitoring security alerts and helping investigate suspicious activity using SIEM and endpoint protection tools, with guidance from senior analysts. Assisting with incident response, from initial investigation through to containment and recovery. Helping review phishing reports ...

Intelligence and Red/Blue team) Experience in managing and running Threat hunting initiatives including developing Threat intelligence governance framework. In-depth experience with SIEM tools with a strategic oversight on appropriate use case methodologies. Implementation of robust security monitoring use cases and Threat hunting capabilities. Incident Response experience with ...

security considerations. Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications ...

security considerations. Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...

delivery (domestic and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...