1 to 25 of 379 Permanent SIEM Jobs in London

and enable a "Defend as one" strategy across the health and care system.The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment.Main duties of the jobThe Security Advisor SIEM Engineering is responsible for:Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated.Maintaining the SIEM data feed ...

enable a "Defend as one" strategy across the health and care system. The Security Advisor SIEM Engineering provides new and enhanced SIEM (Security Information and Event Management) system and tooling capability for the CSOC, including deploying feeds from data sources, building cyber detection capability, improving the automation of security monitoring … and managing the SIEM environment. Main duties of the job The Security Advisor SIEM Engineering is responsible for: Deploying feeds from data sources into NHS England's SIEM system and ensuring compliance with the SIEM's data modelling, for both newly developed services and existing services being updated. Maintaining ...

Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware ...

strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES• Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

communicate findings clearly to stakeholders.Excellent written and verbal communication skills.Experience working within enterprise-scale or highly regulated environments.Desirable ExperienceSecurity Operations Centre (SOC) experience.Experience with SIEM platforms and security monitoring tools.Knowledge of cloud security and hybrid infrastructure environments.Exposure to vulnerability management and threat hunting activities.Experience supporting government, defence, or public sector ...

experienceGood knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)RoleThrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types.Developing security ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Familiarity with MITRE ATT&CKFamiliarity with ITILWorkplace type: About NTT DATANTT DATA is a $30+ billion business and technology services leader, serving ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … tech company. The Security Engineer (SIEM/XDR) role is Hybrid, in the London office 1-2 times a month . You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable ...

toxic combinations and non-human identity sprawl Ensure strong monitoring, alerting, and telemetry for IAM services and integrations, and partner with SecOps where needed (SIEM, logging, anomaly detection). Drive reduction in repeat incidents through disciplined root cause analysis, prevention, and engineering partnership. Build strong partnerships across Security, Infrastructure ...

adapt, and operate red team infrastructure, command-and-control tooling, payloads, and scripts during authorised client engagementsApply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring can affect red team operationsSupport purple team engagements by executing agreed TTPs, working with client security ...

systems security and Group Policy management, Network security: firewalls, VPNs, network segmentation, routing, Endpoint Detection & Response (EDR) tools (CrowdStrike, Microsoft Defender for Endpoint, etc.), SIEM platforms (Splunk, ELK Stack, Datadog), Identity & Access Management (IAM) concepts and tools (Active Directory, OKTA, etc.)You have strong experience in Information Security, Security Assurance ...

response and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities ...

ability to interpret events and drive effective remediation. Working knowledge with security technologies and controls (e.g., Perimeter/edge security controls, data protection controls, SIEM/monitoring controls) and cloud security. Exposure to operational resilience, business continuity (ISO 22301) and IT disaster recovery, with awareness of FCA/PRA operational ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

equivalent experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Participate in pre-sales tasks and perform ongoing support of delivery collateral.Familiarity with MITRE ATT&CKFamiliarity with ITILCHARACTERISTICSStrategic mindset, able to balance business ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

responsibilities, with opportunities for mentoring junior staff and engaging with senior stakeholders. Key Responsibilities Detection Engineering: Develop, maintain, and enhance security detection content for SIEM platforms (primarily Splunk) to identify threats across cloud, endpoints, and networks Identify gaps in detection coverage, log ingestion, and alerting, aligned with business risks and ...

and advisory responsibilities, with opportunities for mentoring junior staff and engaging with senior stakeholders.Key ResponsibilitiesDetection Engineering: Develop, maintain, and enhance security detection content for SIEM platforms (primarily Splunk) to identify threats across cloud, endpoints, and networksIdentify gaps in detection coverage, log ingestion, and alerting, aligned with business risks and threat ...

experienced technical leader, capable of providing direction, guidance and technical authority across security operations and incident response activities. Have proven experience working with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, Microsoft Defender and Trend Micro. Demonstrate strong cyber investigation skills, applying evidence-led analysis, Digital Forensics and Incident ...

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...