1 to 25 of 176 Permanent SIEM Jobs in London

efficiency and reduce manual effort. Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. ...

Infrastructure as Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience in complex enterprise or multi‐cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. ...

outsourced SOC to ensure rapid detection, escalation, and resolution of security alerts and major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

and workstation estates. Experience with vulnerability-management and compliance frameworks such as CIS, NIST or DISA STIG. Experience integrating Tanium with ServiceNow, ITSM, CMDB, SIEM, identity or reporting platforms. Experience working in operational technology, manufacturing, healthcare, public-sector, defence or other highly controlled environments. Understanding of virtualisation, VDI, server-build ...

secure-by-design principles. Cloud, network, identity, application and OT security. Security operations, threat detection, incident response and cyber resilience. Modern security technologies including SIEM, EDR, XDR, SOAR and vulnerability management platforms. Industry frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOX, GDPR and NIS2. What will help ...

Show more Qualifications Technical Expertise: Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands‐on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

portfolio – encompassing the strategic platforms and capabilities that GCS operates on behalf of the Group, including (but not limited to) identity and access management, SIEM/SOAR, endpoint protection, cloud security, network security, and OT security. Provide architectural input to the GCS investment planning cycle, ensuring technology decisions are grounded ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

senior security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

senior security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments ...

Show more Qualifications Technical Expertise: Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources ...

Design, implement, and maintain security controls across AWS environments. Configure, manage, and optimise AWS GuardDuty, including alert tuning, findings triage workflows, and integrations with SIEM and incident response processes. Lead cloud security monitoring, detection engineering, and preventative control design. Work closely with the Cyber Security Analyst on incident response, providing ...

them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platforms Act as the escalation point for security‐related incidents across 2nd and 3rd line, providing expert ...

8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q‐Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q‐Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

point of contact Develop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risks Identify, implement, and automate cybersecurity measures and best practices Coordinating incident response across the organization ...

and Cyber Security: + Defence in Depth model. + Network defence, IDS and DMZ + Network protocols and firewall standards + Detective monitoring – SIEM + Vulnerability Management + Access and Privileged Access Management* Experienced in writing and maintaining IT documents, such as standards and procedures.* Demonstrates an understanding of strategic ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non‐technical stakeholders Experience influencing senior leadership ...

control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert quality, escalation paths and response times ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

client Endpoints and Servers. Experience implementing an Endpoint Detection system (Sentinel One) on legacy operating systems not supported by MS Defender. Experience upgrading existing SIEM capabilities to handle more data sources and advanced analytics, and experience implementing a Managed Detect Response Service. Experience leading the end-to-end technical delivery ...

remediation actions Security project experience Excellent problem-solving and communication skills Ability to work independently and proactively improve security operations Desirable Skills Experience with SIEM technologies Familiarity with vulnerability management and patching processes Knowledge of Microsoft 365 security technologies Security certifications such as Security+ ...