19 of 19 Permanent SIEM Jobs in the Midlands

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing ...

bringYou'll have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access and Privileged Access.Data Loss Prevention (DLP) technologies and policy management.Vulnerability Management and security hardening.Security ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

Infrastructure Engineer/Analyst ( Hybrid/Chesterfield) – 12 Month FTC. VMWare, AD, Exchange, Windows Server, Azure, O365, Siem tooling, PowerShell, Networking, Meraki, Firewalls Infrastructure Engineer/Analyst: Do you have a background in supporting business or technical applications? Do you have a broad technical skill set but looking ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

Auto enrolment pension scheme, Life Assurance, Westfield Health Cash plan & Lifestyle benefits – Discount on selected stores. Responsibilities include: Develop content for a complex and growing SIEM infrastructure. This includes use cases, dashboards, active channels, reports, rules, filters, trends and active lab sessions. Use SIEM in the daily operational work, which … Advanced industry-standard SOC Security qualifications (SANS, ISC2, etc.). Proven Tier 3 SOC Engineering experience (2 years) Demonstrable experience working with SIEM technology and SIEM engineering (including tool configuration), i.e. within an enterprise SOC. Experience in the creation of use cases, analytics and playbooks. Experience with automation languages, such ...

supporting customers through security events, and helping to continuously improve our security operations capability. Key responsibilities include: Monitoring and investigating alerts generated by our SIEM platforms Performing advanced threat triage, analysis and response activities Supporting incident response investigations and root cause analysis Acting as an escalation point and mentor … Security Operations Centre or similar cyber security role Experience investigating and responding to cyber security incidents within agreed SLAs Hands-on experience with SIEM, EDR and email security technologies Experience mentoring or supporting analysts at different stages of their careers A strong understanding of cyber threats, attack techniques and compromise ...

positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team … cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security monitoring technologies.Strong ...

bringYou'll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. Vulnerability ...

determine whether it represents a confirmed security incident. This includes performing detailed analysis to understand root cause, scope, impact, and attacker behaviour using SIEM platforms and supporting telemetry. You will coordinate and support incident response activities in line with defined SOC and customer processes, assisting with containment, eradication, and recovery … continual service improvement by identifying recurring issues and proposing corrective actions. What experience you'll bring: You will have hands‐on experience working with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, and a strong understanding of incident response workflows and escalation management. You will be comfortable analysing security ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

Insider Risk Director. You will partner with DLP Engineering, review policies, develop detection use cases, and deliver dashboards and reporting using DLP, SIEM, and UEBA. Strong governance and cross-functional collaboration are essential. #J-18808-Ljbffr ...

traffic and security alerts to identify potential threats Supporting investigations into security incidents, gathering evidence and documenting findings Using Security Information and Event Management (SIEM) tools to detect and analyse suspicious activities Collaborating with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update ...

across areas including: Investigating and responding to medium and high-severity security incidents Performing detailed analysis of alerts, logs and suspicious activity Working with SIEM, EDR and wider security tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators … experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with analysts ...

Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Support Project Managers with the planning and execution of OT cyber security aspects of projects to ensure they meet the time, cost and quality required … Host Intrusion Detection (HIDS)Malware detection and protection i.e. Endpoint Detection and Response (EDR)Network Intrusion Detection (IDS)Network monitoringSecurity Information and Event Management (SIEM)Practitioner of the ISA/IEC 62443 suite of standards, with particular focus on -2-1, 2-4, 3-2 and 3-3.Experience working ...

opportunities to improve DLP coverage and strengthen data protection controls. Develop and enhance insider risk detection use cases, analytics, dashboards, and reporting using DLP, SIEM, UEBA, and related technologies. Support insider risk investigations by providing DLP subject matter expertise, policy guidance, reporting, and technical analysis. Develop program metrics, documentation, and … equivalent experience. Experience in data loss prevention, insider risk, cybersecurity or a related security discipline. Experience working with DLP technologies and familiarity with SIEM, UEBA, or similar security platforms. Knowledge of insider risk, data protection, cybersecurity governance, and risk management practices. Experience evaluating business risk and applying governance principles ...

Group is seeking a SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team. Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration ...