1 to 25 of 91 Permanent SIEM Jobs in the North of England

/IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with SIEM tools (e.g. Splunk, Sentinel), endpoint protection, and vulnerability management systems. Understanding of incident response, digital forensics, and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA ...

deliver staff training and guidance Provide/contribute Management Information on Information Security in the form of MI Pack. Security Operations Monitor security systems (SIEM, endpoint protection, email security, firewalls) and respond to alerts Investigate and respond to security incidents, including root-cause analysis and remediation Manage vulnerability scanning, penetration ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions. Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms. Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies ...

producing high standards of work on schedule in a pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

and analysis Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis Understanding of regulatory stipulations regarding security incidents Experience with SIEM technologies (i.e. Splunk, Sentinel) Understanding of both Windows and Unix/Linux based operating systems Ideally, you’ll also Candidates must hold or be willing ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing, SIEM, IDS Experience with vulnerability management tools and processes (Rapid 7, Wiz etc.) Experience of operating with and to the ISO27001 standard Cloud computing cyber security assurance ...

security risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and … Engineer, Cloud Security Engineer, Infrastructure Security Engineer, or similar role. Strong understanding of modern cyber security principles and security architecture. Hands-on experience with: SIEM and Security Monitoring platforms Endpoint Detection and Response (EDR) Vulnerability Management solutions Identity and Access Management (IAM) Network Security technologies Web Application Firewalls (WAF) Security ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

essential Experience in any of the following would strengthen your application: Terraform or cloud security automation. Cloud architecture or security design reviews. SIEM and cloud security monitoring. Security assurance or compliance. Highly regulated or security-sensitive environments. Cyber Essentials or ISO 27001 environments. AWS or broader security certifications. ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. How you'll work Technical expertise ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking knowledge of identity and access systems and common attack paths, including credential theft, privilege escalation, and session ...

response tools and platforms. Experience with managing and operating EDR platforms i.e. Crowdstrike, SentinelOne, or Microsoft Defender for Endpoint. Experience developing and using a SIEM platform e.g. QRadar or Azure Sentinel. Strong knowledge of cybersecurity concepts, tools, and techniques. Ability to work well under pressure in high-stress situations. Strong ...