2 of 2 Permanent SIEM Jobs in Nottingham

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering … and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder ...