22 of 22 Permanent SIEM Jobs in Scotland

learning.Minimum qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

Senior SOC Engineer will play a key role in building and optimising detection and response strategies, ensuring robust protection against evolving threats. Key Responsibilities SIEM Engineering & Management Deploy, configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise analytical … threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain. Translate threat models into actionable detection use cases and SIEM rules. Prioritise detection engineering based on business risk and impact. Reporting & Collaboration Produce reports and dashboards to communicate security posture and incident trends. Partner with ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

role in building and optimising detection and response strategies, ensuring robust protection against evolving threats.Key ResponsibilitiesSIEM Engineering & ManagementDeploy, configure, and maintain the QRadar SIEM platform.Onboard and normalise log sources across on-premises and cloud environments.Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis.Playbook Development & AutomationDesign and … DevelopmentLead threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain.Translate threat models into actionable detection use cases and SIEM rules.Prioritise detection engineering based on business risk and impact.Reporting & CollaborationProduce reports and dashboards to communicate security posture and incident trends.Partner with IT, DevOps, and compliance ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...

and partnering with infrastructure and engineering teams to implement them. Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms. Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities. Experience leading or materially contributing ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

ability (Python, Bash, or similar)Nice to haveBGP, FlowSpec, and traffic engineering knowledgeNetFlow/sFlow analysisIDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)SIEM experience (Splunk)Linux proficiencyVirtualisation (KVM, ESXi)Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIHBright Purple is an equal opportunities employer ...

IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have:Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead and work closely with the SOC engineers … and evidence them for client audits (ISO 27001, Cyber Essentials Plus). Security tooling & engineering Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security. Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads. Own tooling health: versioncurrency, coverage ...

work. This is an exciting opportunity for a hands-on Splunk professional with strong Unix administration skills and a SecDevOps mindset to support ongoing SIEM operations, upgrades, migrations and service improvements. The successful candidate will provide end-to-end support for the Splunk platform, ensuring optimal system health, performance and … security while contributing to automation and operational efficiencies. Key Responsibilities Provide end-to-end administration and support of the Splunk SIEM platform. Conduct Splunk health checks and performance monitoring across the environment. Support planned migrations, upgrades and platform enhancement activities. Create, maintain and optimise Splunk alerts, dashboards and reports. Produce ...

time permanentposition, based in Glasgow with hybrid working.Main responsibilities include:Oversee and enhance monitoring ofsecurity alerts and events using advanced security information andevent management (SIEM) toolsLead the analysis of security logsand alerts to identify potential security incidentsPerform and supervise comprehensiveanalysis of security logs, network traffic, and data to detect andrespond … successful candidate will have:Relevant Cyber Security and/or IT experienceExperience in metric reporting andKPI/SLA managementExperience with securitytechnologies such as firewalls, SIEM, DLP and endpoint protectionExperience working with Jira, AzureDevOps, ITSM tools such as Cherwell and ServiceNow and the MSOffice suiteExcellent communication skills,both verbal and written ...

and external partners (e.g. SOCaaS providers), and running post‐incident reviews and tabletop exercises. Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001/27017/… post‐incident review. Working knowledge of SOC 2 and the ISO 27000 series. Comfortable evaluating and operating security tooling such as EDR, DLP, or SIEM platforms. A strong cross‐functional operator, comfortable bridging IT, Security, Engineering, and GTM teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks ...