25 of 25 Permanent SIEM Jobs in the South East

Azure, AWS or Google Cloud. Strong knowledge of identity and access management, MFA, SSO and privileged access controls. Experience with security tools including SIEM, EDR and vulnerability management platforms. Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. If you have all of the experience ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. It is the chance to work very ...

privilege . Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

controls, native utilities and investigative artefacts. Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

meet business, compliance, and risk mitigation requirements, ensuring controls are effective, measurable, and operationally sustainable. Implement and maintain detection and response capabilities through SIEM integration with security controls and IT systems, with a focus on reducing time to detect and time to remediate through improved pre incident engineering. Participation … 24x7 on call support rota, responding to SIEM health alerts and restoring log ingestion where required. Manage use cases, perform data enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security ...

within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security events using enterprise monitoring techniques. Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques. Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques. Experience analysing information … environment. Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalent Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing to the development ...

within a SOC or comparable cyber security operations environment. Experience leading security monitoring activities and supervising analysts during live operational service. Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation. Experience investigating complex cyber security events and determining appropriate escalation paths. Good understanding of cyber … environment. Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent. Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing ...

Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. Key Responsibilities: Design and deliver detection rulesets across SIEM and XDR platforms Develop and tune detection logic using KQL or equivalent query languages Design detection use cases aligned to MITRE ATT&CK and real … detection approaches Identify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing ...

implement information security policies, controls and solutions. Monitor security events, risks and vulnerabilities and investigate incidents. Design, build, test and troubleshoot security solutions including SIEM and IDS/IPS. Manage vulnerability testing and recommend improvements. Provide cybersecurity expertise across network design and management. Maintain security policies, procedures and technical documentation. … teams through knowledge sharing and training. Requirements 5+ years' multi-network experience with hands-on secure network design and management. Experience with Cisco, Juniper, SIEM, IDS/IPS, penetration testing and forensic tools. Knowledge of ISO27001, GDPR, ITIL and vulnerability management. Strong communication and customer-facing skills. SC Clearance ...

and accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and … Agile, Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability ...

nationality requirements where these are necessary to meet UK Government or contractual security obligations. What Youll Be Doing Monitoring and investigating alerts from SIEM tools within a 24/7/365 SOC environment. Responding to and triaging security incidents, escalating where appropriate. Acting as a senior point of contact … environment. Confidence analysing logs and identifying suspicious or malicious behaviour. Familiarity with threat actors, TTPs, and modern detection techniques. Experience using Elastic Stack and SIEM technologies. Knowledge of OSINT techniques and how they can support investigations. Effective communication skills, with the ability to explain technical issues clearly to different audiences. ...

Lead annual penetration testing and security awareness programmes Support Cyber Essentials, Cyber Essentials Plus, ISO 27001 and similar frameworks Improve security monitoring, logging and SIEM capabilities Support business continuity, disaster recovery and acquisition due diligence Produce clear security reporting for IT and business leadership The technology You’ll work across … modern security environment including: Microsoft Azure, Intune, Okta, Zscaler, SentinelOne, Mimecast, Tenable, KnowBe4, SD-WAN, SIEM About you We’re looking for an experienced IT/cyber security professional with a strong background in security governance, risk and compliance, ideally within a multi-site or international environment. You’ll bring ...

looking for? Commercial experience working within a SOC. Practical experience investigating security alerts and responding to incidents. Hands-on experience with a SIEM platform and familiarity with endpoint security tools. Some exposure to Microsoft 365 environments. Excellent written and verbal communication, including the ability to explain technical findings clearly … Sentinel and Microsoft Defender XDR, but experience with these specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat ...

Required - Extensive IAM experience including Joiner-Mover-Leaver process design and improvement. Strong understand of Privileged Access Management and Security Information and Event Management (SIEM) platforms. Experience of logging and monitoring solutions Further technical skills to include - SQL, incident management, DataDog (or similar), Cloud environments Stakeholder management across Technology, Risk ...

Required - Extensive IAM experience including Joiner-Mover-Leaver process design and improvement. Strong understand of Privileged Access Management and Security Information and Event Management (SIEM) platforms. Experience of logging and monitoring solutions Further technical skills to include - SQL, incident management, DataDog (or similar), Cloud environments Stakeholder management across Technology, Risk ...