1 to 25 of 87 Permanent SIEM Jobs in the South East

Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST ...

network segmentation VPN technologies Network monitoring and performance management Cloud networking and hybrid environments IDS/IPS technologies Secure network architecture principles Knowledge of SIEM, SOAR, endpoint security, vulnerability management, and threat intelligence platforms. Understanding of modern cyber threats, attack techniques, and defensive security controls. Desirable Qualifications ISO 27001 Lead ...

and security monitoring functions. Strong knowledge of cyber incident response, digital investigations, and security event management. Experience operating and managing security technologies such as SIEM, EDR, firewalls, IDS/IPS, web security gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents ...

security-related issues Overseeing security operations, incident response and vulnerability management Supporting secure Azure and AWS environments Managing and optimising security tooling including SIEM, EDR and related platforms Reviewing projects, infrastructure changes and technical designs from a security perspective Driving secure-by-design principles across technology initiatives Managing third-party ...

security policies, logging and monitoring, and integrating advanced solutions such as IDS/IPS, NAC, and network segmentation. Management & Monitoring: Proficient with SNMP, syslog, SIEM, and network automation, capacity planning and monitoring tools including introducing such tooling. Threat Landscape: Deep understanding of common networking attack vectors and defense-in-depth ...

remediation actions Security project experience Excellent problem-solving and communication skills Ability to work independently and proactively improve security operations Desirable Skills Experience with SIEM technologies Familiarity with vulnerability management and patching processes Knowledge of Microsoft 365 security technologies Security certifications such as Security+ ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

Requirements: 5+ years experience in cyber security engineering or a related security role. Previous consulting experience is essential. Strong knowledge of security technologies, including SIEM, EDR, IAM, vulnerability management, and cloud security. Experience implementing and managing security controls in enterprise environments. Strong understanding of cyber security frameworks, risk management, and ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

architectural documentation, support guides, and schematics. Your profile Hands-on engineering background with Cisco and Juniper platforms. Experience deploying and troubleshooting security toolsets including SIEM and IDS/IPS. Knowledge of penetration testing methodologies and computer forensic tools. Understanding of General Data Protection Regulation requirements. Background in telecommunications or maritime ...

VMware vSphere Windows Server Red Hat Enterprise Linux (RHEL) Active Directory DNS Group Policy (GPO) Remote Desktop Services (RDS) Security Trellix/McAfee technologies SIEM platforms Syslog reporting and integration Antivirus technologies TLS certificates and PKI concepts Secure gateway technologies Linux & Scripting Linux administration Shell scripting Regular Expressions (Regex) Firewall ...

and responding to cloud security threats, managing incidents end to end, and advising stakeholders on how to maintain a strong security posture Experience with SIEM tooling, ideally Microsoft Sentinel, along with a strong understanding of Zero Trust principles, modern authentication and secure baseline configuration, will be highly valuable ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

network segmentation projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models ...

Azure certifications * Experience supporting Linux and Mac environments * Knowledge of Hyper-V, VMware or other virtualisation platforms * Exposure to cyber security technologies including SIEM and MDR solutions * Experience working within ITIL or SLA-driven service environments * Knowledge of backup and disaster recovery solutions The Package Competitive salary (DOE) * Funded professional ...

identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage … range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. Produce ...

decisions bring to the overall deployment process. Infrastructure Defense & Monitoring: Oversee next-generation Palo Alto firewalls, intrusion prevention systems, and data encryption protocols. Monitor SIEM platforms and threat feeds to isolate, investigate, and remediate digital vulnerabilities. Collaboration & Mentorship: Partner closely with internal technical squads and coordinate with external vendor partners. ...

investigation, triage and resolution of security incidents, working alongside managed security service providers to ensure timely remediation Monitoring and managing enterprise security platforms, including EDR, SIEM, NDR, email security, firewalls and network access control solutions Owning and managing the organisation-wide patching schedule across servers, endpoints and business-critical applications … possess extensive technical knowledge across a broad range of security technologies, including enterprise firewalls, endpoint detection and response (EDR), security information and event management (SIEM), network detection and response (NDR), Secure Access Service Edge (SASE), network access control (NAC) and enterprise email security platforms. Candidates should have proven experience managing ...

across the following: Enterprise firewall management Network infrastructure (switches, wireless access points) Business email platforms Cloud-based email filtering Identity management platforms Security monitoring (SIEM, MDR) Enterprise password management Hosted VoIP telephony Backup and disaster recovery management PSA and RMM tooling Experience of PowerShell and automation Microsoft/Azure certifications ...

across the following: Enterprise firewall management Network infrastructure (switches, wireless access points) Business email platforms Cloud-based email filtering Identity management platforms Security monitoring (SIEM, MDR) Enterprise password management Hosted VoIP telephony Backup and disaster recovery management PSA and RMM tooling Experience of PowerShell and automation Microsoft/Azure certifications ...

deploying Nessus for vulnerability scanning and analysis. Candidates will also need a familiarity with: container security principles and tools, scripting and automation, and configuring SIEM tooling. Due to the nature of this role, candidates must be sole British nationals and currently hold SC clearance and be willing to go through ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...