11 of 11 Permanent SIEM Jobs in South Wales

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

Microsoft Defender Suite (Defender for Endpoint, Defender for Identity, and Defender for Cloud), alongside Microsoft Purview for information protection and Microsoft Sentinel for SIEM and SOC capabilities. Strong knowledge and experience of establishing secure, well-governed Azure environments, implementing baseline policies, controls, and governance structures. Strong technical knowledge of Azure ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme. You will provide end-to-end Splunk admin, ensure health and security, deploy ...

Around 2-3+ years of commercial cyber security experience Hands on experience within Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra … have a genuine say in how the organisation develops its cyber security capability. If you have experience across Microsoft security, Azure, Sentinel, SOC/SIEM or Identity & Access Management and are looking for the next step in your career, we would like to hear from you. Are you interested ...

work. This is an exciting opportunity for a hands-on Splunk professional with strong Unix administration skills and a SecDevOps mindset to support ongoing SIEM operations, upgrades, migrations and service improvements. The successful candidate will provide end-to-end support for the Splunk platform, ensuring optimal system health, performance and … security while contributing to automation and operational efficiencies. Key Responsibilities Provide end-to-end administration and support of the Splunk SIEM platform. Conduct Splunk health checks and performance monitoring across the environment. Support planned migrations, upgrades and platform enhancement activities. Create, maintain and optimise Splunk alerts, dashboards and reports. Produce ...

within a live 24/7 operational environment. * Support incident, problem and change management activities, working closely with specialist engineering teams. * Use monitoring and SIEM platforms to proactively identify issues, reduce operational risk and improve service resilience. * Develop and utilise automation and scripting solutions using technologies such as PowerShell, Python … and/or Security Operations Centre (SOC) environments. * Proven incident, problem and change management experience using enterprise ITSM tooling. * Experience using monitoring, logging and SIEM tools to support operational services. * Strong scripting and automation skills using PowerShell, Python, Shell scripting or similar technologies. * Experience supporting cloud identity or privileged access ...