1 to 25 of 68 Permanent SIEM Jobs in the South West

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development - a T-shaped specialism, seeking and acting on feedback, and sharing learning ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

enterprise/defence environments Desirable: VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar) Data diode/one-way transfer architectures Integration with security tooling (SOC, SIEM, monitoring platforms) Performance and throughput optimisation for secure data transfer systems Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Hands ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

used to address problems and realise opportuni ties.Strong understanding of cloud networking and architecture principles, Identity and access management models, security monitoring and SIEM integra tion.Proven hands-on experience of at least two cloud environments inclu din g:AWSMicrosoft AzureVMware Cloud Found ationGoogle CloudExperience securing multi-cloud or hybrid environments ...

passionate about identifying sophisticated threats and improving security operations. You'll ideally have experience with: Threat Hunting Detection Engineering Security Operations Centres (SOC) SIEM technologies MITRE ATT&CK Framework Threat Intelligence Detection rule creation and tuning Security telemetry analysis Incident detection and investigation Writing detection use cases and playbooks Developing ...

knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting capabilities. Understanding of vulnerability management, penetration testing and security remediation. Experience developing cyber security KPIs, KRIs and management reporting. Strong people ...

Technology (or related discipline) or significant equivalent industry experience. * Advanced expertise across at least three security technologies or disciplines, including PAM, ADFS, Firewalls, Entra, SIEM, EDR/XDR, CTEM, WAF/DDoS, PKI, SASE, IDS/IPS, security assurance frameworks, incident response or cryptographic systems. * Advanced experience assessing security controls ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will be a satellite site in Hampshire, with occasional travel ...

understanding of; Networking (TCP/IP, firewalls, segmentation), Operating systems (Windows/Linux), Identity and access management concepts, Cloud Fundamentals. Exposure to security tooling (SIEM, IDS/IPS, EDR) Strong understanding of core security principles such as: Defence in depth, Least privilege, Zero trust concepts An understanding of designing and ...

networking integration (vSphere, vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...