1 to 25 of 608 Permanent SIEM Jobs in the UK

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware ...

Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations. Infrastructure Hardening: Enforce secure baselines across virtualized environments ...

development teams to promote secure development practices.Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation.Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response.Understanding of cyber incident response, including triage, investigation, containment and recovery.Knowledge of Cyber Essentials, Cyber Essentials Plus and ...

gapped, or highly regulated IT environments.Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable.Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutionsDemonstrable experience applying Secure by Design principles in complex IT systems and programmes.Experience conducting security architecture reviews, threat modelling ...

strengthen our security posture and drive business cyber maturity. Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES• Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

communicate findings clearly to stakeholders.Excellent written and verbal communication skills.Experience working within enterprise-scale or highly regulated environments.Desirable ExperienceSecurity Operations Centre (SOC) experience.Experience with SIEM platforms and security monitoring tools.Knowledge of cloud security and hybrid infrastructure environments.Exposure to vulnerability management and threat hunting activities.Experience supporting government, defence, or public sector ...

stakeholders. Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable ExperienceSecurity Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

experienceGood knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Role Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types.Developing ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Google Cloud, alongside a strong understanding of identity and access management, MFA, SSO and privileged access controls. Experience with security technologies including SIEM, EDR and vulnerability management tools is highly desirable, as is hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background ...

improve operational efficiency and reduce manual effort.Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and ...

adapt, and operate red team infrastructure, command-and-control tooling, payloads, and scripts during authorised client engagementsApply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring can affect red team operationsSupport purple team engagements by executing agreed TTPs, working with client security ...

experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Familiarity with MITRE ATT&CKFamiliarity with ITILWorkplace type: About NTT DATANTT DATA is a $30+ billion business and technology services leader, serving ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … tech company. The Security Engineer (SIEM/XDR) role is Hybrid, in the London office 1-2 times a month . You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable ...

Bash, BatchTechnologies: Experience with Host based firewall, File Integrity Management, Data Protection, Vulnerability Management, Attack Surface Management, IT AutomationCompliance: CIS Benchmarks, STIGs, PCI, HIPPADatabase: SIEM, MSSQL, Splunk, LogScaleIdentity: Identity, Active Directory, Azure-AD, SSOCloud: AWS, Azure, and GCP#LI-GT1#LI-JP2#LI-RemoteBenefits of Working at CrowdStrike: Market leader in compensation and ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

Azure, AWS or Google Cloud. Strong knowledge of identity and access management, MFA, SSO and privileged access controls. Experience with security tools including SIEM, EDR and vulnerability management platforms. Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking ...

Google Cloud. Experience with identity and access management, including SSO, MFA, RBAC and privileged-access controls. Experience deploying and maintaining security technologies including SIEM, EDR, vulnerability-management, secrets-management and intrusion-detection tools. Experience with Linux administration, system hardening, patch management and configuration management. Experience investigating security incidents, reviewing logs ...

supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.Experience with Bash scripting, automation tools, and infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

response and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities ...

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

Azure, or Google Cloud.· Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls.· Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools.· Experience with Linux administration, system hardening, patch management, and configuration management.· Experience investigating security incidents, reviewing ...