1 to 25 of 436 Permanent SIEM Jobs in the UK

Infrastructure as Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience in complex enterprise or multi‐cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

highly regulated IT environments. Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable. Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews ...

understanding of cyber security principles across infrastructure, applications and cloud platforms Experience working with cloud technologies such as AWS, Azure or GCP Knowledge of SIEM technologies such as Splunk, Microsoft Sentinel, ELK or Cribl Experience with networking, firewalls and security within hybrid cloud environments Familiarity with Infrastructure as Code technologies ...

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST ...

and continuous improvement programmes. What we're looking for Security Engineering Expertise Strong hands-on experience in Security Operations and Security Engineering. Experience managing SIEM, EDR/XDR and cloud security technologies, ideally within Microsoft environments. Technical Knowledge Understanding of incident response, threat detection, vulnerability management and network security. Experience ...

and security monitoring functions. Strong knowledge of cyber incident response, digital investigations, and security event management. Experience operating and managing security technologies such as SIEM, EDR, firewalls, IDS/IPS, web security gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands‐on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

incident response, including monitoring and triaging alerts, and coordinating across teams. Understanding of analysis and forensics techniques on macOS, Windows, and Linux. Experience utilizing SIEM tools to perform log reviews. Experience in cloud architecture and security (AWS, GCP) and cloud‐based services. This role will be part of our EMEA ...

exposure to macOS and Linux is a plus. Solid understanding of network fundamentals, including TCP/IP, routing, switching, and traffic analysis. Experience with SIEM platforms and enterprise security data management; database querying skills are advantageous. Working knowledge of PowerShell and Python for automation and investigation support. Strong analytical, troubleshooting ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

and Cyber Security: + Defence in Depth model. + Network defence, IDS and DMZ + Network protocols and firewall standards + Detective monitoring – SIEM + Vulnerability Management + Access and Privileged Access Management* Experienced in writing and maintaining IT documents, such as standards and procedures.* Demonstrates an understanding of strategic ...

them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platforms Act as the escalation point for security‐related incidents across 2nd and 3rd line, providing expert ...

cyber security with leadership or ownership of security functions. Strong knowledge of network, application, cloud (AWS/Azure), and endpoint security. Handson experience with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

reference to recognised standards. Familiarity with tools used for continuous compliance monitoring, automated controls testing, or cloud security posture management (for example, CSPM tooling, SIEM platforms, or vulnerability management tools). Evidence of actively shaping your own development a T-shaped specialism, seeking and acting on feedback, and sharing learning ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

certification (e.g., CISSP, CISM, SANS) with ongoing professional development Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure). Experience with SIEM/SOAR, detection engineering or incident automation. Experience implementing IAM tooling and access governance (e.g., PAM, IGA). Experience commissioning security testing and remediation programmes ...

/Azure), and endpoint security. Ability to analyse vulnerabilities, threats, procedures and architectural design, producing reports and sharing intelligence. Hands-on experience with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls ...

assurance, including evidence gathering and remediation planning. Experience leading incident response, including major cyber events and multi-agency or cross-organisational coordination. Experience managing SIEM platforms, security monitoring or SOC environments. Experience developing and delivering cyber strategies, programmes and roadmaps. Strong track record of supplier assurance, contract cyber compliance and ...

Familiarity with federal compliance frameworks: FedRAMP, NIST, CMMC, IL3–IL5, HIPAA, PCI, ISO 27001. Experience with Azure security services such as WAF, Microsoft Sentinel (SIEM), and threat protection. Knowledge of ITSM/ITIL processes and operational best practices. Experience with Azure DevOps (ADO) and collaboration tools (Microsoft Teams, SharePoint). ...

implementing security controls, mitigating risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions Oversee ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end‐to‐end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills Strong hands‐on experience with Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR). Strong hands‐on experience with Threat Intelligence platforms (e.g. Recorded ...