1 to 25 of 744 Permanent SIEM Jobs in the UK

Entra ID security concepts. Experience investigating security alerts and suspicious activity. Understanding of endpoint security, malware protection and EDR/XDR technologies. Familiarity with SIEM technologies, log analysis and security monitoring. Understanding of vulnerability management and remediation processes. Good knowledge of fundamental security concepts including least privilege, MFA, network segmentation ...

Experience with vulnerability assessment and management tools, preferably Qualys. Experience with firewall and network-security auditing tools, preferably Nipper Studio. Experience supporting security operations, SIEM, threat intelligence or incident investigations. Experience with Microsoft Intune, Entra ID, Azure or AWS security. Relevant certifications, such as Microsoft SC-900 or CompTIA Security+. ...

Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Control 7. EDR/XDR Integration: Expert‐level deployment of tools (e.g., CrowdStrike, SentinelOne) to achieve full visibility across endpoints (CIS Control 6). SIEM/SOAR: Experience designing log aggregation and automated response playbooks in platforms like Splunk, Microsoft Sentinel, or Google Chronicle to satisfy monitoring requirements (CIS Control ...

/IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with SIEM tools (e.g. Splunk, Sentinel), endpoint protection, and vulnerability management systems. Understanding of incident response, digital forensics, and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

Competitive Advantage*** Experience within FMCG, manufacturing, supply chain, or consumer goods environments.* Hands-on experience with Microsoft Azure security technologies.* Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms.* Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications ...

Good knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

Experience reporting to Board‐level stakeholders. Technical Expertise Security frameworks: ISO 27001, NIST CSF, COBIT Cloud security (AWS, Azure, GCP) Identity & Access Management (IAM) SIEM, SOAR, EDR/XDR platforms Threat intelligence and vulnerability management Data protection technologies Secure SDLC and DevSecOps practices Strategic thinker with strong commercial awareness Excellent ...

Azure, or Google Cloud. Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls. Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools. Experience with Linux administration, system hardening, patch management, and configuration management. Experience investigating security incidents, reviewing ...

Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards. Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data-loss prevention, certificate management, or network-access control. Experience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems. ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code.Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale).Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access.Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001.Qualifications and certificationsYou will ...

and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code. Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale). Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access. Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001. ...

including investigation, containment, eradication, recovery and post-incident analysis. Investigate suspicious activity across endpoints, networks, identities, applications and cloud environments to identify potential security compromises. Utilise SIEM technologies such as Microsoft Sentinel, Splunk or QRadar to correlate security events, investigate threats and identify indicators of compromise. Analyse security logs, authentication … potential security risks. Work closely with Security Engineering, Infrastructure and wider IT teams to coordinate effective incident response and remediation activities. Develop, refine and optimise SIEM detection rules, alerting logic and security monitoring use cases to improve detection capabilities and reduce false positives. Contribute to the development and continuous improvement ...

team, alongside a strong understanding of cyber security technologies and infrastructure. Ideally, you'll bring: Experience implementing or managing Azure security technologies. Knowledge of SIEM, Firewalls, endpoint protection, vulnerability management and incident response. A solid understanding of security risk, ISO 27001 and IT service management. Strong leadership, analytical and problem ...

something you automated, what it replaced, and what it saved. Security control operation. Operating and improving security controls across areas such as endpoint protection, SIEM, vulnerability management, identity and access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures ...

people leadership experience, including coaching, mentoring and developing high-performing teams. Demonstrable knowledge of monitoring frameworks, including MITRE ATT&CK. Demonstrable experience with automating SIEM technologies, ideally Microsoft Sentinel. Demonstrable capability in detection engineering (XDR), threat hunting, use case development and security monitoring and response optimisation. Demonstrable understanding of Microsoft ...