1 to 25 of 381 Permanent SIEM Jobs in the UK excluding London

/IEC 27001 Information Security Managemento NISR Regulations and ONR SyAPso Network security principles of IT systems Hands-on experience with SIEM tools (e.g. Splunk, Sentinel), endpoint protection, and vulnerability management systems. Understanding of incident response, digital forensics, and cyber threat intelligence processes. Security certifications such as CISSP, CISM, CompTIA ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

Azure, or Google Cloud. Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls. Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools. Experience with Linux administration, system hardening, patch management, and configuration management. Experience investigating security incidents, reviewing ...

including investigation, containment, eradication, recovery and post-incident analysis. Investigate suspicious activity across endpoints, networks, identities, applications and cloud environments to identify potential security compromises. Utilise SIEM technologies such as Microsoft Sentinel, Splunk or QRadar to correlate security events, investigate threats and identify indicators of compromise. Analyse security logs, authentication … potential security risks. Work closely with Security Engineering, Infrastructure and wider IT teams to coordinate effective incident response and remediation activities. Develop, refine and optimise SIEM detection rules, alerting logic and security monitoring use cases to improve detection capabilities and reduce false positives. Contribute to the development and continuous improvement ...

team, alongside a strong understanding of cyber security technologies and infrastructure. Ideally, you'll bring: Experience implementing or managing Azure security technologies. Knowledge of SIEM, Firewalls, endpoint protection, vulnerability management and incident response. A solid understanding of security risk, ISO 27001 and IT service management. Strong leadership, analytical and problem ...

something you automated, what it replaced, and what it saved. Security control operation. Operating and improving security controls across areas such as endpoint protection, SIEM, vulnerability management, identity and access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

secure remote access, and cybersecurity risk and vulnerability management. Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response. Strong understanding of industrial protocol security and OT security best practices, including secure remote access architectures ...

Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...

respond to incidents and strengthen security across the organisations systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. ...