12 of 12 Permanent SIEM Jobs in Watford

Lead SIEM Engineer Hybrid Hemel Hempstead or Farnborough (1–2 days a week on site) Must be eligible and willing to obtain DV clearance Are you ready to take the lead in shaping one of the most advanced SIEM environments in the UK defence sector? We're looking … Lead SIEM Engineer to join a growing SOC team supporting high-profile, mission-critical clients. You'll be the go-to expert for all things SIEM, driving how we detect, defend, and deliver across multiple secure projects. If you love taking ownership, working with cutting-edge tools, and leading ...

activities. Monitor security alerts and assist with investigating potential incidents. Help implement security best practices and policies to protect digital assets. Gain exposure to SIEM tools and security monitoring platforms. Assist with creating incident response documentation and security reports. Support compliance efforts and basic risk assessments aligned with industry standards. ...

security operations, including vulnerability management, access reviews, and incident response readiness. Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM). Work hands-on to perform internal security assessments or penetration testing. Manage relationships with external pentest providers, auditors, and assessors. Secure Development Lifecycle (SDLC) Partner ...

policies, and standards Own vulnerability management, security monitoring, and incident response Ensure compliance with NCSC, PSN, PCI-DSS, GDPR and other national frameworks Manage SIEM, Microsoft security tooling (Sentinel/Defender/E5), identity & access, firewalls, and endpoint protection Advise on secure design for projects and change governance Prepare annual ...

flows and identify threat patterns such as exploitation, C2, lateral movement, or exfiltration Understanding of secure network architectures (DMZs, segmentation, internal zones) Exposure to SIEM platforms (Splunk, LogRhythm, Darktrace) is beneficial Experience interpreting OSI model behaviours and protocol-level diagnostics is advantageous SC eligible with British citizenship Benefits: Company bonus ...

platforms. Your Profile Essential skills/knowledge/experience: Strong knowledge of IAM platforms (e.g., SailPoint, CyberArk, Azure AD). Experience with SecOps tools (SIEM, SOAR, Endpoint Security, Threat Intelligence). Proficiency in security protocols, identity lifecycle management, and access governance. Proven experience in service delivery management for security domains. ...

resided continuously in the UK for the past five years, due to Security Clearance requirements. Key Responsibilities: Lead investigations of security incidents raised by SIEM and CNAPP tooling. Drive improvements in cloud security posture using Microsoft Defender for Cloud. Guide project teams on remediation steps and ensure alignment with security … best practices. Support WebOps activities including deployment and configuration of SIEM and CNAPP tools. Oversee vulnerability management processes and ensure timely remediation. Manage and maintain LogicMonitor for cloud platform monitoring: Create and update logicmodules Configure alert rules and escalation chains Manage ServiceNow integration for incident handling Build and maintain dashboards ...

progression pathways into Threat Intelligence, SOC Engineering, Professional Services, Senior SOC roles, and Incident Response. Key Responsibilities Detect & Investigate Monitor and triage alerts across SIEM, EDR/XDR, email, and web security platforms. Investigate suspicious activity and assess escalation requirements. Follow SOC runbooks and structured investigation workflows. Build clear timelines … and common attack chains. Ability to recognise indicators of compromise (processes, network activity, logons, file changes). Hands-on experience with at least one SIEM, EDR, or XDR platform. Familiarity with ticketing tools such as ServiceNow, JIRA, or Salesforce. Experience reviewing Windows authentication/event logs and basic process trees. ...

senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows Hands-on technical mastery across … SIEM, SOAR, EDR, cloud security, and threat intelligence Ability to conceive, architect, and develop effective correlation and detection rules Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus. Strong expertise in Regular Expressions (Regex) Relevant bachelor's degree or industry-recognized qualifications (CISSP ...

experience within an MSP environment. Strong Microsoft Azure expertise (IaaS/PaaS, governance, identity, networking, landing zones). Security experience across MDR, threat detection, SIEM/SOAR or security monitoring. Solid understanding of hybrid cloud, integrations, networking and resilient design. Ability to articulate complex technical concepts to technical and … architectural documentation and NFRs (security, performance, compliance). Desirable MSP service design/service offering experience. Hands-on knowledge of Microsoft Sentinel or other SIEM/SOAR platforms. Familiarity with security frameworks (NIST, ISO 27001). Relevant Azure certifications (AZ-305, AZ-500, etc.). Please apply now if this ...

work with security platforms, scripting tasks, and collaborating with experienced security professionals. Key Areas of Work Enhancing alert logic and monitoring use cases within SIEM platforms Building and maintaining automation workflows using Python Reviewing security events and log data to spot unusual activity Supporting the design of detections aligned … adversarial behaviours Assisting investigations and contributing to continuous improvements within the SOC What You'll Bring Experience using one or more SIEM technologies (e.g., Sentinel, Splunk, ELK, Rapid7, LogRhythm) Python skills for scripting or automation Understanding of SOAR concepts or exposure to automated playbooks Familiarity with threat frameworks such ...

hiring Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data)) to join our team. This pivotal role requires a deep subject matter expert in the Elastic Stack, responsible for designing, implementing, and optimizing complex Elasticsearch environments tailored to critical business functions in either Observability, Security (SIEM), or Search … Logstash for comprehensive data collection. Designing APM services, setting up synthetic monitoring, and creating advanced Kibana dashboards for holistic operational visibility. OR Elastic Security (SIEM) Proven ability to deploy and manage Elastic SIEM, including endpoint security integration. Expertise in using security data (logs, events) to create custom detection rules, conduct ...