1 to 25 of 90 Remote/Hybrid Permanent SIEM Jobs

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

z2bz0 years of experience in an IT troubleshooting role, whether IT support or information security Hands-on experience triaging alerts in a SIEM or incidents in an ITSM (ticketing) system Working knowledge of web filtering including how to review and categorize URLs and process requests to unblock them Understanding ...

scripting where appropriate to improve efficiency Essential Skills & Experience Active SC Clearance Sole British National Minimum 3 years' experience within a SOC, Detection Engineering, SIEM Engineering or Cyber Security Engineering role Strong hands-on experience with Microsoft Sentinel Advanced knowledge of Kusto Query Language (KQL) Experience developing and maintaining Sentinel ...

security position. A practical understanding of endpoint security, vulnerability management, security monitoring and incident response. Familiarity with security technologies such as EDR platforms, SIEM solutions or vulnerability management tools. An understanding of IT infrastructure, Windows environments, Microsoft Azure or end-user computing technologies. Knowledge of information security best practices and ...

Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix. Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms. Hands-on experience with policy development, access control models (RBAC, ABAC), and logging standards. Experience supporting assurance ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

cybersecurity frameworks (e.g. Local Government CAF) and regulatory compliance requirements (PSN, PCI-DSS).In-depth knowledge of cybersecurity technologies, tools, and methodologies (e.g., SIEM, IDS/IPS, firewalls, DLP).In-depth understanding of cybersecurity standards, frameworks, risk management processes, and a proactive approach to threat mitigation.Significant experience with completing risk ...

configuration management and cloud service protection. Identity and access management: Directory services, multi-factor authentication, conditional access and privileged access management. Security monitoring: Logging, SIEM tools and managed detection and response services. Vulnerability management: Vulnerability scanning, penetration testing and remediation planning. Security architecture: Assessing proposed designs and ensuring security ...

platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities: This role has no supervisory responsibilities Posting date: Sunday 8th November 2026 [11.59pm ...

Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer,?Detection & Response Engineer,?SIEM Engineer,?Security Detection Engineer,Threat Hunting Engineer,?Security Automation Engineer,?SOC Engineer,?Incident Response Engineer,Cloud Security Engineer,?Network Security Engineer,?Cybersecurity Analyst (Threat Focus ...

requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

Intelligence and Red/Blue team) Experience in managing and running Threat hunting initiatives including developing Threat intelligence governance framework. In-depth experience with SIEM tools with a strategic oversight on appropriate use case methodologies. Implementation of robust security monitoring use cases and Threat hunting capabilities. Incident Response experience with ...

security considerations. Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...