1 to 25 of 27 Permanent SIEM Jobs in Yorkshire

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

leading, coordinating, or supervising. Working understanding of cybersecurity operations, threat detection methodologies, and incident response processes. Strong experience in analysing and correlating logs (e.g., SIEM, XDR/EDR, cloud, network). Excellent analytical and critical thinking skills, with the ability to make sound decisions under pressure. Strong communication skills, capable ...

SaaS and IaaS environments. Device and mobility management. Windows Server and Windows operating systems. VMware and enterprise storage. VPN, SASE and cloud security technologies. SIEM and security monitoring platforms. Experience with technologies such as Mimecast, Varonis and Cisco Umbrella would be highly beneficial. You should also have experience with scripting ...

minimum of 5 years' hands-on SOC experience - threat detection, incident response, and a track record of continuous improvement Solid working knowledge of SIEM, EDR, and vulnerability management platforms Comfort using AI tools (Claude, Copilot, ChatGPT) as part of your day-to-day toolkit Strong Azure expertise Bonus points ...

methods. We’re looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

frameworks. · Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. · Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. · Strong communication, stakeholder management, and report-writing skills. · Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or ITIL are desirable. ...

frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or ITIL are desirable. ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

same Required experience: To be successful in this role you will need to have the following experience: Demonstratable experience working with a SIEM tool (Microsoft Sentinel, Splunk, etc), and vulnerability scanners. Ability to explain technical and complex concepts simply to a variety of audiences acting as a bridge between … management. Experience leading small monitoring teams in the design, development and enablement of automated monitoring processes, recommending and implementing the latest SIEM (Security Information and Event Management) and network analysis tools, techniques and procedures to:detect malicious activity and ensure continuous improvement through dashboard monitoring or retrospective assessment. Government Digital ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

will apply hands-on engineering expertise to design, build, and optimise automation workflows that improve the scalability and efficiency of SOC services. Working across SIEM, endpoint, and orchestration platforms (primarily Palo Alto XSOAR), you will reduce analyst workload, accelerate incident response, and enhance decision-making across customer environments. Key Responsibilities … Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build and maintain workflows across SIEM, EDR, and SOAR platforms Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: Monitor and develop SIEM and threat detection platforms Investigate and respond to security incidents and alerts Support vulnerability scanning, remediation, and reporting activities Assist with development of security policies, procedures … cyber threats and recommend improvements where appropriate Key Skills & Experience: 2-4 years' experience within a cybersecurity or infrastructure security role Experience working with SIEM tools and vulnerability management platforms Strong understanding of EDR, XDR, MDR, IDS/IPS technologies Good knowledge of Microsoft security technologies and infrastructure environments Understanding ...

join our SOC. The role focuses on monitoring security s, performing initial triage, and escalating potential incidents to higher-level analysts.Key ResponsibilitiesMonitor security tools (SIEM, EDR, IDS/IPS) for s and suspicious activityPerform initial triage and classification of security eventsEscalate confirmed or high-risk incidents to SOC L2/… common threats and attack techniquesRequirementsBasic knowledge of networking (TCP/IP, DNS, HTTP)Understanding of cybersecurity fundamentals (malware, phishing, brute force, etc.)Familiarity with SIEM and EDR tools (e.g., Splunk, Sentinel, Defender and CrowdStrike) is a plusStrong analytical and problem-solving skillsGood written and verbal communication skills in englishAbility ...

exciting challenge, something you are enthusiastic about, and want to join our team please read on and apply!Person SpecificationEssentialUnderstanding of security platform management (SIEM and SOAR).Understanding of enterprise-level monitoring and supporting large user bases.Knowledge of creating and managing security playbooks and of public sector security standards.Excellent communication … listed below, using a separate paragraph for each.- Proven understanding with Cortex XDR, Cortex Data Lake, and Cortex XSOAR.- Understanding with security platforms management (SIEM, SOAR).- Knowledge in creating/managing security playbooks and knowledge of public sector standards.A diverse sift panel will review the information in your ...

IT Operations Engineer - Microsoft Cloud & InfrastructureLeeds/Doncaster - 3 days on site 45,000 We are looking for an experienced Operations Engineer to join a growing IT Operations function, taking ownership of core infrastructure, cloud ...

IT Operations Engineer - Microsoft Cloud & InfrastructureLeeds/Doncaster - 3 days on site 45,000 We are looking for an experienced Operations Engineer to join a growing IT Operations function, taking ownership of core infrastructure, cloud ...