13 of 13 SIEM Jobs in Bristol

Strong knowledge of network security, identity & access management, endpoint protection, and cloud security (Azure preferred but will also consider AWS) Hands-on experience with SIEM technologies (e.g. Microsoft Sentinel and/or Defender) Azure security posture management, including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

used to address problems and realise opportuni ties.Strong understanding of cloud networking and architecture principles, Identity and access management models, security monitoring and SIEM integra tion.Proven hands-on experience of at least two cloud environments inclu din g:AWSMicrosoft AzureVMware Cloud Found ationGoogle CloudExperience securing multi-cloud or hybrid environments ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

technical security infrastructure and policies.Develop technical solutions and new security toolsets to mitigate security vulnerabilities and automate repeatable tasks.Build, implement and tune SIEM event correlation rules/logic, and content, to filter out security events associated with known network behaviour, known false positives and/or known errors.Build, implement and ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

identifying improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practicesConfigure and utilise SIEM, vulnerability management and other security-based tooling.Innovate in the areas of SIEM and SOC and develop best practice.Mentor and oversee development of junior analysts.Work … Qualifications (Required Skills/Experience): 3+ years’ experience in the following areas:Working in a Security Operations Centre (SOC).Working with SIEMs and evaluating SIEM alerts.Experienced in using log aggregation and correlation tools (Splunk preferred).Experienced in interpreting systems, application and network device logs.Experienced in packet capture and analysis.Experienced ...

incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security platforms rather than simply operating them. Produce clear incident reports and recommendations. … and non technical stakeholders to drive security improvements. Technology Environment Experience with the following is highly desirable: Microsoft Defender Microsoft Sentinel Microsoft Purview Proofpoint SIEM, EDR and related security technologies About You You'll have a strong background in Security Operations and Incident Response, with hands on experience working with ...

incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security platforms rather than simply operating them. Produce clear incident reports and recommendations. … and non technical stakeholders to drive security improvements. Technology Environment Experience with the following is highly desirable: Microsoft Defender Microsoft Sentinel Microsoft Purview Proofpoint SIEM, EDR and related security technologies About You You'll have a strong background in Security Operations and Incident Response, with hands on experience working with ...