9 of 9 SIEM Jobs in Central London

security considerations. Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...

ability to lead investigations, co-ordinate containment and recovery activities, and remain effective under pressure. Broad technical expertise across Microsoft Azure and Entra ID, SIEM and detection engineering, endpoint and email security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection ...

and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience of responding to security DDQs and maintaining security evidence. * Experience supporting ISO 27001, Cyber Essentials and Cyber Essentials Plus. ...

across cloud, on-premises and hybrid infrastructure. This is an opportunity to work with modern security technologies across security engineering, threat detection, incident response, SIEM, cloud security and network security , while working alongside experienced engineering and security specialists. The Role As a Cyber Security Engineer, you'll help design, implement … Supporting security across cloud, on-premises and hybrid environments Working with engineering and security teams to embed security best practice Automating security tooling and SIEM log ingestion/routing Firewall and network security management Developing and maintaining security policies, standards and procedures Conducting infrastructure security assessments using tools such ...

hooks Experience with Logstash configuration, filtering and parsing. Knowledge of centralised logging architectures and AWS cross-account log aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/ ...

minimise risk and improve security capabilities. The Role Investigate and respond to cyber security incidents across enterprise environments. Monitor and triage alerts from SIEM, EDR/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment … ideally have: Experience working within a Security Operations Centre (SOC), Cyber Defence or Incident Response function. Strong hands-on experience with SIEM, EDR/XDR and enterprise security monitoring technologies. Knowledge of Windows, Linux, networking, cloud security and identity management. Experience investigating complex cyber incidents and communicating findings to both ...