1 to 25 of 29 SIEM Jobs in Central London

outsourced SOC to ensure rapid detection, escalation, and resolution of security alerts and major incidents. Manage, operate, and tune key security platforms, including SIEM, EDR/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows ...

Design, implement, and maintain security controls across AWS environments. Configure, manage, and optimise AWS GuardDuty, including alert tuning, findings triage workflows, and integrations with SIEM and incident response processes. Lead cloud security monitoring, detection engineering, and preventative control design. Work closely with the Cyber Security Analyst on incident response, providing ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non‐technical stakeholders Experience influencing senior leadership ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience of responding to security DDQs and maintaining security evidence. * Experience supporting ISO 27001, Cyber Essentials and Cyber Essentials Plus. ...

services to multiple external clients rather than managing only an internal SOC. 2. Technical security operations experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft ...

services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support … cyber security environment Strong hands-on experience us ing Ela stic and/or Sp lunk for security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint ...

Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits and compliance assessments. Relevant security/audit certifications (CISA, CISM, CISSP, ISO 27001 Lead Auditor, Cyber Essentials ...

obtain SC clearance. Interested? Please apply below. SOC Manager, Cyber Security Operations Manager, Security Operations Centre, SOC, incident management, threat intelligence, security monitoring, MSSP, SIEM, CISSP, CISM, ITIL, AWS, Azure, Remote, Contract, Inside IR35 ...

platforms: AWS (S3, RDS, Glue), Azure (ADLS, Purview), GCP (BigQuery) Data cataloguing tools — Collibra, Alation, Informatica ETL pipelines and data lineage concepts Security & Privacy SIEM/DLP tools integration (Splunk, Microsoft Purview) Identity & Access Management basics (IAM, RBAC) Encryption, tokenization, and data masking techniques Scripting & Automation Python/Bash ...

information security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with cloud platforms ...

and stakeholder impact. What You’ll Be Doing Security Leadership & Programme Ownership Define and execute the enterprise‐wide security strategy Own capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance Translate regulatory obligations ( FCA , PRA , ISO 27001 , Lloyd’s ) into practical, measurable controls Hands‐On Security Engineering … and network security Drive security automation and DevSecOps practices Incident Response & Threat Detection Lead real‐time response to security incidents Oversee SIEM/SOAR integration, alerting, and playbooks Conduct investigations using log analysis, forensic techniques, and threat intelligence Client‐Facing Security Services Provide advisory and managed security support ...

improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and … and/or Security Operation centers required. Experience in a Data Center environment an added plus. Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments. Demonstrated leadership in ICS and SCADA security integration and monitoring within critical infrastructure. Deep knowledge on security architecture, with hands ...

teams. Drive project governance and reporting activities. Cyber Security Delivery Deliver initiatives across: Identity & Access Management (IAM) Privileged Access Management (PAM) Security Operations (SOC) SIEM Platforms Cloud Security Vulnerability Management Data Protection and DLP Security Monitoring and Threat Detection Secure File Transfer and Encryption Programmes Coordinate technical teams to ensure … Skills & Experience Cyber Security Experience Strong understanding of enterprise cyber security principles and controls. Experience delivering projects involving: IAM and Access Governance PAM Solutions SIEM and Security Monitoring Cloud Security Endpoint Security Vulnerability Management Data Protection Security Compliance Programmes Familiarity with security frameworks and standards such as: NIST ...

processes, playbooks and operational procedures. Monitor and improve key SOC performance metrics including MTTD, MTTR and SLA performance. Ensure effective use and optimisation of SIEM, EDR/XDR and SOAR technologies. Coordinate major cyber incidents and lead post-incident reviews. Work closely with threat intelligence, infrastructure, cloud and security engineering … analysts and technical cyber security teams. Strong understanding of incident response, threat detection and security operations. Hands-on knowledge of enterprise security technologies including SIEM, EDR/XDR and SOAR platforms. Experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk or similar enterprise security tooling. Strong understanding of security frameworks including ...

and remote options. The ideal candidate has 3–6 years of hands-on security engineering experience, strong cloud security, and scripting skills. Familiarity with SIEM/EDR tooling and vulnerability management is expected. #J-18808-Ljbffr ...

issues. Defining and monitoring security policies and best practice standards. Develop and maintain a working understanding of British Land's security technology stack (e.g. Siem, email security, dlp, endpoint, identity, vulnerability management) sufficient to engage credibly with the wider infosec team and its systems. Critically review and challenge supplier technical … technology would be a distinct advantage. Experience reviewing penetration test reports, soc 2 reports, or supplier security architectures. Experience with security tooling such as siem, email security platforms or vulnerability scanning. Hands‐on experience supporting incident response of security operations activities. Desirable Accreditations: ISO 27001 lead auditor/implementer certification. ...

Minimum 1 years proven experience in a Tier 1 Cyber Security SOC Support Analyst role Working knowledge of Microsoft Defender XDR and Microsoft Sentinel SIEM technologies Working knowledge of Microsoft Defender suite including Endpoint Detection and Response Understanding of key Microsoft 365 Cloud Technologies from a threat landscape perspective Cyber ...

leadership role involves defining strategy, leading a security team, and enhancing security controls. The ideal candidate will need 7 years in cybersecurity, experience with SIEM tools, and strong expertise in Azure security. This role is located in the City of London with a hybrid working model, providing significant client interaction ...

directly with clients in a consulting capacity, shaping cyber defence across endpoints, identities, cloud, and collaboration platforms. You will lead design and integration of SIEM solutions (Microsoft Sentinel), perform threat hunting, incident response, and contribute to #J-18808-Ljbffr ...

expectations and recognised frameworks. Key Responsibilities Security Platform Operationalisation: Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration … source onboarding and compliance policy enablement. Triage and disposition security alerts across SIEM and EDR platforms, reducing alert backlog and improving detection fidelity through systematic investigation, rule refinement and false positive tuning. Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged ...

implement, and maintain the technical security controls that protect infrastructure, applications, and data. Key Responsibilities Implement and maintain security tooling (firewalls, EDR/XDR, SIEM, IAM/PAM platforms, DLP) Configure and harden cloud environments (AWS/Azure) in line with security baselines Support vulnerability management - scanning, patching coordination, remediation … experience (AWS and/or Azure) Scripting/automation ability (Python, PowerShell, or similar) Working knowledge of networking, IAM, and endpoint security Familiarity with SIEM/EDR tooling and vulnerability management platforms Desirable Security+, CySA+, or GIAC certifications (e.g. GCIH, GSEC) Cloud security certification (AWS Security Specialty/Azure Security ...

strategy and zero trust adoption Oversee penetration testing, DLP, and advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security Incident Response Programme Governance … and developing a small, high‐performing team Familiarity with AI governance and the security implications of agentic AI systems Beneficial Experience Experience with DLP, SIEM, or SOC build‐outs Relevant certifications such as CISSP, CISM, or ISO 27001 Lead Implementer Experience in capital markets, asset management, or securities services #J ...

and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level … security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands‐on experience using KQL, Microsoft Defender XDR, and threat intelligence sources ...

multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem ...