12 of 12 Remote/Hybrid SIEM Jobs in the East of England

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

model and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

support a busy cyber security team within a large enterprise environment. Key Requirements: Demonstrable experience as a SOC Analyst Strong hands-on experience with SIEM, including Microsoft Sentinel Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential ...

agents, either internally or customer facing. Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations. Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal ...

Infrastructure Security role. Strong understanding of vulnerability management processes and remediation workflows. Experience investigating and responding to security incidents. Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions. Knowledge of operating system security across Mac, Windows and Linux environments. Experience with identity and access management concepts. Understanding … Experience securing public cloud platforms. Knowledge of Microsoft 365 security technologies. Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance ...

Intune. Experience ofIdentity & Access Management Principles and Practices. Experience of Cyber Security principles and practices, including the administration and use of Microsoft Defender and SIEM tools. Experience ofApplication Packaging Principles and Practices. There will be opportunities for development and training. Part of the EUC Development role is packaging applications ...

setup (1 day onsite per week initially, potential for remote work after week one). You will monitor, triage, and investigate security incidents using SIEM (Microsoft Sentinel) and Defender, with emphasis on incident response and root-cause analysis in a large enterprise environment. #J-18808-Ljbffr ...

security incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical and ...

required eventually . A background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £85.00 per hour Location: Stevenage Hybrid/Remote … Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

offers hybrid working 2–3 days in the office, with a focus on protecting the technology estate and responding to incidents. You will monitor SIEM/EDR/XDR, investigate alerts, hunt threats, tune detections, support forensics, and contribute to security improvements. On-call rota participation is included. #J ...