51 to 55 of 55 SIEM Jobs in the East of England

upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. Your skillset … creation, testing and maintenance of AI or machine learning technologies to assist with the optimisation of work flows or play books Experience with SIEM (Security Information Event Management) technologies If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further ...

capability around the SOC. What you’ll be doing: Proactive security monitoring and threat hunting Investigating and responding to security incidents Engineering and improving SIEM environments Building and tuning detection rules Developing detection coverage around MITRE ATT&CK Supporting and maintaining client security platforms Scripting and automating SOC processes Helping … develop and mature the UK SOC capability What we’re looking for: Strong SOC/Security Operations experience Hands-on SIEM engineering experience Detection engineering and alert tuning Experience with KQL, SQL or similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and ...

that power operational monitoring, observability and security operations. Designing and architecting enterprise-scale Elastic Stack solutions. Building and optimising high-volume Elasticsearch clusters. Delivering SIEM capabilities, threat detection and security analytics. Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent. Creating impactful Kibana dashboards, visualisations and reporting solutions. Implementing … recovery documentation. What you will bring: Experience administering enterprise Elastic Stack environments. Deep expertise across: Elasticsearch. Kibana. Logstash. Beats. Elastic Agent & Fleet. Elastic Security (SIEM). Elastic Observability. Strong experience supporting large-scale Elasticsearch clusters. Proven track record designing resilient, highly available platforms Experience delivering security monitoring and observability solutions. ...

Requirements Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data. Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security … MITRE ATT&CK and enhancing security telemetry through automation and tooling. Highest-signal resume keywords Incident Investigation Detection Logic Development MITRE ATT&CK Framework SIEM Tooling Cloud Security Practices ATS Optimization Keywords Hard Skills Security Incident Investigation Detection Rule Development Threat Hunting Forensic Investigation Scripting (PowerShell, Python) Industry Keywords Adversary ...

contributes to the protection of brand and reputation.Key Purposes:•Responsible for the protective monitoring of systems and networks, specifically security information and event management (SIEM).•Supporting Operational Security and Service Delivery Teams, to ensure they have up-to-date and effective technical security controls.This job role can be based … monitor, identify, analyse, and respond to security threats.Incident detection, reporting, initial analysis/investigation, and incident prioritisation, to support the Security Incident ProcessImplementation and support of SIEM configuration - dashboards, rules, alerts, correlations, watchlists, reports etcUtilising other security technologies to enhance detection and identification of threats (Firewall, Anti-Virus, EDR/ ...