1 to 25 of 71 Remote/Hybrid SIEM Jobs in England

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

enterprise Firewalls (Palo Alto, Cisco), WAF/DDoS protection (Imperva), and Microsoft Gateways. Threat Detection & Response: Oversee email/web security gateways (Mimecast, Menlo), SIEM/SOAR platforms, and EDR/XDR alert response (CrowdStrike, Rapid7 IDR). Identity & Access Management: Administer MFA/SSO protocols using Okta and Microsoft ...

cloud platforms - AWS, Azure, Google Cloud Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non-technical stakeholders Experience influencing senior leadership ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

security controls and processes. About you You will have extensive experience of security monitoring and incident response, along with experience working with SIEM platforms, endpoint detection and response (EDR) tools, and email security solutions. You'll be proficient in securing Microsoft 365 and Azure environments (including Entra ID, Intune, Purview ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

best practices. Qualifications & Requirements * Proven experience in Cybersecurity, Computer Science, or related field. * Experience in data protection, encryption, and security frameworks. * Proficiency in firewalls, SIEM tools, and intrusion detection systems. * Certifications such as CISSP, CISM, or CEH preferred. * Strong analytical, problem-solving, and communication skills. ...

incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats ...

platform experience (e.g. Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

enterprise/defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems (IDS/IPS), vulnerability management tools and Firewall, DLP, Web and Email Security Gateways.This … and help coordinate, routine security event monitoring and investigations using available toolsUse, configure and develop the use of a security information and event management (SIEM) and EDR toolMonitor and configure network intrusion detection and prevention systemsAnalyse and create reports for security incidents, to determine root cause and lessons learntCreate and ...

Environment You will work across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast SD-WAN Technologies SIEM and Security Monitoring Platforms About You We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder ...

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

effective investigation and resolution Oversee vulnerability management and support patching activities, validating effectiveness through scanning and review Operate and support key security technologies including SIEM, endpoint protection and email/web security tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Strong understanding of information security principles, risk management and the threat landscape Experience operating and monitoring security tooling such as SIEM, endpoint protection and email/web security solutions Ability to conduct proactive threat hunting and contribute to improving detection capability Awareness of cloud security controls ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

DevOps experience Excellent communication and organisational skills Eligible to obtain SC Clearance Nice to Have Security Operations Centre (SOC) project experience Microsoft Sentinel SentinelOne SIEM or EDR technologies PRINCE2 Practitioner, PMP, CSM or PMI-ACP certifications Why Apply? Salary up to £65,000 Hybrid working One day per month ...

skills. Full UK driving licence. Desirable Skills Microsoft Azure certifications, Microsoft 365 certifications, Cisco or Meraki networking. Microsoft Defender XDR, Huntress, Sentinel or other SIEM/XDR platforms. PowerShell automation, SharePoint migrations, Azure Virtual Desktop. Cyber Essentials and security compliance. What We Offer £55,000–£70,000 depending on experience. ...

platform experience (e.g. Microsoft Fabric, Databricks) Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 ...

security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder ...

configuring tools to support risk-based vulnerability assessment Ability to define vulnerability classification schemas, workflows and operational reporting Experience integrating vulnerability management platforms with SIEM, case management and asset management solutions Experience deploying and configuring vulnerability management technologies across cloud and/or on-premises environments Knowledge of containerised and ...

also identify gaps in capability and define enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that ...

/LLD documents for security solutions. Strong understanding of Security Operations/SOCs. Hyperscaler experience (AWS, Azure, GCP) Professional Cloud Architect cert preferred. SIEM/SOAR tooling (e.g., Google SecOps/Chronicle). EDR/XDR/NDR experience (e.g., Crowdstrike, Corelight, Microsoft Defender XDR). What's on Offer ...