126 to 150 of 755 SIEM Jobs in England

Essentials Plus and the firm's wider data, AI and innovation strategies. Overseeing security operations, monitoring, detection and response across areas such as SOC, SIEM, XDR, vulnerability management and incident response. Embedding security by design into projects, change and solution architecture, including identity, endpoint, cloud, network, email and secure remote ...

Azure cloud or hybrid environments. Hands-on experience with the Microsoft E5 security toolset. Experience implementing and supporting a range of security technologies, including SIEM, EDR, firewalls, vulnerability management, identity and access management, encryption and related security controls. Working knowledge of recognised security frameworks such as Essential Eight, NIST Cybersecurity ...

incident calmly under pressure, and when to ask for help. Experience with cloud environments, particularly AWS and familiarity with vulnerability scanners, endpoint protection, and SIEM tooling are important. An awareness of UK data protection requirements and frameworks such as Cyber Essentials or ISO 27001 is a plus. Solid general ...

custom security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...

application log sourcesExperience in Python development, specifically contributing to a shared codebase used for automating SOC operationsMust have experience with one or more SIEM languages (SPL, KQL, SQL)Experience conducting analysis in a data lake environmentBroad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

FWaaS).Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native ...

TOGAF or SABSA . Threat and risk modelling experience. Strong understanding of network security, encryption, authentication and access controls. Experience with security technologies including SIEM, firewalls, IDS/IPS and vulnerability assessment tools . Cloud security experience across AWS, Azure or Google Cloud . Experience with DevSecOps, CI/ ...

detection and response capability.Qualifications3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defence.Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and ...

and analysis Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis Understanding of regulatory stipulations regarding security incidents Experience with SIEM technologies (i.e. Splunk, Sentinel) Understanding of both Windows and Unix/Linux based operating systems Ideally, you’ll also Candidates must hold or be willing ...

Understanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/ ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you’ll also Candidates must hold or be willing ...

topography and protocolsUnderstanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scaleExperience in operationalizing automation to support process efficiencyExperience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis toolsDeep understanding of both Windows and Unix/Linux ...

technologies, with experience managing and operating FortiGate firewalls · Proven experience with Active Directory/Azure AD, including patch and group policy management · Cloud native SIEM, SOCs and SOAR · Windows Server, Windows 11, and Microsoft Application Suite · Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and ...

technologies, with experience managing and operating FortiGate firewalls Proven experience with Active Directory/Azure AD, including patch and group policy management Cloud native SIEM, SOCs and SOAR Windows Server, Windows 11, and Microsoft Application Suite Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

domain or secure transfer products, such as Opswat or similar* Data diode or one-way transfer architectures* Integration with security tooling, such as SOC, SIEM or monitoring platforms* Performance and throughput optimisation for secure data transfer systems* Experience supporting service management processes, including incident, problem, change and configuration management* Experience ...

cloud platforms such as AWS, Azure, and Google Cloud. Experience with Okta, Salesforce, Slack, Jira, and GitHub. Experience with security tools and technologies, including SIEM, IDS/IPS, and endpoint protection. Proven success in contributing to a team-oriented environment. Proven ability to provide creative solutions to problems. Thorough knowledge ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

Desirable:* Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability ...

telemetry standard with the architect: which sources go to Sentinel, at what level, and how a new service is onboarded before go‐live. Build SIEM workbooks and dashboards for coverage, alert quality and response times, and report SOC metrics (time to detect, triage and contain) monthly. Provide tenant‐aware alerting ...

enterprise/defence environments Desirable VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands‐on use of DevSecOps tools and CI/CD pipelines VxRail and hyper‐converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

work some weekends and holidays Post-secondary education in Cybersecurity, comparable Desirable: Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash scripts ...

/defence environments## ## Desirable:* VCP Certification* Expertise with cloud platforms (AWS) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* VxRail and hyper-converged infrastructure* Automation of VCF lifecycle (patching, upgrades, deployment)* Integration with ...