226 to 250 of 402 SIEM Jobs in England

skills. Ability to translate technical trade-offs into business-focused decisions supported by clear pro-and-con analyses. Experience integrating security tool outputs into SIEM platforms, engineering workflows, and adjacent security tooling. Prior experience with tools such as SafeBreach, BloodHound, Microsoft EASM, or similar technologies. ...

Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk ...

mature SOC Knowledge of Service Management tools, such as: CRM, Salesforce, Confluence, Power apps, Microsoft 365Solid understanding of cyber security concepts, including SIEM, EDR, XDRStrong team playerAbility to work under pressure, handling escalations calmly and competentlyAbility to use initiative and work independentlyOrganised and professional with the ability to multi-taskExcellent ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational ...

SaaS apps both web and native, including their architecture, user experience considerations, and common integration patternsSecurity and performance monitoring, and 3rd party signals integrations (SIEM, WAF, etc)Understanding of the general cybersecurity landscape with respect to threats and challengesExperience with SaaS/PaaS/cloud-based services, driving their adoption ...

Defining the system specifications to support optimal performance.· Integrate workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.· Define the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Knowledge/experience ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protectionStrong understanding and knowledge of Information Security risk management tools and techniques.Awareness of Information Security control standards and frameworksKnowledge/experience working with firewalls ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protectionStrong understanding and knowledge of Information Security risk management tools and techniques.Awareness of Information Security control standards and frameworksKnowledge/experience working with firewalls ...

ISO27001, PCI and GDPR. Possibly a certified ethical hackerKnowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferredGood exposure of user environment management, including desktops ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

supporting the Cyber Defence team’s mission to stay ahead in innovation.To be considered for this role: you will have experience in SIEM maintenance, log ingestion, and developing and fine-tuning use cases, coupled with experience using Sentinel and Defender.Looking to be part of a collaborative and forward-thinking team ...

successful candidate will operate as a market-facing leader and trusted advisor for enterprise clients. They will help clients modernise their SOC, consolidate SIEM and XDR capability, improve response outcomes, and realise the value of Microsoft Security investments through practical, scalable and commercially strong solutions. Key ResponsibilitiesThe AMBG Senior Cyber ...

systemsExperience with one or more of the following areas Administering or deploying monitoring and observability tools such as CheckMK, Prometheus or ZabbixAdministering or deploying SIEM tools such as Elastic Security, Splunk or Trellix ESMWorking with dashboarding and visualisation tools such as Kibana or GrafanaPreferredAnsible automation experienceKnowledge of monitoring networking equipment ...

ForStrong experience with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring.Solid PowerShell scripting and automation skills.Experience with SIEM, SCOM, and enterprise troubleshooting tools.Knowledge of hybrid infrastructure and hyperconverged environments is advantageous.Cloud certifications are desirable but not essential. ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

operations and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting … common exploits. Understanding of threat vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...

work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats.Key ResponsibilitiesMonitor and respond to security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation … environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering, or infrastructure security roleGood knowledge of networking and common attack types (e.g. SQL injection, phishing, malware)Experience with ...