276 to 300 of 400 SIEM Jobs in England

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

department evolves. Regular team events and knowledge-sharing sessions create a supportive, engaging place to work.Key ResponsibilitiesDetect and investigateMonitor and triage alerts across SIEM, EDR or XDR, email and web security platforms.Investigate suspicious activity and determine whether escalation is required.Follow SOC runbooks and investigation workflows.Build clear timelines of activity and … indicators of compromise such as unusual processes, network connections, irregular logon activity or file changes.Hands-on experience with at least one major security platform (SIEM, EDR or XDR).Familiarity with ticketing tools such as ServiceNow, Salesforce, or JIRA.Familiarity with Windows event logs, authentication logs, basic process trees, and command-line ...

incident reviews and ensure improvements are implemented and follow-upscompleted.• Support incident metrics (MTTD, MTTR, recurrence, etc.)SOC Tooling & Platform Operations• Operate and improve SIEM, EDR, email security, case management, and vulnerabilitytools.• Monitor health, coverage, data quality, and integrations.• Troubleshoot ingestion, parsing, API, and configuration issues.• Build and maintain integrations … 7+ years in SOC, incident response, detection engineering, or security engineering.• Experience leading complex security incidents end-to-end.• Strong hands-on experience with SIEM, EDR, and security tooling.• Experience building and tuning detections and queries.• Experience with log onboarding, telemetry pipelines, and data quality issues.• Strong vulnerability management and ...

start or grow their career in cybersecurity, with opportunities for advancement and skill development.RequirementsKey Responsibilities:Monitor security alerts and events from Microsoft Defender, SIEM and other security tools.Perform initial triage and analysis of security incidents.Escalate verified incidents to Tier 2/3 analysts as needed.Document incidents, investigations, and response actions … Information Technology, or related field (or equivalent experience).Basic understanding of networking concepts (TCP/IP, DNS, firewalls).Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and endpoint protection.Strong analytical and problem-solving skills.Excellent written and verbal communication skills.Ability to work in a fast-paced, team-oriented ...

state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and deliveredcompelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … capacityProven, demonstrated experience leading technical client conversations at the CISO, security architect, or SOC lead levelExtensive experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementProven experience with enterprise security architectures ...

custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing. Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics. Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques. Current and active UK Developed … Vetting (DV) Security Clearance. Responsibilities: Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents ...

storage requirements.Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure.Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate ...

EngineerAs a Senior SOC Engineer at Nomios, you'll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection … intelligent workflows. You’ll also lead customer onboarding in collaboration with SOC Operations, ensuring secure, efficient deployments aligned with our model. Working directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and ...

systems. As well as contributing to user awareness and training throughout Swissport.Your activitiesMonitor, investigate, and respond to security alerts, including those from the SOC, SIEM, and EDR platforms.Manage and fine-tune email security gateways, reviewing quarantined messages and adjusting rules to reduce false positives.Support the organisation’s vulnerability management process … campaigns and compliance follow-ups.Review and manage web access requests to ensure appropriate filtering and compliance.Help ensure logging coverage and data integrity for the SIEM by verifying that key systems are forwarding logs.Assist in investigations involving potentially compromised accounts or endpoint devices.Contribute to documentation and process development for consistent, repeatable ...

strategy and zero trust adoption– Oversee penetration testing, DLP, and advanced threat detection programmes.– Own the vulnerability management programme– Implement enterprise frameworks including IAM, SIEM, and data classification.– Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision– Lead Security Incident Response ProgrammeGovernance, risk, and … leading and developing a small, high-performing team- Familiarity with AI governance and the security implications of agentic AI systemsBeneficial Experience- Experience with DLP, SIEM, or SOC build-outs- Relevant certifications such as CISSP, CISM, or ISO 27001 Lead Implementer- Experience in capital markets, asset management, or securities servicesDepartmentInfosecEmployment TypeFull ...

focusing on key customer accounts and delivering value to public sector accounts.Extensive platform selling experience in complex sales with multiple buying centers.Experience selling Cybersecurity, SIEM, EDR or CNAPP (DevSecOps, CloudOps) solutions is highly preferred.Established trusted relationships with CIOs and CISOs with the ability to influence and drive strategic conversationsExpertise ...

that underpin critical defence, government and public sector services.What you will do as a Senior Application EngineerSupport, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and responseDeliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.Contribute … sharing.Ensure compliance with engineering governance, ITSM processes, and cyber security policies.What you’ll bringSolid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar)Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions.Understanding of application lifecycle management, integration patterns, and secure ...

critical defence, government and public sector services. What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. … with engineering governance, ITSM processes, and cyber security policies. What you'll bring Solid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar) Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions. Understanding of application lifecycle management, integration patterns, and ...

secure environments (e.g. air-gapped, defence)Desirable:Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesAutomation of account onboarding/offboarding (API-driven)Integration with SIEM/SOC tooling ...

environments (e.g. air-gapped, defence) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Automation of account onboarding/offboarding (API-driven) Integration with SIEM/SOC tooling ...

and engineering capabilities that support a modern Security Operations Centre (SOC). The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding … develop automated workflows, and help shape the future direction of SOC engineering. Key Responsibilities Design, deploy and optimise SIEM, XDR and SOAR platforms. Build security automation, integrations, and response workflows. Develop log parsing, data normalisation and telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. … Plus SAAS solutionsSQL ServerSecuritySymantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDREndpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) NetworkingCisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & StorageDell PowerEdge Servers Dell PowerVault SAN Storage Technical CompetenciesData ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Minimum 2 years experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Minimum 2 years experience with ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … Falcon platform (endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures ...

posture across the estate — CSPM, container and Kubernetes security, IaC review.Security OperationsOwn threat detection and telemetry fidelity end-to-end — high-fidelity signals into SIEM, log source coverage across endpoint, SaaS, cloud, and network.Own incident management — ensure the incident response plan is defined, tested, and executable, with clear escalation paths … including distributed, multi-region teams.Expert-level knowledge of secure SDL frameworks (OWASP SAMM, NIST SSDF), threat modelling, and security architecture.Deep experience with detection engineering, SIEM/XDR platforms, incident response, and MSSP management.Strong cloud security expertise — AWS required; container and Kubernetes security experience.Track record of translating technical risk into business ...

collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.Job Responsibilities:Design, scale, and manage the enterprise SIEM architecture to provide centralized visibility and high-fidelity threat detection across all corporate and cloud infrastructure.Develop and influence advanced SIEM correlation rules, custom data parsers … control testing, remediation quality, and traceability/auditability in line with resiliency expectations.Required Qualifications, Capabilities, and Skills:Hands-on experience advising and influencing enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules).Deep ...

globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies. Job Responsibilities: Design, scale, and manage the enterprise SIEM architecture to provide centralized visibility and high-fidelity threat detection across all corporate and cloud infrastructure. Develop and influence advanced SIEM correlation rules, custom data … testing, remediation quality, and traceability/auditability in line with resiliency expectations. Required Qualifications, Capabilities, and Skills: Hands-on experience advising and influencing enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules). ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. Responsibilities: Deploy, configure, and manage cloud security … platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...