301 to 325 of 400 SIEM Jobs in England

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

security standards.Conduct vulnerability management activities and coordinate external penetration testing.Work alongside outsourced SOC and security partners to investigate and respond to security incidents.Ensure comprehensive SIEM monitoring across the technology estate.Develop, implement and maintain information security policies, standards and procedures.Assess cyber risks and recommend appropriate mitigation strategies.Act as the internal security … Catalyst switching, Layer 2/3, OSPF and VPNs.Network security controls including Cisco ISE, TACACS, IPS and endpoint protection.Security monitoring and incident response within SIEM environments.Vulnerability management and penetration testing.Security governance aligned to ISO 27001, NIST and risk management frameworks.Developing security policies, conducting audits and managing security incidents.Desirable skills:Exposure ...

Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP).Develop and implement security monitoring and logging strategies.Investigate and analyse security incidents, including identifying root causes, determining the scope … Kubernetes threat detection and anomaly detection.Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity.Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments.Experience in contributing to security-focused open-source projects or internal security platform tooling.As a part of the UK Security Operations (SecOps ...

join. Who you are We’re interested in people who have: ● experience investigating and responding to cyber incidents ● experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents ● Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent … SIEM tool is acceptable) ● an understanding of the tools, techniques and procedures commonly used by threat actors ● good analytical and problem-solving skills ● good verbal and written communication skills It’s desirable, but not essential, that you have: ● experience with Splunk ● experience working in an Agile environment ● experience with cloud ...

join our SOC. The role focuses on monitoring security s, performing initial triage, and escalating potential incidents to higher-level analysts.Key ResponsibilitiesMonitor security tools (SIEM, EDR, IDS/IPS) for s and suspicious activityPerform initial triage and classification of security eventsEscalate confirmed or high-risk incidents to SOC L2/… common threats and attack techniquesRequirementsBasic knowledge of networking (TCP/IP, DNS, HTTP)Understanding of cybersecurity fundamentals (malware, phishing, brute force, etc.)Familiarity with SIEM and EDR tools (e.g., Splunk, Sentinel, Defender and CrowdStrike) is a plusStrong analytical and problem-solving skillsGood written and verbal communication skills in englishAbility ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniquesAdvanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem, cloud ...

storage requirements.Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate ...

assets from threats and risks by monitoring, detecting, analysing, and responding to security incidents. Key Responsibilities Oversee the day to day running of our SIEM solution (Chronicle) working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team. Define and facilitate the creation of new rules … fine-tuning existing rules within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these ...

Operations (SecOps) team reporting into the IT Security Manager for the firm. Responsibilities: - Maintain and optimise the Security platform, including configuring EDR policies, tuning SIEM rules, and optimising the system for performance - Monitor for security threats, analyse alerts, and respond to incidents using security tools; conduct vulnerability scans and support … Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access Required Skills/Experience: - EDR - platform management, EDR policy configuration, and SIEM tuning - Microsoft Security: Defender (ATP), Azure Security Centre, Entra ID, Intune, Conditional Access - Identity and Access Management: CyberArk, Entra ID, SSO, MFA, and PAM solutions ...

Microsoft 365, Azure, Entra ID, Intune and Defender would be helpful. We would also welcome experience of areas such as vulnerability management, incident response, SIEM or Managed Detection and Response services, supplier assurance, cyber security frameworks or NHS information governance requirements. At NTW Solutions, our work supports better care. … technologies or security analytics. Desirable Experience of line managing, supervising, supporting, coaching or providing technical direction to cyber security or technical staff. Experience of SIEM, Managed Detection and Response, threat intelligence, supplier assurance or third-party cyber security activities. Skills and Knowledge Essential Good understanding of cyber security principles and ...

lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons learned and ensuring improvement actions are delivered. Alongside this, you'll configure and optimise SIEM, threat protection and case management platforms, developing new detection rules, alerts and automation to improve our ability to identify and respond to emerging threats.You … Defence or Incident Response in a complex enterprise environmentProven experience managing the end-to-end security incident management lifecycleHands-on experience configuring and administering SIEM, threat protection, logging and case management platformsExperience developing threat detection use cases, alerts, dashboards and operational reportingStrong understanding of security monitoring, investigation, triage, containment, recovery ...

Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting … clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities ...

e.g. Fluent Bit). Understanding of container security principles and cloud-native security. Scripting and automation skills (Python, Bash or similar). Experience configuring SIEM platforms. Understanding of security frameworks and threat frameworks such as MITRE ATT&CK . Desirable Experience with Microsoft Defender. Experience with additional SIEM or observability ...

customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.Your role as Senior Security Engineering ConsultantThe Security Engineering Consultant role sits within the Security Operations … within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A key aspect of the role ...

enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies, procedures … cyber threats and recommend improvements where appropriate Key Skills & Experience: * 2-4 years' experience within a cybersecurity or infrastructure security role * Experience working with SIEM tools and vulnerability management platforms * Strong understanding of EDR, XDR, MDR, IDS/IPS technologies * Good knowledge of Microsoft security technologies and infrastructure environments * Understanding ...

workflows.Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse … and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing consumer-facing web and iOS/Android applicationsExperience designing policies and administering Vault & other Hashicorp products.Experience managing ...

Designs, including specification of interfaces between solution components. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment … tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating … role include:Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environmentsProactively hunting for threats and developing detection logic across SIEM and cloud security systemsParticipating in red and purple team exercises to test, validate and enhance detection and response capabilitiesDeveloping and maintaining automation workflows using tools ...

workflow and delivery management. Understanding of cloud and container security principles. Exposure to core cyber defence technologies (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)). Strong data analytics capability, using insights to inform incident response and continuous improvement. Awareness of software development lifecycles and product … workflow and delivery management. Understanding of cloud and container security principles. Exposure to core cyber defence technologies (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)). Strong data analytics capability, using insights to inform incident response and continuous improvement. Awareness of software development lifecycles and product ...

Vodafone customer environments and internal infrastructure by providing continuous 24/7 security monitoring and initial alert triage.You will review and analyse security alerts generated by SIEM platforms and associated security tools, assess their relevance and severity, and escalate suspected security incidents in accordance with documented procedures and service level … areExperience working in a Security Operations Centre or similar operational environment.Ability to interpret and analyse logs and alerts from IT, network, and security systems.Experience with SIEM technologies such as Huntsman, Securonix, or Splunk.Foundational knowledge of IT and network security concepts (e.g. Windows, firewalls, IPS, web proxy, email security).Demonstrated interest ...