301 to 325 of 335 SIEM Jobs in England

configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities for NMC Cyber Security Engineers. Working with wider NMC teams, contributing to Continual Service Improvement and innovations. What … need to succeed in the role Essential Experience of supporting and developing SIEM platforms in the context of a Security Operations Centre across a multi-tenant environment. Practical experience in the creation, testing, implementation, and support of custom tooling to support Security Operations. Initiative and the ability to produce quality ...

threats, supporting vulnerability remediation across the estate, and helping ensure compliance with industry standards and regulations. What this role involves: Develop, monitorand mature the SIEM solution. Support ongoing development and monitoring of IDS/IPS, detection and response solutionsand other threat detection systems. Analyseincidents and coordinate appropriate responses, including containment … restorationand disaster recovery, aligning solutions with business objectives. What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDRand MDR. Solid understanding of common attack vectors, security principlesand risk ...

Responsibilities 🛡️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using … than high-level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management ...

external SOC, youll be the technical backbone of the teams day-to-day security operations. That means triaging and responding to incidents, working with SIEM outputs, tuning EDR and email security tooling, and tracking vulnerabilities through to remediation. Beyond the operational work, youll be embedded into IT projects from … technical depth Solid experience across endpoint, network and cloud security Azure/Microsoft stack in particular Comfortable working with outsourced SOC functions and SIEM platforms Familiar with ISO 27001 and Cyber Essentials Plus Certifications such as CISSP, CISM, CEH or GIAC are a plus This is a genuinely stable, values ...

busy enviornment. Responsibilities include: Monitoring and triaging security alerts Investigating potential security incidents Escalating threats where appropriate Producing security reports and documentation Supporting SIEM tuning and optimisation Maintaining awareness of emerging cyber threats and vulnerabilities Working collaboratively within a fast-paced SOC environment Requirements Around 1+ year's commercial experience … security or a SOC environment Good understanding of networking, operating systems and security fundamentals Exposure to incident response and security monitoring Experience with any SIEM platform (Microsoft Sentinel, Splunk, Microsoft Defender, QRadar, Elastic etc.) Strong communication skills What's on offer? Competitive salary 25% shift allowance 25 days annual leave ...

security monitoring strategy and best practice. What you will bring: Proven experience deploying and managing Splunk at enterprise scale. Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning. Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning … experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation. Strong problem-solving skills and a proactive approach ...

will be responsible for designing, implementing, and maintaining security solutions while actively monitoring threats and responding to incidents. You will utilise tools such as SIEM, IDS/IPS, and vulnerability management platforms to maintain the integrity of networks, as well as carry out investigations into security events and recommend improvements. … colleagues and contribute to ongoing security improvements. The Role: Design, implement and maintain network security solutions across internal and customer systems Monitor security tools (SIEM, IDS/IPS) and respond to incidents and vulnerabilities Provide third-line support and act as a key escalation point for security issues Develop and ...

ensuring compliance with relevant industry standards, enabling the business to operate securely and efficiently in a dynamic threat landscape. PRINCIPAL ACCOUNTABILITIES: Monitor and analyse SIEM, network, and endpoint logs to detect threats, vulnerabilities, and anomalies. Evaluate and triage security alerts, accurately distinguishing genuine threats from false positives and applying appropriate … experience in cybersecurity Strong knowledge of security protocols, cryptography, and security technologies Proven experience with security tools such as firewalls, EDR/XDR software, SIEM and intrusion detection systems. Experience within a NOC/SOC environment. Ability and enthusiastic approach to pick up new technologies and learn them Ability ...

operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently on complex security issues and contributing to the continuous improvement of the SOC capability. You will need proven experience … senior level SC clearance held or ability to pass Interested? Please apply below. SOC Engineer, Senior SOC Engineer, Security Operations Engineer, SIEM Engineer, Splunk, Cribl, Threat Detection, Incident Response, Security Operations, SC Cleared, Public Sector, London, Remote, Contract, Inside IR35 ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

Senior Security Analyst - Cyber Security - SIEM - Qualys - IPS - IT security systems - Firewalls My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

Senior Network and Security Engineer - L2/L3 Network Infrastructure - Cyber Security - SIEM tools My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

interfaces that are intuitive for developers while remaining flexible for diverse user use cases Design and implement integrations with Security Information and Event Management (SIEM) systems, enabling users to stream monitoring alerts and security events into their existing security operations workflows Data Systems Implement efficient storage solutions for both structured ...

optimise the Palo Alto firewall estate Support core networking (LAN/WAN, Wi-Fi, remote access, load balancing) Monitor and respond to security incidents (SIEM/EDR) Improve network security, segmentation, and resilience Manage vulnerability scanning and patching (Qualys) Lead and contribute to network and security projects Produce clear, accurate … technical documentation Tech Stack Palo Alto | Cisco (L2/3) | Aruba | SIEM | EDR | Qualys What We're Looking For Minimum 5 years' experience in networking (essential) Strong hands-on experience with networking fundamentals and technologies (Cisco, LAN/WAN) Exposure to security tools or environments (SIEM, EDR, vulnerability management ...

proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction. Automate critical security workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI. Execute regular offensive security operations, including …/Penetration Testing against agentic frameworks and LLM integrations. Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance ...

Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team, helping revolutionize security management with our AI-native Falcon Next-Gen SIEM platform – enabling customers to detect, investigate, and hunt down threats 150x faster at Petabyte scale.You'll design, architect, and develop world-class case management and … making, streamline workflows and processes, improve efficiency and drive business outcomes.Bonus points:Currently developing Go-based microservices for scalable, high-throughput architecturesExperience in cybersecurity, SIEM, SOAR, or adjacent security domainsHands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks#LI-GO1#LI-HYBRIDBenefits of Working at CrowdStrike:Market ...

engineers during major incidents. The tooling scope has a strong Microsoft orientation. You work alongside the client's SOC provider where applicable, receiving escalated SIEM alerts while also monitoring and operating endpoint, vulnerability, and simulation tooling directly. You have direct access for investigation and threat hunting purposes. You bring experience … from Microsoft Defender and related email, endpoint and cloud security tooling Receive and act on escalated alerts from the client's SOC provider or SIEM platform Take ownership of all security incidents, validating indicators of compromise and determining impact Perform detailed investigations using KQL queries in Microsoft Sentinel and telemetry ...

service portfolio and delivering those services to end clients. Responsibilities include: Security Portfolio Development Support the definition and development of Security Services portfolio: MDR, SIEM, Identity, Compliance, and AI SOC Help productise security services with clearly defined scope, SLA, and pricing Contribute to the security attach strategy Assist in developing … Defender) and Tenable Requirements: Proven experience designing and delivering managed security services in an MSP or MSSP environment Strong hands-on expertise across MDR, SIEM (Microsoft Sentinel preferred), Identity, and endpoint security Experience with vulnerability management tooling — Tenable or equivalent — and understanding of remediation workflows Desirable: Experience with HaloPSA ...

Zero Trust and secure-by-design principles Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR Assess and optimise client Defender XDR and Sentinel configurations, producing detailed remediation and maturity roadmaps aligned … and MITRE ATT&CK best practices Advise on Defender XDR, Sentinel, and Entra ID integration to enable holistic security visibility, supporting migrations from Legacy SIEM platforms such as Splunk Collaborate with SOC and Incident Response teams during escalated incidents, rapidly onboarding critical assets and integrating key data sources for containment ...

and prospective clients. Acting as the final escalation point for on-call incidents (rota-based, paid on-call). Supporting service improvement initiatives across SIEM, EDR, email security and associated detection and response tooling. Developing and maintaining customer relationships to promote a partnership between Littlefish and the end client. What … Operations. Previous experience leading or mentoring a technical security team. Strong exposure to customer facing security services and contractual delivery. Hands on experience with SIEM, IDP, ITDR, EDR and email security platforms. Proven ability to mentor analysts at varying levels of experience. Strong understanding of modern cyber threats, attack techniques ...

/Unix servers, network devices and applications to the PAM platform Configure Just-in-Time (JIT) access workflows and approval processes Integrate PAM with SIEM tools for monitoring and alerting Manage platform upgrades, patching and ongoing health monitoring Troubleshoot connector issues and session failures Maintain technical documentation and support audit … credential vaulting, password rotation and privileged access workflows Experience onboarding systems into PAM platforms Strong understanding of Active Directory privileged account management Experience with SIEM integration Ability to obtain SC level security clearance If this sounds like a role for you please apply with an up to date version ...

senior engineering teams and communicating risk effectively to cross-functional stakeholders. Detection Engineering Support: Proactively suggesting fine-tuning requests, updating signatures, and optimizing SIEM correlation rules to lower false-positive rates and enhance alert fidelity. Threat & Vulnerability Awareness: Keeping your finger on the pulse of the wider threat landscape, tracking … Clearance at the point of application. SOC Exposure: Prior experience working within a dedicated enterprise SOC environment. Security Toolkit: Good working knowledge of enterprise SIEM platforms, EDR/XDR tools, and host intrusion prevention systems. Network & OS Essentials: A strong foundational grasp of network principles (TCP/IP, DNS) and ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...