301 to 325 of 735 SIEM Jobs in England

hunting, support detection automation, and help drive remediation with cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...

and coordinate pen-test cycles. The role is a contract position with day-one impact and independent work expectations. You’ll bring hands-on SIEM experience (Microsoft Sentinel preferred), Azure security knowledge, Terraform/Bicep for security tooling, and a proactive approach #J-18808-Ljbffr ...

monitor threats, investigate incidents, and drive improvements in security posture with advanced tooling and automation. Role requires hands-on expertise with firewalls, WAFs, VPNs, SIEM/SOAR, and Zero Trust. Hybrid working with in-office presence in Osterley is expected as part of Sky’s campus culture. #J-18808-Ljbffr ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

Analysts to manage Authority’s environment’s systems. Skills/Experience: Previousexperience of Enterprise ICS/network architectures and technologies Experienceand knowledge of SIEM solutions; having the ability to identify use cases andtheir creation, their deployment and tuning. Experienceas a mentor/coach to junior analysts Previousexperience of utilising ...

with SOC 2 and ISO‐27001 Strong understanding of cloud security principles (networking, IAM, secrets management, logging, monitoring) Experience implementing security tooling such as SIEM, EDR, and CSPM security platforms Track record of building scalable, pragmatic security programs in high‐growth environments Ability to balance strong security practices with usability ...

incidents, and support continuous improvement. You should have a background in IT or cybersecurity, strong analytical thinking, and good communication. Nice-to-have SIEM experience (QRadar, Splunk, Sentinel) and knowledge of TCP/IP and common threats. #J-18808-Ljbffr ...

Intune. Experience ofIdentity & Access Management Principles and Practices. Experience of Cyber Security principles and practices, including the administration and use of Microsoft Defender and SIEM tools. Experience ofApplication Packaging Principles and Practices. There will be opportunities for development and training. Part of the EUC Development role is packaging applications ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

control environments. Experience with SDN, network virtualisation, data-centre technologies or network automation . Knowledge of cyber-security technologies such as next-generation firewalls, SIEM, IAM and OT security monitoring. Experience planning design packages and preparing deliverables for formal client submissions. Why This Opportunity? This is an opportunity to work ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

telemetry uplift. Minimum Qualifications Experience in detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

commercial enterpriseExperience working with and relationships across financial services, manufacturing, retail or CPG, healthcare, or energy or utilities marketKnowledge of modern security stack, including SIEM/SOAR, EDR/XDR, IAM, data security, or cloud security, and where AI is being adopted across itKnowledge of emerging AI-security topics, including ...

Customer Experience, Engineering, Sales, and MarketingNice to HaveFamiliarity with adjacent security infrastructure such as Crowdstrike, Netskope, or Palo Alto mail/gateway solutions, EPP, SIEM, or DLPFamiliarity with AI tools (e.g., Claude) to aid in day-to-day enablement and content developmentRelevant industry certifications (vendor-specific, CompTIA Security+, CISSP ...

Sanderson Government and Defence seeks a SOAR/SIEM Security Engineer for a critical national infrastructure project. You will design and automate detection workflows, tune Splunk dashboards and support live incident response in OT/IT environments, while maintaining high availability and safety standards. This 18-month FTC role requires ...

setup (1 day onsite per week initially, potential for remote work after week one). You will monitor, triage, and investigate security incidents using SIEM (Microsoft Sentinel) and Defender, with emphasis on incident response and root-cause analysis in a large enterprise environment. #J-18808-Ljbffr ...

industry standards for log source onboarding. Ready to take your expertise to the next level? Get in touch today! Responsibilities: Onboard clients to the SIEM platform and integrate relevant log sources to detect and investigate security intrusions Measure and improve the quality of security telemetry, identifying insufficient logging levels and ...

and customer engagement models. + Technical Expertise - Deep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software. - Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools. + Sales Acumen - Strong consultative selling skills. - Ability to translate technical features into business benefits. + Leadership & Communication - Proven ability ...

improving, developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and … and/or Security Operation centers required. Experience in a Data Center environment an added plus. Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments. Demonstrated leadership inICS and SCADA security integration and monitoring within critical infrastructure. Deep knowledge on security architecture, with hands ...

protect infrastructure, applications, and data. Partnering with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments … cyber security and platform engineering such as networking, Cloud security, CI/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming ...

protect infrastructure, applications, and data. Partnering with other engineering and security teams to embed security best practices Automation to support security tooling like SIEM tooling log ingestion Firewall and network management within hybrid cloud and on-premises environments Develop and maintain security policies, standards and procedures Conduct security assessments … cyber security and platform engineering such as networking, Cloud security, CI/CD pipelines, virtualisation, and IaC Software development skills using Linux or WSL SIEM and log routing experience in tools such as Splunk, Sentinel, Cribl, and ELK Familiarity with AWS, Azure, and GCP services Proficiency in scripting or programming ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity. Security Operations & Incident ResponseMonitor and investigate … improve the detection stackWhat You'll Bring: Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

onboarding of EMEA detection rules into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE … experience). Strong background in security incident investigation, threat analysis, and threat hunting. Experience reviewing, tuning and validating detection rules and security alerts within SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, or LogRhythm . Experience working with Microsoft Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex ...

support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing … updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. ...