326 to 350 of 735 SIEM Jobs in England

escalate more complex incidents to senior members of the Security team.What You’ll Be Doing• Monitor, triage and investigate security alerts and incidents across SIEM, EDR,CrowdStrike and other security platforms.• Investigate suspicious endpoint, email, identity and cloud activity and support incident response activities.• Analyse security logs and indicators … years of experience within Cyber Security, Security Operations, SOC or a similar technical security environment.• Hands-on experience with cyber security technologies such as SIEM, EDR/XDR, vulnerability management or cloud security tools.• Good understanding of security alert triage, incident investigation and common cyber threats.• Understanding of networking fundamentals ...

drift detection, and deployment guardrails.Software supply-chain security: SBOMs, artifact signing, provenance, dependency controls, and build integrity.Observability and security monitoring: Prometheus, Grafana, CloudWatch, OpenTelemetry, SIEM, tracing, logging, and event correlation.API security: OAuth2/OIDC, mTLS, service mesh, gateway security, rate limiting, token validation, and service-to-service authorization.Financial services, banking ...

penetration tests, disaster recovery, and business continuity planning. Ensure vulnerability and patch management services meet service levels. Oversee and manage the effectiveness of MDR, SIEM, and SOAR services. Own security risk assessments for applications, infrastructure, and network architecture. Understanding the Business Develop a deep understanding of council, partners and local ...

alongside requirements relevant to regulated customers, such as DORA and NIS2. Security tooling: Compliance automation and monitoring tools such as Vanta, Drata and SIEM platforms. Infrastructure and IT: Kubernetes and cloud security, secrets and key management, identity providers and device management. About you You've built security programs at growing ...

Auto enrolment pension scheme, Life Assurance, Westfield Health Cash plan & Lifestyle benefits - Discount on selected stores. Responsibilities Include Develop content for a complex and growing SIEM infrastructure. This includes use cases, dashboards, active channels, reports, rules, filters, trends and active lab sessions. Use SIEM in the daily operational work, which … Advanced industry-standard SOC Security qualifications (SANS, ISC2, etc.). Proven Tier 3 SOC Engineering experience (2 years) Demonstrable experience working with SIEM technology and SIEM engineering (including tool configuration), i.e. within an enterprise SOC. Experience in the creation of use cases, analytics and playbooks. Experience with automation languages, such ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...

lead end-to-end security engineering projects in a Microsoft environment. You will work across identity and access management, cloud security, vulnerability management and SIEM/detection, with a focus on SSO improvements and Zero Trust initiatives. The role suits a hands-on security professional ready to take broader technical ...

Consulting Group is seeking an Information Security Analyst for its Security Operations Centre. The role involves monitoring security across SIEM/EDR, investigating alerts, and proactively hunting threats to protect PA's technology estate. You will develop detections, playbooks and dashboards; support forensics and post-incident reviews; and contribute ...

offers hybrid work in Greater Manchester and the opportunity to influence security strategy and automation. The ideal candidate will have hands-on experience with SIEM, EDR, IAM, WAF, and cloud security controls, plus scripting skills in PowerShell, #J-18808-Ljbffr ...

service governance, customer success and major incident coordination while driving continual improvement and ensuring exceptional service delivery. This role covers SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services, with a focus on translating security data into actionable business insights #J-18808-Ljbffr ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

Researcher's threat models and failure mode library. Maintain awareness of how enterprises currently secure coding agents (or don't), what tools they use (SIEM, DLP, CSPM), and how Watcher fits into their existing stack. Understand which failure modes are the biggest problems for security buyers, and prioritize systematically what ...

fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

/Sheffield 3 days per week. This is a 12 month temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with ...

/Sheffield 3 days per week. This is a 12 month temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

covering: CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ CompTIA Network+ CompTIA A+ Core 1 and Core 2 Practical cyber security labs and projects SOC and SIEM training Cloud security Incident response Vulnerability management CV and interview support Employment support These CompTIA certifications are internationally recognised and can support applications for roles ...

covering: CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ CompTIA Network+ CompTIA A+ Core 1 and Core 2 Practical cyber security labs and projects SOC and SIEM training Cloud security Incident response Vulnerability management CV and interview support Employment support These CompTIA certifications are internationally recognised and can support applications for roles ...

covering: CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ CompTIA Network+ CompTIA A+ Core 1 and Core 2 Practical cyber security labs and projects SOC and SIEM training Cloud security Incident response Vulnerability management CV and interview support Employment support These CompTIA certifications are internationally recognised and can support applications for roles ...

covering: CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ CompTIA Network+ CompTIA A+ Core 1 and Core 2 Practical cyber security labs and projects SOC and SIEM training Cloud security Incident response Vulnerability management CV and interview support Employment support These CompTIA certifications are internationally recognised and can support applications for roles ...