401 to 425 of 641 SIEM Jobs in England

management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product As a Software Engineer on the Security EDR Workflows team, you will help ...

security engineer focused on AI risk, protection, detection and response. The role emphasizes ownership of AI security tool selection, deployment, and integration with existing SIEM, SOAR and EDR environments. The candidate will address AI threat landscapes, align with governance standards, and develop demonstrators that show tangible security improvements while communicating ...

this hybrid UK-wide role, you will advise engineers, implement cloud-native security controls, and support the rollout of commercial tooling such as SIEM, SAST and CNAPP across ITV. #J-18808-Ljbffr ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud‐native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

human oversight mechanisms for AI-driven workflows. Technical Skills * Scripting or development experience (Python preferred). * Experience integrating security technologies using APIs. * Understanding of SIEM, EDR, Identity and Cloud Security technologies. * Strong analytical and problem-solving skills. Desirable Experience * Experience designing an AI adoption strategy for a SOC. * Experience with … agentic AI or autonomous security workflows. * Experience with Microsoft Sentinel, Splunk or equivalent SIEM platforms. * Experience with cloud security technologies (Azure, GCP or AWS). * Experience with detection engineering and security use case development. * Experience building automation metrics and measuring operational efficiency. * Familiarity with modern AI platforms including LLMs ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

base package from £80,000 to £120,000 plus extras. You will define IAM use cases, architect solutions and integrate with cloud platforms and SIEM tools while ensuring ongoing operation and maintenance of IAM environments across client environments. #J-18808-Ljbffr ...

security opportunities. Skills/Must have: Understanding of managed security services and the wider cyber security market. Awareness of modern cyber security technologies, including SIEM, XDR and EDR solutions. Good understanding of the Microsoft Security ecosystem. Experience supporting cyber security sales, pre-sales or customer engagement activities. Benefits ...

increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

seeking a Senior Security Operations Engineer (SOC Engineer L3) to join its security function. The role is highly technical, focusing on SOC engineering, detection, SIEM/SOAR, automation and AI-driven operations. You will design and improve monitoring across a large enterprise with emphasis on AI agents and agentic workflows ...

International is seeking a skilled Detection Engineering & Automation Specialist to strengthen the Global Cybersecurity Operations. You will build, maintain and enhance security tooling across SIEM, SOAR, EDR and email security, delivering high-quality telemetry and automated detections. You will develop CI/CD pipelines, onboard new log sources and support ...

Lead Threat Detection Engineer in London to own and evolve our threat detection lifecycle across a multi-cloud environment. You will build and refine SIEM detections, automate response, and work with engineering to turn findings into scalable security improvements. The role emphasizes hands-on threat hunting, threat intelligence, and clear ...

cyber threats through robust threat hunting, detection engineering and analysis within a high-performing UK SOC. You will work with UK InfoSec teams, utilise SIEM, Network Packet Capture and AI/ML analytics, lead threat detection engineering efforts, and help investigations and security meetings. #J-18808-Ljbffr ...

with training and development to build a multi-skilled team. Key responsibilities include maintaining OT infrastructure (VMware vSphere, Windows, Unix), implementing security tooling (firewalls, SIEM), supporting incident/change processes, and testing releases across projects. #J-18808-Ljbffr ...

experience. Preferred Qualifications Experience in B2B or enterprise software, ideally within security, law enforcement, defence, or intelligence-related markets. Familiarity with digital forensics, OSINT, SIEM, or related technologies. Experience with product analytics, CRM, or customer feedback platforms such as HubSpot, Salesforce, Pendo, or UserVoice. Perks and Benefits Hybrid working arrangement ...

integrations Elasticsearch ingest pipelines, Data Streams, templates, mappings and ILM End-to-end data/feed onboarding, testing, troubleshooting and validation Elastic Security/SIEM environments High-volume ingestion architectures, including Kafka Elastic platform migrations, upgrades and optimisation We have opportunities available for both permanent consultants and Outside IR35 contractors ...

leaders · Experienced at working on bids and large or complex changes · Excellent understanding of a variety of networks and routing protocols · Network management or SIEM designs, tooling or support This contract is based on-site in Baskingstoke, some travel may be required. This is a great opportunity for an experienced ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

protocols, cryptography, authentication, authorization, and security architecture design principles Hands‐on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutions Knowledge of adversary tactics, attack stages, and detection methods ...

security protocols, cryptography, authentication, authorization, and security architecture design principlesHands-on experience with security tools and technologies such as Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Endpoint Detection and Response (EDR), malware analysis tools and email security solutionsKnowledge of adversary tactics, attack stages, and detection methodsFamiliarity with ...

Cyber Security Lead (Entra ID, Defender, Purview, SIEM, SOC, Cyber Essentials Plus, ISO 27001, NIST, CISSP, Hands-On, 3rd Party Management) Permanent Home Based Position: Technical Cyber Security Lead Location: Home Based (UK) with occasional travel Salary: £55,000 to £65,000 + strong benefits The short version: A fast … what's in place, decide what stays, what goes and what comes in, and make the case for it. You decide the SOC and SIEM model. Both are outsourced right now. Part of your brief is to work out whether that's the right setup long term or whether ...

within a customer-focused SaaS organisation. Strong hands-on experience securing cloud environments (AWS and/or GCP). Deep experience with security monitoring, SIEM platforms, EDR, detection engineering, alert triage and incident response. Experience building or improving operational security capabilities rather than simply operating existing tooling. Experience with security … tooling including SIEM, EDR, DLP, MDM and cloud security platforms. Strong understanding of attacker techniques (MITRE ATT&CK) and how to translate them into effective detections. Experience with vulnerability management and security telemetry. Understanding of modern AI tooling, AI security risks and governance considerations. Good understanding of networking, distributed systems ...

within a SOC or comparable cyber security operations environment. Experience investigating cyber security alerts and security events using enterprise monitoring techniques. Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques. Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques. Experience analysing information … environment. Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalent Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing to the development ...

within a SOC or comparable cyber security operations environment. Experience leading security monitoring activities and supervising analysts during live operational service. Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation. Experience investigating complex cyber security events and determining appropriate escalation paths. Good understanding of cyber … environment. Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent. Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms. Experience developing monitoring improvements, detection tuning, or operational process development. Experience supporting Incident Responder activities during major cyber security incidents. Experience contributing ...