76 to 100 of 746 SIEM Jobs in England

confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents. Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response. Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity ...

and maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focusImplement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security toolsCollaborate with internal IT, development and third-party teams to embed security across the organisationConduct risk assessments, vulnerability scans ...

maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focus Implement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security tools Collaborate with internal IT, development and third-party teams to embed security across the organisation Conduct risk assessments ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

cloud landing zones using automation frameworks. Implement advanced networking (VPC, VPN, hybrid connectivity, load balancing, DNS, CDN) and security controls (IAM, RBAC, KMS, firewalls, SIEM integration). Automation & Infrastructure as Code (IaC): Develop, test, and maintain IaC templates using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong troubleshooting, risk assessment, prioritisation and communication skills. Experience guiding colleagues, maintaining technical documentation and ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...

best practices through documentation, workshops, and knowledge-sharing sessions. Contribute to continuous improvement initiatives across the wider security operations function. Skills & Experience: Experience with SIEM platforms such as Microsoft Sentinel, Splunketc Previous experience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment. Experience developing, testing, and ...

bringYou'll have experience in several of the following areas:Security Operations, Security Incident Response or Security Engineering.Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies.Identity and Access Management, including MFA, Conditional Access and Privileged Access.Data Loss Prevention (DLP) technologies and policy management.Vulnerability Management and security hardening.Security ...

and agile working arrangements, helping our people achieve a positive work-life balance.Main tasks:Monitor security alerts, logs and events across key platforms including SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools. Support timely incident response, containment, remediation, recovery and post-incident ...

Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively across technical and ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer,?Detection & Response Engineer,?SIEM Engineer,?Security Detection Engineer,Threat Hunting Engineer,?Security Automation Engineer,?SOC Engineer,?Incident Response Engineer,Cloud Security Engineer,?Network Security Engineer,?Cybersecurity Analyst (Threat Focus ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using Manage Engine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

producing high standards of work on schedule in a pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM ...

experience with Infrastructure-as-code (e.g Terraform) Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling. Experience operating SIEM and/or SOAR platforms and tuning detection logic. Experience with vulnerability management and patch governance. Ability to write production-quality automation scripts. Demonstrated experience ...

Experience securing both cloud and on-premise environments Strong understanding of attacker tactics, techniques and procedures Experience working with technologies such as Defender XDR, SIEM, EDR, Vulnerability Management and SOAR platforms Familiarity with security and vulnerability frameworks (e.g. MITRE ATT&CK, CVSS, CISA KEV and NIST) Ability to query and ...

and experience with detection technologies such as YARA, along with REST API development and third-party service integrationsDeep technical expertise across security platforms including SIEM technologies (such as Splunk, Elastic, or Sentinel), SOAR platforms (such as Phantom, XSOAR, or Swimlane), and EDR solutions (such as CrowdStrike, SentinelOne, or Microsoft Defender ...

with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM, IDS/IPS and vulnerability assessment tools. Understanding of cloud security across AWS, Azure or GCP . Experience with DevSecOps, CI/CD and automated ...