15 of 15 SIEM Jobs in Hampshire

understanding of threat models, attack vectors, and defence‐in‐depth strategies. Proficiency in cloud security (AWS, Azure, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption, and security protocols. Familiarity with MOD security requirements, Classification Guides, and defence standards. Knowledge ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

mitigation. Strong understanding of network security architecture and boundary security design. Proficiency in security incident investigation and threat analysis. Knowledge of security event management, SIEM and log analysis. Understanding of vulnerability assessment and remediation processes. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of managed service delivery ...

cyber security and information security defences. The postholder will be responsible for ensuring the health, optimisation, and continuous improvement of cyber security tooling, including SIEM, endpoint protection, vulnerability management, and cloud security controls. The role will focus on technical implementation of cyber controls, such as maintaining log ingestion pipelines, improving ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

Troubleshoot any Remote Password Changing (RPC) failures from the previous 24 hours to prevent account lockouts or "stale" credentials. Correlate server alerts with your SIEM to investigate suspicious activity, such as multiple failed login attempts or large-scale secret exports. Key Skills Required Deploying and managing security tooling (vulnerability scanning ...

and Access Management (including RBAC and A/PBAC, permissions management), ● Cryptographic techniques and implementations ● IT asset management and tracking ● Vulnerability Management and Patching ● SIEM principles, products and supporting logging infrastructure ● Containerisation and virtual machine security ● Delivering secure solutions against project expectations ● Strong awareness of and commitment to industry best ...

and engineering capabilities that support a modern Security Operations Centre (SOC). The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding … develop automated workflows, and help shape the future direction of SOC engineering. Key Responsibilities Design, deploy and optimise SIEM, XDR and SOAR platforms. Build security automation, integrations, and response workflows. Develop log parsing, data normalisation and telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point ...

controls, user roles, permissions and privileged session monitoring. Monitor vulnerabilities, apply security patches and maintain platform security. Review audit logs and correlate alerts with SIEM data to investigate suspicious activity. Troubleshoot security issues involving firewalls, load balancers, identity systems and credential-management tools. Essential criteria Experience deploying and managing security … Desirable criteria Experience working within Defence, National Security or protectively marked environments Experience with Active Directory, Windows Services, Scheduled Tasks and IIS SIEM monitoring and security investigation experience Knowledge of RBAC, session monitoring and privileged session recording Experience with firewalls, load balancers and network security controls Knowledge of database backup ...

analysis Analyse complex security events across endpoints, networks, cloud, applications, and infrastructure Improve and develop incident response playbooks, SOC procedures, and technical standards Support SIEM use case development, log onboarding, and detection engineering initiatives Work with internal teams and external MSSP providers to improve monitoring and detection coverage Support and … senior incident response role Proven experience managing and responding to high-priority cyber security incidents Strong knowledge of: Incident Response Threat Hunting Digital Forensics SIEM platforms SOAR tools Detection Engineering Experience investigating alerts across: Endpoint security tools Network security tools Cloud environments Enterprise applications Strong understanding of threat intelligence, attack ...

inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. ArcSight SIEM Engineer (DV Security Clearance) Position Description At CGI, we're redefining how technology protects the nation. As an ArcSight SIEM Engineer, you'll play … collection and analysis systems are secure, efficient, and future-ready. Working within a collaborative client-site environment, you will develop, configure, and optimise ArcSight SIEM toolsets, ensuring the seamless integration of new capabilities to support national security operations. You will also automate release and deployment processes to improve quality and ...