26 to 43 of 43 SIEM Jobs in Hampshire

plans for the Palo Alto Networks portfolio, ensuring Nomios has a clear commercial approach across areas such as network security, Cortex, XSIAM, XDR, SASE, SIEM, EDR, AI security and OT security. Increase the attachment of Nomios managed and professional services to Palo Alto Networks solutions, including relevant managed NOC, managed ...

controls and services that underpin our technology environment. This is a hands-on role where you will gain exposure across areas including endpoint security, SIEM, vulnerability management, identity and access, cloud and network security. You do not need to be a specialist across all these areas. We are looking … and ongoing operational support. Help investigate security events and technical issues, supporting containment, remediation and continuous improvement where required. Contribute to areas such as SIEM and security monitoring, vulnerability management, identity and access controls and secure configuration. Use scripting, automation and query tools where appropriate to improve security processes, reporting ...

customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.Your role as Senior Security Engineering ConsultantThe Security Engineering Consultant role sits within the Security Operations … within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A key aspect of the role ...

Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. Key Responsibilities: Design and deliver detection rulesets across SIEM and XDR platforms Develop and tune detection logic using KQL or equivalent query languages Design detection use cases aligned to MITRE ATT&CK and real … detection approaches Identify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing ...

Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities.Key Responsibilities:Design and deliver detection rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack … and validation of detection approachesIdentify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomesJob Requirements:Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

with proven capability in SOC deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/ ...

techniques and procedures (TTPs). Indicators of Compromise (IOCs) and Indicators of Attack (IOAs). Cyber Threat Intelligence (CTI). Elastic Stack or other SIEM technologies. Open-Source Intelligence (OSINT) methodologies. Communicating technical information clearly to varied audiences. Coaching, mentoring or supporting less experienced analysts. Desirable Experience CompTIA Security+, SecurityX … CISSP, CISM or similar certifications. Experience working within highly secure or government environments. Advanced SIEM engineering and detection content experience. What You'll Gain At DXC, you'll join a team where learning, innovation and career development are actively encouraged. You'll benefit from: Exposure to cutting-edge cyber security ...

techniques and procedures (TTPs). Indicators of Compromise (IOCs) and Indicators of Attack (IOAs). Cyber Threat Intelligence (CTI). Elastic Stack or other SIEM technologies. Open-Source Intelligence (OSINT) methodologies. Communicating technical information clearly to varied audiences. Coaching, mentoring or supporting less experienced analysts. Desirable Experience CompTIA Security+, SecurityX … CISSP, CISM or similar certifications. Experience working within highly secure or government environments. Advanced SIEM engineering and detection content experience. What You’ll Gain At DXC, you'll join a team where learning, innovation and career development are actively encouraged. You’ll benefit from: Exposure to cutting-edge cyber security ...

managed services and professional services. Reporting to the SecOps Solutions Architect, you will support Account Managers and customers across three key solution domains: SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence. Exposure Management – vulnerability management, CTEM and attack path analysis. Email Security. You will work … SecOps, Exposure Management and Email Security portfolios, and be able to communicate effectively with both technical and business stakeholders. Key Responsibilities: Maintain knowledge across SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management and exposure management technologies. Understand SOC operations and confidently position our Managed SOC, Managed VOC and Threat ...

technology, managed services and professional services.Reporting to the SecOps Solutions Architect, you will support Account Managers and customers across three key solution domains:SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence.Exposure Management – vulnerability management, CTEM and attack path analysis.Email Security.You will work closely with … SecOps, Exposure Management and Email Security portfolios, and be able to communicate effectively with both technical and business stakeholders.Key Responsibilities:Maintain knowledge across SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management and exposure management technologies.Understand SOC operations and confidently position our Managed SOC, Managed VOC and Threat Intelligence services.Develop ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands‐on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling Basic understanding of threat frameworks, such as ATT&CK Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

experience as a Security Engineer, Platform Engineer, or similar role Deploying and managing EDR agents Hands-on experience with Kubernetes Experience managing and administering SIEM tooling (e.g. Splunk) Experience deploying vulnerability scanning and analysis tooling (e.g. Nessus) Kubernetes observability (e.g. fluentbit) Familiarity with container security principles and tools Scripting … automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications such ...

Months | Up to £700 per day We are looking for an experienced Cyber Delivery Lead with strong expertise in Cyber Threat Intelligence (CTI), SIEM, Logging & Monitoring and Security Operations to support a major cyber security and resilience programme. Key Responsibilities Lead the delivery of cyber security initiatives across CTI, Monitoring … milestones and governance reporting. Produce technical and executive-level status reports and dashboards. Coordinate cyber, infrastructure, technology and supplier teams. Support the implementation of SIEM, Splunk, sandbox environments and threat intelligence capabilities. Drive remediation, compliance and cyber resilience activities. Essential Experience Proven experience as a Cyber Delivery Lead, Security Programme ...

Title: SIEM Engineer (SC Cleared) Location: Reading/Havant Duration:6 months Description: Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry Develop custom parsers and data transformations to normalise and enrich ingested data Design and optimise KQL queries to support effective … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

and improve security platforms controlling privileged access, credentials and administrative activity across critical infrastructure. There is also a requirement within the team for Elastic SIEM capability, so if you have strong Elastic experience alongside your security engineering background, that would also be relevant. The role You'll work across identity … group access. Monitoring privileged sessions and investigating failed authentication activity. Maintaining, patching and upgrading security platforms. Reviewing audit logs and integrating security events with SIEM tooling. Troubleshooting firewalls, load balancers and connectivity issues. Key experience Hands-on Security Engineering within complex environments. Privileged Access Management (PAM) or identity security solutions. ...

Lorien is seeking a SIEM Engineer (SC Cleared) for a Reading/Havant based 6-month contract. The role focuses on onboarding log sources into Microsoft Sentinel, developing parsers, and creating automated detection and response workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content ...

/Havant on a hybrid basis for a 6-month programme. You will spearhead CTI initiatives, drive monitoring and security operations, and coordinate with SIEM tools to strengthen threat detection and resilience. The role requires strong stakeholder engagement, governance reporting, and experience delivering security projects in complex environments. #J ...