1 to 25 of 95 SIEM Jobs in London

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

enterprise Firewalls (Palo Alto, Cisco), WAF/DDoS protection (Imperva), and Microsoft Gateways. Threat Detection & Response: Oversee email/web security gateways (Mimecast, Menlo), SIEM/SOAR platforms, and EDR/XDR alert response (CrowdStrike, Rapid7 IDR). Identity & Access Management: Administer MFA/SSO protocols using Okta and Microsoft ...

certification (e.g., CISSP, CISM, SANS) with ongoing professional development Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure). Experience with SIEM/SOAR, detection engineering or incident automation. Experience implementing IAM tooling and access governance (e.g., PAM, IGA). Experience commissioning security testing and remediation programmes ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non-technical stakeholders Experience influencing senior leadership ...

remediation actions Security project experience Excellent problem-solving and communication skills Ability to work independently and proactively improve security operations Desirable Skills Experience with SIEM technologies Familiarity with vulnerability management and patching processes Knowledge of Microsoft 365 security technologies Security certifications such as Security+ ...

Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models ...

Security Architect, Solutions Architect, or Security Design Lead within a complex enterprise environment. Strong background across multiple security domains, including Identity & Access Management, SIEM, Cyber Threat Intelligence, Data Security, Application Security, Network Security, and Privileged Access Management. Experience designing security solutions across cloud, infrastructure, networking, automation, containerisation, and end-user ...

Security Architect, Solutions Architect, or Security Design Lead within a complex enterprise environment. Strong background across multiple security domains, including Identity & Access Management, SIEM, Cyber Threat Intelligence, Data Security, Application Security, Network Security, and Privileged Access Management. Experience designing security solutions across cloud, infrastructure, networking, automation, containerisation, and end-user ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

achieve it Within commuting distance (~1 hour) of Canary Wharf, London Technical Skills Strong KQL skills for threat hunting and incident forensics Experience with SIEM, IDS/IPS and threat intelligence platforms Familiarity with incident response frameworks and security best practice Experience with scripting and automation (e.g. Azure Logic Apps ...

security policies, standards, and operational controls; support audits, incident response, vulnerability remediation, and ensure effective use of security tooling (eg., Sentinel, Defender for Cloud, SIEM). Work closely with Operational Risk, DevOps, and Information Security teams to embed best practices into Agile delivery pipelines, balance stakeholder priorities, and drive ...

Microsoft Intune, or similar cloud technologies. PowerShell scripting experience for automation and operational tasks. Familiarity with Microsoft MMC, Event Viewer, and monitoring or SIEM tools. Understanding of backup, recovery, and disaster recovery processes. Experience working within ITIL-based service management environments. Knowledge of security frameworks and standards such as NIST ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

Threat Detection Engineer required for global legal firm. You will be responsible for advancing the maturity of the SIEM platform alongside other strategic security solutions, working closely with internal teams to improve the organisation's overall security posture. This position focuses on onboarding new log sources, optimising data pipelines, developing … review of security controls. There may occasionally be a requirement to support out-of-hours changes or respond to critical security incidents. Key Responsibilities SIEM Engineering & Optimisation Enhance and optimise SIEM performance, coverage, and detection fidelity Assess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logic Implement automation ...

areas, including: Identity and Access Management Azure and Microsoft 365 security Secure configuration and hardening Vulnerability management Endpoint and network security Logging, detection and SIEM Proven experience leading remediation, not just conducting assessments Strong track record of delivering measurable outcomes and demonstrable risk reduction Ability to engage credibly from engineering ...

with Terraform and Infrastructure as Code Experience building or supporting CI/CD pipelines, ideally using GitHub Actions Knowledge of security tooling such as SIEM, EDR, DLP, IDS/IPS, or vulnerability management platforms Scripting experience using Python, Shell, or similar languages Experience with monitoring and observability tools such ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

DevOps experience Excellent communication and organisational skills Eligible to obtain SC Clearance Nice to Have Security Operations Centre (SOC) project experience Microsoft Sentinel SentinelOne SIEM or EDR technologies PRINCE2 Practitioner, PMP, CSM or PMI-ACP certifications Why Apply? Salary up to £65,000 Hybrid working One day per month ...

and automation experience with tools like Ansible, Terraform, or Puppet. * Knowledge of network configuration, enterprise storage solutions (NetApp, EMC), and security monitoring tools (Elastic SIEM, Tenable). * Familiarity with CI/CD pipelines, Infrastructure as Code (IaC), and configuration management. * Excellent communication skills, adaptability, and a proactive approach to problem ...

skills. Full UK driving licence. Desirable Skills Microsoft Azure certifications, Microsoft 365 certifications, Cisco or Meraki networking. Microsoft Defender XDR, Huntress, Sentinel or other SIEM/XDR platforms. PowerShell automation, SharePoint migrations, Azure Virtual Desktop. Cyber Essentials and security compliance. What We Offer £55,000–£70,000 depending on experience. ...

Requirements: 5+ years experience in cyber security engineering or a related security role. Previous consulting experience is essential. Strong knowledge of security technologies, including SIEM, EDR, IAM, vulnerability management, and cloud security. Experience implementing and managing security controls in enterprise environments. Strong understanding of cyber security frameworks, risk management, and ...

duties when requested by the IT Team Leader. * Infrastructure administration and project management using existing tools. * Work closely with and monitor logs generated from SIEM & Sophos MTR. Perform threat hunts with the tools available to you as and when a security related incident occurs. * Identifying, monitoring, and defining the requirements ...

security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder ...

configuring tools to support risk-based vulnerability assessment Ability to define vulnerability classification schemas, workflows and operational reporting Experience integrating vulnerability management platforms with SIEM, case management and asset management solutions Experience deploying and configuring vulnerability management technologies across cloud and/or on-premises environments Knowledge of containerised and ...

/LLD documents for security solutions. Strong understanding of Security Operations/SOCs. Hyperscaler experience (AWS, Azure, GCP) Professional Cloud Architect cert preferred. SIEM/SOAR tooling (e.g., Google SecOps/Chronicle). EDR/XDR/NDR experience (e.g., Crowdstrike, Corelight, Microsoft Defender XDR). What's on Offer ...