1 to 25 of 87 Remote/Hybrid SIEM Jobs in London

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS ...

improve operational efficiency and reduce manual effort.Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and ...

Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

response and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

learn deeper DFIR techniques and methodologies.Required ExperienceProven experience in incident response and digital forensics, with capability in host‐based, image, and log analysis.Experience using SIEM, EDR, IDS/IPS, and other security tools to triage, investigate, and respond to incidents.Ability to perform network analysis using tools such as Wireshark, tcpdump ...

outside of direct reporting structures.Desirable qualifications include:MSc in Information Security.Certified Information Systems Security Professional (CISSP).GIAC Certified Incident Handler (GCIH).Vendor certifications across SIEM, vulnerability management, web filtering, intrusion prevention or email security technologies.WHAT YOU'LL GET IN RETURNCompetitive base salary.Up to 20% bonus opportunity.25 days' holiday.7% pension contribution.Life ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell, bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key Competencies Threat Intelligence Analysis Cyber Threat ...

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...

serve as a point of contactDevelop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risksIdentify, implement, and automate cybersecurity measures and best practicesCoordinating incident response across the organisation ...

Security Framework.Experience developing and delivering information security strategy, roadmaps, policies and controls.Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies.Experience using technology, automation or AI to improve security outcomes or operational efficiency.Experience managing security risk ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

risk management, governance, and incident response.Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM, EDR, DLP, IDP, IPS.Hands-on experience with vulnerability management, identifying, prioritising, and driving remediation across the estate.Strong communication skills, with the ability to translate complex ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer,?Detection & Response Engineer,?SIEM Engineer,?Security Detection Engineer,Threat Hunting Engineer,?Security Automation Engineer,?SOC Engineer,?Incident Response Engineer,Cloud Security Engineer,?Network Security Engineer,?Cybersecurity Analyst (Threat Focus ...

incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact.Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack.Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you’ll also Candidates must hold or be willing ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design.Additional language requirements: N/A.Role Experience: Experience in senior roles at Financial Services ...

e.g., implementing new security tools or architectures).• Own the administration and reliability of key security platforms (such as privileged access management, EDR, and SIEM), ensuring they are well-configured, up-to-date, and fully operational; coordinate upgrades and fixes proactively.• Lead cross-functional security projects (e.g., cloud security improvements … developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).• Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure ...