1 to 25 of 31 Remote/Hybrid SIEM Jobs in London

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

enterprise Firewalls (Palo Alto, Cisco), WAF/DDoS protection (Imperva), and Microsoft Gateways. Threat Detection & Response: Oversee email/web security gateways (Mimecast, Menlo), SIEM/SOAR platforms, and EDR/XDR alert response (CrowdStrike, Rapid7 IDR). Identity & Access Management: Administer MFA/SSO protocols using Okta and Microsoft ...

security frameworks such as ISO 27001, NIST, Cyber Essentials Expertise in risk management, vulnerability assessment, and incident response Experience with enterprise security tools (e.g. SIEM, IDS, firewalls, encryption technologies) Knowledge of cloud and hybrid security environments Ability to communicate complex technical risks to non-technical stakeholders Experience influencing senior leadership ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

automation using PowerShell, Python, or Java. Strong troubleshooting and problem-solving skills. Experience integrating IAM solutions with cloud and on-premises applications. Familiarity with SIEM logging, monitoring, and audit requirements. Desirable Qualifications Vendor certifications in IAM technologies. Experience working within financial services or other regulated industries. Knowledge of DevSecOps, Infrastructure ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

DevOps experience Excellent communication and organisational skills Eligible to obtain SC Clearance Nice to Have Security Operations Centre (SOC) project experience Microsoft Sentinel SentinelOne SIEM or EDR technologies PRINCE2 Practitioner, PMP, CSM or PMI-ACP certifications Why Apply? Salary up to £65,000 Hybrid working One day per month ...

skills. Full UK driving licence. Desirable Skills Microsoft Azure certifications, Microsoft 365 certifications, Cisco or Meraki networking. Microsoft Defender XDR, Huntress, Sentinel or other SIEM/XDR platforms. PowerShell automation, SharePoint migrations, Azure Virtual Desktop. Cyber Essentials and security compliance. What We Offer £55,000–£70,000 depending on experience. ...

security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder ...

configuring tools to support risk-based vulnerability assessment Ability to define vulnerability classification schemas, workflows and operational reporting Experience integrating vulnerability management platforms with SIEM, case management and asset management solutions Experience deploying and configuring vulnerability management technologies across cloud and/or on-premises environments Knowledge of containerised and ...

/LLD documents for security solutions. Strong understanding of Security Operations/SOCs. Hyperscaler experience (AWS, Azure, GCP) Professional Cloud Architect cert preferred. SIEM/SOAR tooling (e.g., Google SecOps/Chronicle). EDR/XDR/NDR experience (e.g., Crowdstrike, Corelight, Microsoft Defender XDR). What's on Offer ...

. A strong, hands-on technical background in operational cyber security spanning endpoint & EDR, identity & Active Directory, Microsoft 365 & Azure, network/ZTNA, and SIEM/log management able to act as a senior technical authority within the team. Demonstrable experience leading cyber security incident response (incident command), from detection ...

security with modern cloud first architectures Technical Delivery and Validation: Leading technical validation, proof of concept and solution demonstrations Supporting integration across identity providers, SIEM, endpoint and network tooling Advising on migration from legacy VPN and network controls to Zero Trust models Working closely with delivery teams to ensure solutions ...

services and driving continuous improvement Relevant experience of leading a threat defence function/department A relevant qualification Experience in security device management and SIEM Proven experience of Incident Management and Response In depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management ...

threat models and library of failure modes. Maintain awareness of how enterprises currently secure coding agents (or don’t), what tools they use (SIEM, DLP, CSPM), and how Watcher fits into their existing stack. Customer‐facing security artifacts Own security questionnaire responses, product security whitepapers, and support for customer ...

A leading global technology and cyber organisation is building a new Security Operations Centre to support the cyber defence of a major international defence programme. The environment will span Microsoft Cloud services and on-premises ...

Cloud services and on-premises data centres across multiple regions and classification levels, creating a technically challenging and highly significant cyber security programme. The SIEM Engineer will support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft … Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats on offer Salary: £72,000 £82,000 10% annual bonus Opportunity to help build a new enterprise-scale SOC from the ground up Hybrid ...

Asset & Application Visibility Programme — bringing continuous, automated discovery to the full estate • Zero Trust enforcement — identity-aware access across remote and internal services • SIEM engineering, detection tuning, and vulnerability management — focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms … security engineering or architecture, with clear technical depth and autonomy • Proven hands-on delivery across cloud security (GCP/AWS), identity (Entra ID), SIEM/detection engineering, DLP, or zero trust — ideally three or more • Strong foundations in networking, operating systems, identity protocols, and cloud architecture • A track record ...

Security Manager (Utilities Purview DLP SIEM) London/WFH to £90k Do you have a broad range of security knowledge? Would you relish the opportunity to take ownership and build a security function from the ground up? You could be progressing your career at a fast-growing energy technology company … experience in a similar Security Manager role in a start-up or scale-up environment You have hands-on experience with security tools e.g. SIEM, EDR, vulnerability management, network security tools, query writing and alert tuning You have experience implementing and managing Purview DLP solutions You have experience monitoring and ...

activity, emerging attack techniques, and advanced threats. Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. Proven ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology … strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have ...

with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing … client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small … engineering teams Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR Experience onboarding data sources and services into SIEM platforms Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth Experience deploying applications across cloud, containerised and on-premises environments Strong understanding ...

activity, emerging attack techniques, and advanced threats. Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. Proven ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...