101 to 125 of 192 SIEM Jobs in London

testing, reporting and evidence collection.Develop command line tools, APIs, integrations and workflows that simplify assurance activity.Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools.Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities.Use data to identify control ...

GitHub Advanced Security, SAST/DAST, secrets management, API security Endpoint: CrowdStrike, SentinelOne Network: WAF, CDN security, Zero Trust Network Access Data Security: DLP, SIEM/SOAR, logging & monitoring Vendor Security: Risk assessments, secure configuration baselines Who were looking for: Experience leading global security programmes in SaaS environments. Comfortable working ...

toolingComfortable writing and reviewing code (Python, Go, TypeScript, or similar)Experience building integrations and automating security workflowsExperience with security tools at scale — SAST, DAST, SIEM, endpoint, cloud, identity, AI/ML, vulnerability management platformsAI and agentic security knowledgeUnderstanding of AI/ML security risks, attack vectors, and vulnerabilitiesFamiliarity with agentic ...

playbooks and runbooksIdentifying systemic weaknesses that increase incident likelihood or blast radius, including:Unpatched or inconsistently patched systemsExposed services and misconfigurationsDegraded or ineffective controlsUsing SIEM and security tooling to prioritise patching and vulnerability risk based on real exposure and exploitability, not CVSS scores alonePartnering with IT, Cloud, and Engineering teams ...

house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...

Azure AD), and Azure Monitor, automating security controls and compliance checks, developing playbooks, policies and technical processes and improving Azure logging within the SIEM (Sentinel).The successful candidate will have strong security engineering skills, hands-on Azure experience (ideally supported by relevant certifications such as AZ-500) and solid scripting ...

and disaster recovery management.Proven ability to analyse industrial networks and SCADA/DCS environments across vendors such as ABB, Siemens, Yokogawa, GE, Honeywell.Experience with SIEM platforms (e.g., Splunk) for security monitoring.Excellent communication skills, including the ability to explain security issues clearly to technical teams and stakeholders in both Italian and ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity.Security Operations & Incident ResponseMonitor and investigate security … improve the detection stackWhat You'll Bring:Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

resilience. You will sit at the heart of our cyber defence operations, working daily with technologies including Microsoft O365 Defender, Entra ID, Intune, Rapid7 SIEM, and Sophos Antivirus. Youll be responsible for monitoring security events, investigating suspicious activity, responding to incidents, and continuously improving our security posture. This … cyber security What you will do: Security Monitoring & Incident Response Actively monitor alerts and telemetry across endpoints, identities, email, and cloud services using Rapid7 SIEM, Microsoft Defender, and Sophos AV. Investigate suspected cyber attacks including malware infections, phishing campaigns, identity compromise, and unauthorised access attempts. Perform triage, root cause analysis ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

securing DLG’s environments in line with compliance commitmentEnsuring security technical platforms are configured to optimise the overall security offered to DLG.Improving SIEM coverage of DLG’s overall environmentMaking sure that all changes to the production environment have been reviewed and approvedCommunicating and building relationships at various levels with ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

Observability & Security Implement and optimize network monitoring using Elasticsearch for SNMP-based telemetry, providing visibility into device health, interface utilization, and performance trends. Leverage SIEM platforms for Syslog aggregation, event correlation, and security alerting, contributing to the organization's overall security posture. Report on infrastructure activity logs, performance, availability, operational ...

skills. Ability to translate technical trade-offs into business-focused decisions supported by clear pro-and-con analyses. Experience integrating security tool outputs into SIEM platforms, engineering workflows, and adjacent security tooling. Prior experience with tools such as SafeBreach, BloodHound, Microsoft EASM, or similar technologies. ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational ...

senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational ...

SaaS apps both web and native, including their architecture, user experience considerations, and common integration patternsSecurity and performance monitoring, and 3rd party signals integrations (SIEM, WAF, etc)Understanding of the general cybersecurity landscape with respect to threats and challengesExperience with SaaS/PaaS/cloud-based services, driving their adoption ...

Defining the system specifications to support optimal performance.· Integrate workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.· Define the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protectionStrong understanding and knowledge of Information Security risk management tools and techniques.Awareness of Information Security control standards and frameworksKnowledge/experience working with firewalls ...

ISO27001, PCI and GDPR. Possibly a certified ethical hackerKnowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferredGood exposure of user environment management, including desktops ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

supporting the Cyber Defence team’s mission to stay ahead in innovation.To be considered for this role: you will have experience in SIEM maintenance, log ingestion, and developing and fine-tuning use cases, coupled with experience using Sentinel and Defender.Looking to be part of a collaborative and forward-thinking team ...

successful candidate will operate as a market-facing leader and trusted advisor for enterprise clients. They will help clients modernise their SOC, consolidate SIEM and XDR capability, improve response outcomes, and realise the value of Microsoft Security investments through practical, scalable and commercially strong solutions. Key ResponsibilitiesThe AMBG Senior Cyber ...

ForStrong experience with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring.Solid PowerShell scripting and automation skills.Experience with SIEM, SCOM, and enterprise troubleshooting tools.Knowledge of hybrid infrastructure and hyperconverged environments is advantageous.Cloud certifications are desirable but not essential. ...

OIDC, MFA and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred … GIAC, JNCIP-SEC or AWS/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA ...