151 to 175 of 193 SIEM Jobs in London

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

security standards.Conduct vulnerability management activities and coordinate external penetration testing.Work alongside outsourced SOC and security partners to investigate and respond to security incidents.Ensure comprehensive SIEM monitoring across the technology estate.Develop, implement and maintain information security policies, standards and procedures.Assess cyber risks and recommend appropriate mitigation strategies.Act as the internal security … Catalyst switching, Layer 2/3, OSPF and VPNs.Network security controls including Cisco ISE, TACACS, IPS and endpoint protection.Security monitoring and incident response within SIEM environments.Vulnerability management and penetration testing.Security governance aligned to ISO 27001, NIST and risk management frameworks.Developing security policies, conducting audits and managing security incidents.Desirable skills:Exposure ...

Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP).Develop and implement security monitoring and logging strategies.Investigate and analyse security incidents, including identifying root causes, determining the scope … Kubernetes threat detection and anomaly detection.Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity.Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments.Experience in contributing to security-focused open-source projects or internal security platform tooling.As a part of the UK Security Operations (SecOps ...

join. Who you are We’re interested in people who have: ● experience investigating and responding to cyber incidents ● experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents ● Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent … SIEM tool is acceptable) ● an understanding of the tools, techniques and procedures commonly used by threat actors ● good analytical and problem-solving skills ● good verbal and written communication skills It’s desirable, but not essential, that you have: ● experience with Splunk ● experience working in an Agile environment ● experience with cloud ...

. Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.Supporting the development and maintenance of security architecture ...

multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniquesAdvanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem, cloud ...

storage requirements.Defining the system specifications to support optimal performance.Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate ...

Operations (SecOps) team reporting into the IT Security Manager for the firm. Responsibilities: - Maintain and optimise the Security platform, including configuring EDR policies, tuning SIEM rules, and optimising the system for performance - Monitor for security threats, analyse alerts, and respond to incidents using security tools; conduct vulnerability scans and support … Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access Required Skills/Experience: - EDR - platform management, EDR policy configuration, and SIEM tuning - Microsoft Security: Defender (ATP), Azure Security Centre, Entra ID, Intune, Conditional Access - Identity and Access Management: CyberArk, Entra ID, SSO, MFA, and PAM solutions ...

lifecycle, coordinating responses to security incidents, driving investigations, facilitating lessons learned and ensuring improvement actions are delivered. Alongside this, you'll configure and optimise SIEM, threat protection and case management platforms, developing new detection rules, alerts and automation to improve our ability to identify and respond to emerging threats.You … Defence or Incident Response in a complex enterprise environmentProven experience managing the end-to-end security incident management lifecycleHands-on experience configuring and administering SIEM, threat protection, logging and case management platformsExperience developing threat detection use cases, alerts, dashboards and operational reportingStrong understanding of security monitoring, investigation, triage, containment, recovery ...

workflows.Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse … and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing consumer-facing web and iOS/Android applicationsExperience designing policies and administering Vault & other Hashicorp products.Experience managing ...

diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating … role include:Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environmentsProactively hunting for threats and developing detection logic across SIEM and cloud security systemsParticipating in red and purple team exercises to test, validate and enhance detection and response capabilitiesDeveloping and maintaining automation workflows using tools ...

logging, and monitoring are consistent, high-quality, and provided as a standard capability for all teams.Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configurationWork as part of a virtual SOC with the Security Operations Team to support … best practice security for networks, systems, web applications, APIs and databases.Good understanding of secure software development practices.Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners.Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs).Knowledge of security standards and frameworks (e.g. ...

technical guidance to junior analysts. You'll be responsible for: Leading investigations into medium and high-severity security incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning … looking for We're particularly interested in candidates with: 5–10 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment and remediation Experience acting as a technical escalation point ...

and benefits.Why This Role is ExcitingHigh autonomy: Lead projects from idea to deploymentInnovation-driven: Develop cutting-edge detections beyond standard SIEM rulesCollaborative: Work closely with internal teams and an outsourced SOC partnerMission-focused: Protect critical healthcare data that supports precision medicineKey ResponsibilitiesDesign and develop threat-led detections using threat intelligence … Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer, Cybersecurity Analyst (Threat ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. … Plus SAAS solutionsSQL ServerSecuritySymantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDREndpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) NetworkingCisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & StorageDell PowerEdge Servers Dell PowerVault SAN Storage Technical CompetenciesData ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

Monitor security events, alerts, and incidents across enterprise networks and systems. Manage security cases and tickets through to resolution. Analyse logs and data from SIEM platforms, security monitoring tools, network infrastructure, and endpoint technologies. Investigate and triage security alerts to identify malicious activity and determine attack methods and techniques. Follow … and Linux environments. Excellent written and verbal communication skills. Desirable Industry certifications such as GCIH, GCIA, or equivalent cyber security qualifications. Experience working with SIEM platforms and security monitoring technologies. Knowledge of Oracle and virtualised environments. What's on Offer Opportunity to work within a highly skilled cyber security team. ...

premise environments.Key ResponsibilitiesMonitor security events, alerts, and incidents across enterprise networks and systems.Manage security cases and tickets through to resolution.Analyse logs and data from SIEM platforms, security monitoring tools, network infrastructure, and endpoint technologies.Investigate and triage security alerts to identify malicious activity and determine attack methods and techniques.Follow established incident … securing and supporting Windows and Linux environments.Excellent written and verbal communication skills.DesirableIndustry certifications such as GCIH, GCIA, or equivalent cyber security qualifications.Experience working with SIEM platforms and security monitoring technologies.Knowledge of Oracle and virtualised environments.What's on OfferOpportunity to work within a highly skilled cyber security team.Exposure to complex security ...

trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendationshands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments6+ years of experience with Security Operations Center (SOC) tooling, processes, and workflowsHands-on technical mastery across SIEM, SOAR … cloud security, and threat intelligenceAbility to conceive, architect, and develop effective correlation and detection rulesFamiliarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.Strong expertise in Regular Expressions (Regex)Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plusMust ...

delivering clear and effective stakeholder communication, and mentoring other members of the SOC team.What you will doSupport SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activitiesUse cases preparation and implementation, connector deployment, maintenance & health checksResponsible for operational activities, Technology escalation support … powershell, Unix shell)Experience working in all phases of the SDLCDeep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM ToolsPrior SOC experience a plusExtensive knowledge of network and server security protocols, technologies, and productsIndustry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferredStrong oral and ...

days off rotation.RESPONSIBILITIES:• Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.• Competently operate a chosen SIEM (e.g. Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.• Utilise playbooks, existing knowledge and accurate online resources … date with current vulnerabilities, attacks, and countermeasures.• Identify, respond and remediate cyber events generated through monitoring technologies.EXPERIENCE:• Preferred experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).• Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused ...

Microsoft security solutions. Responsibilities will include: Design, implementation and support of Microsoft Sentinel and Microsoft Defender/Defender XDR Engineering and optimisation of SIEM capabilities across enterprise environments Developing and tuning KQL queries, analytics and detection rules Designing and implementing SOC automation, playbooks and Scripting Improving security event detection and … Sentinel/Azure Sentinel Microsoft Defender/Defender XDR Strong KQL/Kusto Query Language capability Security Engineering, SOC Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, Scripting, SOAR or Sentinel playbooks Cloud security assessments, controls ...

high-severity security incidents. Support containment, eradication and recovery efforts in partnership with technical stakeholders. Produce detailed incident reports and recommendations. Tune and optimise SIEM and detection rules to improve threat visibility. Identify opportunities to strengthen detection capabilities, processes and response playbooks. Provide mentoring and technical guidance to junior … within a SOC, Incident Response or Threat Analysis environment. Strong understanding of cybersecurity operations, incident response methodologies and threat investigations. Hands-on experience with SIEM and EDR platforms. Knowledge of malware behaviour, attack techniques and threat detection. Excellent analytical and problem-solving skills. Bachelor's degree in Cybersecurity, Computer Science ...

technical guidance to L1 analysts. You'll be responsible for: Leading investigations into medium and high-severity security incidents Analysing and correlating data across SIEM, EDR and other security sources Leading containment, eradication and recovery activities Conducting root-cause analysis and producing incident reports Supporting detection rule and threshold tuning … looking for We're particularly interested in candidates with: 510 years' experience across SOC, Incident Response or Threat Analysis Strong experience with SIEM and EDR technologies Hands-on experience investigating and responding to security incidents Knowledge of threat detection, containment and remediation Experience acting as a technical escalation point ...