26 to 50 of 192 SIEM Jobs in London

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...

serve as a point of contactDevelop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risksIdentify, implement, and automate cybersecurity measures and best practicesCoordinating incident response across the organisation ...

Security Framework.Experience developing and delivering information security strategy, roadmaps, policies and controls.Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies.Experience using technology, automation or AI to improve security outcomes or operational efficiency.Experience managing security risk ...

Organizations (see Technical Skills below). Build security automation in Python — remediation Lambdas, compliance-check scripts, event-driven response, and integrations with ticketing/SIEM systems. Author, review, and maintain infrastructure-as-code (Terraform and/or CloudFormation) for security services, guardrails, IAM, networking, and encryption. Integrate security into GitLab ...

pursuit of ISO 27001 certification and the implementation of CIS controls.Roles and Responsibilities•Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance•Work with the network engineers to implement posture management i.e. ICE/NAC segmentation/lateral movement control and ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

cloud provider (AWS or Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders.Strong ...

cloud and data security risks, and third-party/supply chain risk.Hands-on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity.Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture choices, not just tooling.Data security: experience ...

Cloud/Container/API Security/CASB High level understanding of OT/IoT SecuritySecurity IntegrationsGood understanding of integrating multiple cybersecurity platforms, including:SIEM integrationsIdentity integrationsThreat Intelligence integrationsFirewall integrationsEndpoint integrationsCloud integrationsSOAR playbooksAPI-based security integrationsGovernance & ComplianceAwareness of:ISO/IEC 27001NIST Cybersecurity FrameworkCIS ControlsPCI DSSUK GDPRDPDPLeadership & CollaborationLead technical discussions ...

delivery (domestic and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft ...

and security methodologies.Proven experience in security operations, with solid application of core security principles and best practices.Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.Experience with Microsoft security stack, including its core security and threat protection capabilities.Excellent analytical, problem-solving, and ...

risk management, governance, and incident response.Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM, EDR, DLP, IDP, IPS.Hands-on experience with vulnerability management, identifying, prioritising, and driving remediation across the estate.Strong communication skills, with the ability to translate complex ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.Keywords: Cyber Threat Engineer,?Detection & Response Engineer,?SIEM Engineer,?Security Detection Engineer,Threat Hunting Engineer,?Security Automation Engineer,?SOC Engineer,?Incident Response Engineer,Cloud Security Engineer,?Network Security Engineer,?Cybersecurity Analyst (Threat Focus ...

incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact.Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack.Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability ...

monitoring, alert triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management.Hands-on experience with modern security operations tooling, including SIEM/XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platformsGood understanding of identity, access and cloud ...

Azure, GCP, MS365) and understanding of cloud security principles.Experience in Operational Technology (OT) and understanding of SANS standards.Familiarity with modern security technology and tools, SIEM, and security automation.Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design.BenefitsDepartmentCyberEmployment TypePermanent - Full ...

CASB, FWaaS).Managing App segmentation and connector deployment.Zero Trust Client Connector configuration and rollout.Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc.Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you’ll also Candidates must hold or be willing ...

Backup & Replication, Veeam ONE and Veeam Recovery Orchestrator (VRO).A key focus will be cybersecurity and infrastructure resilience, including endpoint security and encryption, DLP, SIEM, vulnerability management, security monitoring and patch management. Experience with Symantec, Splunk, Tenable and ManageEngine Patch Manager Plus will be advantageous.You will provide advanced support across ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design.Additional language requirements: N/A.Role Experience: Experience in senior roles at Financial Services ...

e.g., implementing new security tools or architectures).• Own the administration and reliability of key security platforms (such as privileged access management, EDR, and SIEM), ensuring they are well-configured, up-to-date, and fully operational; coordinate upgrades and fixes proactively.• Lead cross-functional security projects (e.g., cloud security improvements … developing scripts, integrations, or workflows to reduce manual effort, enhance detection capabilities, and streamline incident response (e.g., building security automation in cloud or SIEM).• Integrate security into enterprise systems and processes, working closely with Network, Cloud, and DevOps teams to embed robust security controls and best practices into infrastructure ...

CloudSec.AWS Certified Security – Speciality or equivalent practical AWS security experience.Terraform or CloudFormation expertise.Incident-management or incident-response experience.Experience with Splunk or similar logging/SIEM platforms.Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction.Experience mentoring or line-managing security engineers.What ...