301 to 325 of 367 SIEM Jobs in London

technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments. You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating … role include: Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environmentsProactively hunting for threats and developing detection logic across SIEM and cloud security systemsParticipating in red and purple team exercises to test, validate and enhance detection and response capabilitiesDeveloping and maintaining automation workflows using tools ...

technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments. You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating … include: Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environments Proactively hunting for threats and developing detection logic across SIEM and cloud security systems Participating in red and purple team exercises to test, validate and enhance detection and response capabilities Developing and maintaining automation workflows ...

VLAN, 802.1X, SSL, and related protocols. OT Security: Strong Knowledge with securing operational technology environments, addressing unique threats and vulnerabilities inICS/SCADA systems. SIEM : Strong Understanding of SIEM technologies for log management, log analysis, and event correlation. Authentication & Access Control: Proficient in 802.1x, RADIUS, LDAP, AD, smart cards, and ...

help protect SPE's employees, productions, intellectual property, business operations, and technology environment. What you'll do: Monitor, review, and triage security alerts from SIEM, EDR, email security, identity, cloud, and other security platforms under the direction of senior analysts. Support investigation of suspected security events, including phishing, malware, credential … understanding of networking, operating systems, identity and access management, endpoint security, cloud services, email security, and common cybersecurity threats. Security operations exposure: Familiarity with SIEM, EDR, ticketing/case management, email security, vulnerability management, or log analysis tools preferred. Incident response discipline: Ability to follow playbooks, document investigative steps, preserve ...

Job Title: Information Security Operations Manager Reporting to: Information Technology Location:Head Office, White City Place, West London Contract Type: Full time, 37.5 hours per week About Us: ME+EM is one of the UK’s ...

solutions in alignment with enterprise architecture principles and security policies. Design and architect security solutions across multiple domains, including: Security Information and Event Management (SIEM) Identity and Access Management (IAM) Endpoint Security (EDR, MDM, Endpoint Management tools) Cloud and On-Premises Security Architectures Create high-level and detailed architectural designs … Qualifications & Skills Demonstrated experience creating high-level security solution designs and authoring detailed technical documentation. Proven expertise in designing solutions across multiple security domains including DLP, SIEM, IAM, and Endpoint Security. Strong background in security architecture or solution design , with at least 3+ years in a dedicated security architecture role. ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing. Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics. Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques. Current and active UK Developed ...

infrastructure teams with firewall configuration, network boundary protection, IDS/IPS and other security controls. Monitor and help configure our security technology landscape, including SIEM, endpoint protection, privileged access management and multi-factor authentication. Carry out regular reviews of security configurations, processes and controls to identify opportunities for improvement. Work … information security frameworks and security solutions, alongside a genuine interest in emerging threats and technologies. You’ll ideally have experience across areas such as: SIEM, vulnerability scanning and endpoint protection. Firewalls, IDS/IPS, Web Application Firewalls and network security. Infrastructure security, hardening and vulnerability/patch management. Windows Server ...

and infrastructure teams with firewall configuration, network boundary protection, IDS/IPS and other security controls.Monitor and help configure our security technology landscape, including SIEM, endpoint protection, privileged access management and multi-factor authentication.Carry out regular reviews of security configurations, processes and controls to identify opportunities for improvement.Work with developers … common information security frameworks and security solutions, alongside a genuine interest in emerging threats and technologies.You’ll ideally have experience across areas such as:SIEM, vulnerability scanning and endpoint protection.Firewalls, IDS/IPS, Web Application Firewalls and network security.Infrastructure security, hardening and vulnerability/patch management.Windows Server and Desktop environments.Cloud ...

environments Support security architecture and hardening initiatives across servers, operating systems, cloud platforms, Kubernetes and infrastructure services Support implementation, tuning and operational maturity of SIEM, alerting and security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and … switching, firewalling and network segmentation principles Experience with edge and web security platforms such as Cloudflare, Akamai or similar technologies Experience implementing and managing SIEM, logging, monitoring and security detection platforms Strong understanding of infrastructure hardening, IAM, privileged access management and secrets management Experience securing Kubernetes, containerised workloads and cloud ...

security, engineering, architecture, technology and client workstreams to maintain momentum, resolve delivery blockers and oversee initiatives across areas including IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust Own project governance, including RAID management, status reporting, decision tracking, change control and escalation, maintaining appropriate human review … including planning, RAID management, governance, financial tracking, resource coordination and stakeholder reporting Good understanding of security domains such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise ...

and monitoring are consistent, high-quality, and provided as a standard capability for all teams. Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configuration Work as part of a virtual SOC with the Security Operations Team to support … security for networks, systems, web applications, APIs and databases. Good understanding of secure software development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and ...

and monitoring are consistent, high-quality, and provided as a standard capability for all teams. Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configurationWork as part of a virtual SOC with the Security Operations Team to support … security for networks, systems, web applications, APIs and databases. Good understanding of secure software development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs).Knowledge of security standards and frameworks ...

design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices. This … benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making. Skills and Experience ...

and support cloud, on-premises VM, and container-based hosting. Design and configure network security devices, routers, switches, VLANs, DNS, and identity management. Lead SIEM onboarding activities, ensuring solutions support high data ingest rates. Develop test procedures covering functional and non-functional requirements. Maintain requirements and user stories, ensuring traceability … technical engineering, SOC deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ...

with experience leading projects and/or working with customersHands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etcExperience with open source collections (Telegraf, FluentBit, FluentD … increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

experience leading projects and/or working with customers Hands on knowledge of Security related products, technologies, and sources such as IDS/IPS, SIEM/Log Management, Network/Endpoint Security, Threat Detection, Incident Response, MSSP/MDR, Threat Feeds, CASB, etc Experience with open source collections (Telegraf, FluentBit … increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness- combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights ...

candidate availability. RESPONSIBILITIES Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary. Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards. Utilise playbooks, existing knowledge and accurate online resources … with current vulnerabilities, attacks, and countermeasures. Identify, respond and remediate cyber events generated through monitoring technologies. EXPERIENCE Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm). Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused ...

design and build the platform that feeds Outerlimit security telemetry from the Global portal into the tools our customers run their security operations in (SIEM, SOAR, XDR etc). Today we discover shadow AI, enforce policy at the appliance and MCP gateway, and record every tool call an agent attempts. … Platform Build signed, idempotent event delivery with bounded retry, dead-lettering and replay Build a cursor-paginated pull and export API to carry bulk SIEM and XDR telemetry Build native connectors for destinations such as Microsoft Sentinel, Splunk and XSIAM Build self-service API key and webhook management ...

posture while ensuring exceptional service delivery. This is a highly visible role that combines cyber security expertise, customer engagement and service leadership across SOC, SIEM, MDR, threat intelligence and incident response services. What You’ll Be Doing Act as the primary customer contact for managed cyber security services. Lead service … security data into meaningful business insights, recommendations and executive reports. Drive Customer Success Plans and Continuous Service Improvement initiatives. Monitor service performance across SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services. Coordinate the response to major security incidents, managing communications, escalations and stakeholder engagement. Identify security ...

background in solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile … DevOps, or Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

partners and security teams. Build and manage CI/CD pipelines that integrate DevSecOps best practices from development through to deployment. Integrate and maintain SIEM and security tooling, ensuring observability and compliance across all deployed systems. Design, develop, and debug microservices in Go (Golang), with a focus on performance, security … classified environments. Experience building and maintaining secure CI/CD pipelines and integrating security throughout the SDLC. Hands-on experience implementing or managing SIEM, monitoring, and alerting systems. Understanding of REST APIs, authentication flows, event-driven architecture, and microservice patterns. IAC and technical experience with Pulumi, Terrraform, argo and flux ...

What You’ll Do Build and manage CI/CD pipelines that integrate DevSecOps best practices from development through to deployment. Integrate and maintain SIEM and security tooling, ensuring observability and compliance across all deployed systems. Build and implement scalable, secure cloud infrastructure using Kubernetes and Pulumi (Go-based), ensuring … classified environments. Experience building and maintaining secure CI/CD pipelines and integrating security throughout the SDLC. Hands‐on experience implementing or managing SIEM, monitoring, and alerting systems. Understanding of REST APIs, authentication flows, event‐driven architecture, and microservice patterns. Excellent written and verbal communication skills, with strong documentation habits. ...

develop, test, and deploy high-fidelity rule-based and anomaly-based detections-as-code Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms Respond to alerts, cyber threats, and drive end-to-end incident response investigations Perform digital forensic investigations to include collection and analysis … automate detection and response operations Conduct threat hunts across corporate, cloud and product environments Support data engineering workflows for core security data lake and SIEM platforms Be an active member of D&R on-call rotations Coach and mentor security engineers within the detection & response team We’d love ...