326 to 350 of 367 SIEM Jobs in London

software, and network components. Develop and maintain the SOC's layout, including physical and virtual configurations. Evaluate, select, and integrate security technologies such as SIEM, IDS/IPS, firewalls, and endpoint protection systems. Ensure seamless integration of security tools and platforms to enable efficient data collection, analysis, and response. Develop … and conduct workshops to ensure the SOC team is well-equipped to handle security incidents. Skills and Qualifications Extensive knowledge of security technologies, including SIEM, IDS/IPS, firewalls, endpoint protection, and threat intelligence platforms. Experience with network architecture, operating systems, and security protocols. Proven experience in designing and implementing ...

and maintain monitoring for FinOps‐specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app/service keys are stored in KMS/Vault … expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes. Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules. Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/ ...

and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real-time response. Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault … expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes. Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules. Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/ ...

close that gap. Our mission is to enable security teams to decide and act faster across the entire threat lifecycle. The Securonix Unified Defense SIEM is the industry’s first platform powered by agentic AI and designed with a human-in-the-loop philosophy. It unifies detection, investigation, and response … result is a CyberOps experience that scales as threats evolve. Securonix is recognized as a six-time Leader in the Gartner Magic Quadrant for SIEM and a Customers’ Choice on Gartner Peer Insights. The company has been featured by leading publications including WIRED, Dark Reading, and Fortune for its innovation ...

orchestration and knowledge retrieval Developing AI solutions using Python and modern AI frameworks Working with vector databases and retrieval technologies Integrating AI capabilities with SIEM, SOAR and wider cyber platforms Designing prompts and optimising LLM performance Building proofs-of-concept and technical prototypes Developing evaluation frameworks to test model performance … systems Python development Vector databases and knowledge retrieval AI evaluation and model testing API integration and secure software engineering Cyber Security/SOC environments SIEM/SOAR technologies Rapid prototyping and PoC development You don't need to have done everything above. Strong practical GenAI engineering experience combined with ...

have created content, make sure to share with us some details along with your application. Technology tools & weapons you’ll be using: SIEM, EDR, Wireshark, Windows, Linux, VMware, Cloud Platforms Interesting resources you should check Explore our insights on Threat Ranges to understand the core environments you will be building. … unlock the role of the Senior Defensive Content Engineer at Hack The Box: Tooling & Technical Mastery: Expert proficiency with defensive security tools (e.g., SIEM, EDR, Wireshark, Volatility, Autopsy, IDA) and core domains such as detection engineering, digital forensics, and malware analysis. Content Engineering Experience: Proven track record of designing content ...

IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability … and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft ...

quality requirements. Establish relationships between business services, applications, infrastructure, OT systems, information assets and accountable owners. Coordinate integration with asset-discovery, ITSM, vulnerability management, SIEM, network management, cloud and other enterprise platforms. Oversee asset discovery and reconciliation across corporate, operational and field environments. Develop safe and proportionate approaches … . Experience with enterprise CMDB/ITSM platforms. Experience with OT asset-discovery or industrial cyber-monitoring technologies. Experience integrating CMDB, vulnerability-management, SIEM and enterprise architecture platforms. Knowledge of the NCSC Cyber Assessment Framework, IEC 62443, ISO 27001, ISO 55001 or ITIL . Experience developing information asset registers, data ...

broad generalist security engineering role in a Microsoft environment. You'll work across identity and access management, cloud security, vulnerability management, and SIEM/detection, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional VPN access and improving … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be beneficial. A great opportunity for a Security Engineer ready to take broader technical ownership ...

broad generalist security engineering role in a Microsoft environment. You’ll work across identity and access, Zero Trust, cloud security, vulnerability management, SIEM/detection and application security, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be particularly relevant.A great opportunity for a strong Security Engineer ready to take broader technical ownership ...

broad generalist security engineering role in a Microsoft environment. You'll work across identity and access, Zero Trust, cloud security, vulnerability management, SIEM/detection and application security, with an early focus on improving SSO and access management, strengthening joiner/mover/leaver processes, reducing reliance on traditional … security controls, automating manual processes and working closely with IT, Engineering and senior stakeholders. Experience across areas such as Entra ID, AWS/GCP, SIEM, vulnerability management, Zero Trust or security automation would be particularly relevant. A great opportunity for a strong Security Engineer ready to take broader technical ownership ...

Vinted Pay builds, not a parallel workstream. Find and close the operational blind spots: run deep technical reviews of our AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling (e.g. Wiz), and fix what you find - prioritised by exposure, not by finding count. Own PCI DSS and data … and translate technical risk into business consequence for senior audiences, internal and external. Comfortable in our stack - Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM and CSPM tooling - or eager to learn it, with a real interest in security and privacy as a field and the appetite to keep growing ...

advisors for sophisticated, multi-functional security initiatives at regional and global scale. We lead the compose, planning, and delivery of tailored Splunk solutions—including SIEM, SOAR, and AI-driven security operations—that address critical customer security needs. We partner with senior customer leaders to guide security adoption journeys, optimize threat … response, and ensure solutions deliver measurable business value. Your Impact Technical Leadership: Provide authority guidance within the Splunk security domain, exhibiting deep expertise in SIEM, SOAR, and Observability integrations. Strategic Advisory: Lead sophisticated, multi-functional security projects, acting as a trusted partner to CISO and IT leadership. Solution Delivery: Lead ...

Vinted Pay builds, not a parallel workstream. Find and close the operational blind spots: run deep technical reviews of our AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling (e.g. Wiz), and fix what you find - prioritised by exposure, not by finding count. Own PCI DSS and data … and translate technical risk into business consequence for senior audiences, internal and external. Comfortable in our stack - Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM and CSPM tooling - or eager to learn it, with a real interest in security and privacy as a field and the appetite to keep growing ...

London, United Kingdom | Posted on 05/13/2026 The Security Operations Analyst is a member of the Security Operations team,reporting to the Security Operations Lead. The purpose of this role is tomaintain ...

seeking a Senior Security Engineer in London with strong Microsoft, Azure, cloud and enterprise security experience. The role involves building security controls for SIEM and PKI/BYOK integrations, and configuring Defender for Cloud and Purview across a complex environment. You will lead technical delivery, often guiding a small team ...

compliant to industry standards.This role covers information protection, including data loss protection and data classification, and threat protection, including security information and event management (SIEM), user and entity behaviour analytics (UEBA), point products like anti-virus (AV) and intrusion detection system/intrusion prevention system (IDS/IPS) and penetration … ISO27001, PCI and GDPR. Possibly a certified ethical hackerKnowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferredGood exposure of user environment management, including desktops ...

Data Analytics Engineer | Splunk & Cribl | SIEM Pipelines We're hiring a Data Analytics Engineer to lead the migration, optimisation and secure operation of log ingestion and observability pipelines, with a focus on moving log sources from Splunk ingestion to Cribl Stream/Edge. The role Lead the migration … and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection Monitor and resolve pipeline and SIEM issues, and report on ingest reduction, cost savings, pipeline health and event loss ...

asset visibility, application discovery, and ownership tracking Driving zero trust and identity-aware access controls Improving identity lifecycle management and access governance Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise What they're looking for: Strong infrastructure or networking background with progression into … security engineering Hands-on experience implementing Zero Trust, SSO, IAM, and security controls from scratch Experience with Entra ID, SIEM/EDR platforms, vulnerability management, and asset visibility programmes Good understanding of Microsoft environments, endpoint security, and SaaS-heavy estates Comfortable operating autonomously in a lean, fast-moving environment where ...

proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

teams to understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. … technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping people improve their technical and professional ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace and security events with features such as APM, RUM, SIEM, Kubernetes monitoring and more, all enhancing operational efficiency and reducing observability spend by up to 70%.Solution Architects in Coralogix are key in meeting our customers … Docker, Prometheus, OpenTelemetry.* Background in Engineering/DevOps will be considered an advantage.* Previous experience in Technical Sales of Observability, Monitoring, APM, RUM, SIEM is desirable.* Proficiency in coding with high-level programming languages (Java, Go, Python) - advantage* Candidates should have hands-on experience and the ability to integrate these ...

with you. About the Role: The security landscape is constantly changing and we're focusing much of that change through CrowdStrike's Next-Gen SIEM platform. We are seeking a visionary leader to join the team that is redefining how global enterprises gain visibility into their security posture, identify critical … threats, and architect mission-critical security systems. As a Senior Product Manager for Falcon Next-Gen SIEM, you will be a cornerstone of innovation, defining the global vision for ingesting and analyzing massive data volumes from diverse partner ecosystems. Your mission: Drive the long-term organizational strategy for scalable data ...

with you. About the Role The security landscape is constantly changing and we're focusing much of that change through CrowdStrike's Next-Gen SIEM platform. We are seeking a visionary leader to join the team that is redefining how global enterprises gain visibility into their security posture, identify critical … threats, and architect mission-critical security systems. As a Principal Product Manager for Falcon Next-Gen SIEM, you will be a cornerstone of innovation, defining the global vision for ingesting and analyzing massive data volumes from diverse partner ecosystems. Your mission: Drive the long-term organizational strategy for scalable data ...

identifying risk and enforcing compliance with security standards. The role offers exposure to cloud, on-premises and hybrid environments, with opportunities to work across SIEM tooling, threat detection, and security automation. #J-18808-Ljbffr ...