51 to 75 of 193 SIEM Jobs in London

Cyber Security Framework, NIST 800-61, GDPR, NIS2, Cyber Essentials. Minimum five years' experience in Cyber Security. Must have knowledge of the following: EDR, SIEM, NDR, applications, security architecture, IAM, PAM encryption technologies, network security, Zero Trust, secure interconnection patterns and cyber security principles. Experience within Security Operations, Incident Response ...

workstations and administrative tiering. Experience with identity governance, access reviews and entitlement management. Familiarity with zero-trust principles. Experience integrating identity-security findings with SIEM, SOAR, vulnerability-management or service-management platforms. Knowledge of Microsoft Defender XDR and related security recommendations. Experience with infrastructure-as-code or configuration-management tools. ...

recovery readiness. • Maintain infrastructure security standards, patching, and compliance requirements. • Monitor, identify, investigate, and respond to security threats and vulnerabilities. • Manage endpoint protection, firewalls, SIEM, MFA, email security, and access controls. • Implement and maintain security standards, policies, and best practices. • Work with third-party security providers as required. • Leadership and ...

optimisation of Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery.Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities.Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

Cybersecurity, Computer Science, or related field.Experience: 3–5 years in SOC, Incident Response, or Threat Analysis rolesStrong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies.Desirable skills:Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC-200, or Splunk Certified Power User.Who ...

levels.Ability to work independently and collaboratively in a fast-paced environment.Strong analytical and problem-solving skills.Keen to learn new technologies.Nice to have:Familiarity with SIEM, detect security threats and event correlation is a plus.Experience with data replication, backup, and recovery strategies.Next generation firewall experienceScripting Languages – Eg Bash and PythonTech stack ...

Services ("AWS"), Azure, etc.) and their operation and security best practices o Data loss prevention solutions o Identity and assess management solutions o SIEM o CASB o SOC design, build and operation Strong analytical mind and problem-solving skills Excellent project management and interpersonal skills In addition to the above ...

Public Key Infrastructure (public and private), Endpoint and Workload Protection, Web Application Firewalls, Secure Email Gateways and Filters, Cloud Security, Secure DNS Large-scale SIEM or security data lake implementations A strong understanding of the fundamental operations of servers, operating systems, networks, cloud services, and infrastructure An expert understanding ...

deployments.Monitoring and SecurityConfigure and maintain monitoring solutions across Azure and third-party platforms.Apply and enforce security best practices, ensuring compliance and risk mitigation.Work with SIEM tools for security monitoring and incident response.Key ExperienceProven experience as an Azure Cloud Engineer or similar role (3–5+ years).Strong expertise in cloud computing ...

services to multiple external clients rather than managing only an internal SOC. 2. Technical security operations experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft ...

flow.Familiarity with identity and access management concepts such as Okta, Azure AD, SSO, and SAML, along with how email security integrates into SOC and SIEM/SOAR workflows.Experience engaging technical administrators, CISOs, C-level executives, and legal and compliance teams, with the ability to translate complex security architecture into clear ...

management. • Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. • Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and ...

services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support … cyber security environment Strong hands-on experience us ing Ela stic and/or Sp lunk for security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint ...

lead and manage high-performing security teams. Extensive experience delivering threat intelligence and assessment. Hands-on experience with cyber security solutions such as SIEM, IDS/IPS, antivirus, and endpoint detection tools. Experience managing relationships with MSSPs, vendors, and external agencies. Strategic mindset with the ability to deploy resources effectively. ...

level capability investigating threats in enterprise and production environments, taking ownership from identification to resolution.Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber ...

with Terraform or CloudFormation.Experience with container or Kubernetes security.Experience with bug bounty, penetration testing or security testing programmes.Experience with Splunk or similar logging/SIEM platforms.Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks.Experience building dashboards, metrics or reports ...

Security Architect, Solutions Architect, or Security Design Lead within a complex enterprise environment.Strong background across multiple security domains, including Identity & Access Management, SIEM, Cyber Threat Intelligence, Data Security, Application Security, Network Security, and Privileged Access Management.Experience designing security solutions across cloud, infrastructure, networking, automation, containerisation, and end-user technology environments.Strong ...

and existing systemsCoordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediationWhat we’re looking forHands-on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) consideredPractical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture managementExperience ...

Bicep) for security tooling.Coordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediation.What you’ll bring:Hands-on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) considered.Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture ...

streamling authentication/authorization to ensure unified access control across the boardDeploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling)Respond to security incidents and harden environments post-incidents.Support control monitoring and remediation for compliance initiativesGather and analyze security ...

/information security field.Hands-on experience with cybersecurity or IT data sources, such as vulnerability scanners, endpoint detection tools, CMDBs, cloud platforms, identity systems, SIEM/logging platforms, or ticketing systems.Experience with version control tools (e.g., Git/GitHub/Gitlab) o Hands-on experience with data visualization tools (e.g. ...

obtain SC clearance. Interested? Please apply below. SOC Manager, Cyber Security Operations Manager, Security Operations Centre, SOC, incident management, threat intelligence, security monitoring, MSSP, SIEM, CISSP, CISM, ITIL, AWS, Azure, Remote, Contract, Inside IR35 ...

years in SOC, Incident Response, or Threat Analysis roles (for Lead role we'll consider 5 - 7years)Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies.Desirable skills:Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC-200, or Splunk Certified Power User.Who ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology ...

programme across Asta & its client base. This is a Technical and leading a team of Engineers and provides authoritative security direction across PAM, EDR, SIEM, DLP, identity governance, vulnerability management, and regulatory compliance.The role requires the individual to take responsibility and strengthen Asta’s security posture through hands‐on security … implementing & Integrating security controls into pipelines including security scans, policy enforcement, and dependency checking. Security Monitoring & Incident Response: Monitor security alerts and events from SIEM, EDR, firewall, IDS/IPS, & other security tools. Triage and prioritise alerts based on severity and impact. Investigate security incidents and suspicious activities using ...