76 to 95 of 95 SIEM Jobs in London

Hybrid - Law firm The SOC Engineer role sits within the Information Security function and focuses on the ongoing development and maturity of the firms SIEM platform and wider security monitoring capability. The position involves onboarding and integrating new log sources, improving data pipelines, and developing detection use cases to enhance ...

Security Manager (Utilities Purview DLP SIEM) London/WFH to £90k Do you have a broad range of security knowledge? Would you relish the opportunity to take ownership and build a security function from the ground up? You could be progressing your career at a fast-growing energy technology company … experience in a similar Security Manager role in a start-up or scale-up environment You have hands-on experience with security tools e.g. SIEM, EDR, vulnerability management, network security tools, query writing and alert tuning You have experience implementing and managing Purview DLP solutions You have experience monitoring and ...

activity, emerging attack techniques, and advanced threats. Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. Proven ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology … strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have ...

with cloud security across AWS, Azure or Google Cloud Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing … client in conjunction with this vacancy only. KEY SKILLS Security Architect, Cyber Security, ISO 27001, NIST, Cloud Security, AWS, Azure, Risk Assessment, Threat Modelling, SIEM, Defence ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small … engineering teams Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR Experience onboarding data sources and services into SIEM platforms Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth Experience deploying applications across cloud, containerised and on-premises environments Strong understanding ...

activity, emerging attack techniques, and advanced threats. Develop and execute hypothesis-driven threat hunts utilising datasets across a variety of security tooling, including EDR, SIEM, and network-layer defences. Collaborate directly with the Cyber Threat Intelligence team to operationalise intelligence, maintaining and refining hunting playbooks for priority threat actors and … logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such as Databricks. Strong investigative acumen combined with a curious, highly analytical mindset capable of navigating ambiguity. Proven ...

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

Responsibilities 🛡️ Security Operations (2/3) Incident Response: Lead and coordinate security incident triage, active investigations, and containment activities across the enterprise estate. SIEM/XDR Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using … than high-level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management ...

operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently on complex security issues and contributing to the continuous improvement of the SOC capability. You will need proven experience … senior level SC clearance held or ability to pass Interested? Please apply below. SOC Engineer, Senior SOC Engineer, Security Operations Engineer, SIEM Engineer, Splunk, Cribl, Threat Detection, Incident Response, Security Operations, SC Cleared, Public Sector, London, Remote, Contract, Inside IR35 ...

Senior Security Analyst - Cyber Security - SIEM - Qualys - IPS - IT security systems - Firewalls My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

interfaces that are intuitive for developers while remaining flexible for diverse user use cases Design and implement integrations with Security Information and Event Management (SIEM) systems, enabling users to stream monitoring alerts and security events into their existing security operations workflows Data Systems Implement efficient storage solutions for both structured ...

proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction. Automate critical security workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI. Execute regular offensive security operations, including …/Penetration Testing against agentic frameworks and LLM integrations. Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance ...

Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team, helping revolutionize security management with our AI-native Falcon Next-Gen SIEM platform – enabling customers to detect, investigate, and hunt down threats 150x faster at Petabyte scale.You'll design, architect, and develop world-class case management and … making, streamline workflows and processes, improve efficiency and drive business outcomes.Bonus points:Currently developing Go-based microservices for scalable, high-throughput architecturesExperience in cybersecurity, SIEM, SOAR, or adjacent security domainsHands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks#LI-GO1#LI-HYBRIDBenefits of Working at CrowdStrike:Market ...

Zero Trust and secure-by-design principles Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR Assess and optimise client Defender XDR and Sentinel configurations, producing detailed remediation and maturity roadmaps aligned … and MITRE ATT&CK best practices Advise on Defender XDR, Sentinel, and Entra ID integration to enable holistic security visibility, supporting migrations from Legacy SIEM platforms such as Splunk Collaborate with SOC and Incident Response teams during escalated incidents, rapidly onboarding critical assets and integrating key data sources for containment ...

experience in researching, analysing, and reporting on cyber threats or related security issues. Experience in Threat Modelling System and Security Information and Event Management (SIEM) solutions Ability to triage security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Relevant professional qualifications or training ...

External Attack Surface Management (EASM) against external footprint and cross-reference findings weekly with the CMDB Support User and Entity Behaviour Analytics (UEBA) and SIEM uplift, building detection logic around normal deal workflow behavioural baselines Skills/Experience Security operations or threat analysis background, ideally in financial services … regulated environment Hands-on experience with SIEM/UEBA, EDR, and identity tooling (Entra, Conditional Access, FIDO2/WebAuthn) Familiarity with application security vulnerability classes: deserialisation, IDOR, injection, authorisation logic Working knowledge of supply chain security practices: SBOMs, SCA, dependency management Understanding of DORA ICT risk obligations desirable (Arts. ...

join the Threat Detection and Incident Response team. You will design, implement, and scale Go-based microservices powering our AI-native Falcon Next-Gen SIEM platform and assist security analysts with rapid incident response. You will own system design, mentor engineers, collaborate across product groups, and contribute to AI-enabled ...

Hybrid - Law firm The SOC Engineer role sits within the Information Security function and focuses on the ongoing development and maturity of the firms SIEM platform and wider security monitoring capability. The position involves onboarding and integrating new log sources, improving data pipelines, and developing detection use cases to enhance … incident, change, and problem management, alongside contributing to the design and review of controls that protect the firms IT environment. In addition to SIEM development, the position contributes to broader security tooling and strategic improvements within the security operations function. The aim is to improve overall detection and response capability ...

Network Engineer/Network Analyst - Cisco, CCNP, LAN/WAN, SD-WAN, CheckPoint, Zscaler/NetScaler, Cisco ISE, Meraki WiFi, SIEM, BAU/Projects. 12 Month FTC. London Hybrid. c.£70k-£80k + Oncall + Bonus + Excellent Benefits Global Law Firm seeks an experienced Network Support Engineer to join … and network security technologies. Knowledge of load balancing, VPNs, Wi-Fi and DDoS mitigation. Solid BAU experience, problem identification and resolution Experience with SIEM platforms, threat prevention and secure network design. Experience with Business Continuity, Disaster Recovery and IT Infrastructure projects. CCNP certification (or equivalent) and strong understanding of ITIL ...