76 to 100 of 349 SIEM Jobs in London

equivalent technologies. Demonstrable experience troubleshooting complex network and security incidents in large-scale enterprise environments, including supporting live operational incidents, security transformation initiatives, SIEM/SOAR platforms, cloud networking and security (AWS, Azure, GCP), and Zero Trust architectures. Excellent communication, documentation, and stakeholder management skills, with the ability to produce … Criteria: Experience with cloud networking and security (AWS, Azure, GCP) Experience with Infrastructure as Code (Terraform, Ansible) Knowledge of Zero Trust architectures Experience with SIEM and SOAR platforms Experience supporting large-scale security transformation programmes Benefits and perks There's one thing people can't stop talking about when ...

Security Operations, Detection & Response or Incident Response function Strong knowledge of security monitoring, alert triage, investigations and incident response Experience with technologies such as SIEM, SOAR, EDR, NDR, identity protection and cloud security tooling Experience developing incident response plans, playbooks, runbooks and exercises Strong people leadership skills, with experience developing ...

including: Zscaler Digital Experience (ZDX) Zscaler Deception ZPA Privileged Remote Access (PRA) Experience with AWS cloud platform Experience integrating cloud security with SOC/SIEM platforms Understanding of Telecoms Security Act (TSA) requirements and implementation patterns Experience working in regulated environments such as telecommunications or critical infrastructure Exposure to DevSecOps ...

CloudFormation. Experience with container or Kubernetes security. Experience with bug bounty, penetration testing or security testing programmes. Experience with Splunk or similar logging/SIEM platforms. Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks. Experience building dashboards, metrics ...

Paris, London, Toronto and NYC MacOS, Windows, Linux workstationsGCP, Kubernetes, Terraform, Postgres, SingleStore, VaultOkta, OAuth, JWT, C#, .NET Core, TypeScript, React, Python, GoDatadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHogGoogle Workspace, Jumpcloud, Vanta, Hibob, SlackGitHub, CircleCI, ArgoCDSOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 42001Who ...

Toronto and NYC MacOS, Windows, Linux workstations GCP, Kubernetes, Terraform, Postgres, SingleStore, Vault Okta, OAuth, JWT, C#, .NET Core, TypeScript, React, Python, Go Datadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHog Google Workspace, Jumpcloud, Vanta, Hibob, Slack GitHub, CircleCI, ArgoCD ...

privilege . Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation ...

privilege . Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation ...

experience and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Strong teamwork skills and attention to detailAbility to work independently as needed yet always thinking as part of a teamSelf-motivation and ...

security tooling. Coordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediation. What you’ll bring: Hands‐on SIEM experience, ideally Microsoft Sentinel; equivalent platforms (Splunk, Chronicle, QRadar) considered. Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security ...

architecture, responsible AI standards, guardrails or governance, including Generative AI or Agentic AI, within a regulated environmentHands-on experience with security tooling such as SIEM, firewalls and IAM solutionsExperience with regulatory compliance such as GDPR or PCI-DSS within financial servicesFamiliarity with programming languages such as Python, Java or C++ ...

Proven experience delivering IT or Cyber Security projects. Strong understanding of cyber security principles, technologies and best practices. Experience delivering projects involving cloud security, SIEM platforms, Microsoft security technologies, compliance programmes or infrastructure security. Excellent stakeholder management and communication skills. Previous experience within a Cyber Security or Networking environment. Eligible ...

Cloud for security posture and compliance management Proficiency in Entra ID including Conditional Access, Privileged Identity Management (PIM), and identity governance Familiarity with SIEM platforms such as Microsoft Sentinel or Splunk — desirable Working knowledge of data protection legislation including GDPR and practical implementation of compliance controls — desirable Scripting or automation ...

preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC‐200, or Splunk Certified Power User. Essential Skills and Experience: Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behavior, and incident handling methodologies. Closing Date for Applications: 01/06/2026 Accenture reserves the right to close ...

Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and … security, network architecture and hybrid environment security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

Housing Association is seeking a Cyber Security Engineer to design, implement and maintain cyber security capabilities. You will work across Microsoft security technologies, IAM, vulnerability management, incident response and cloud security, providing security guidance on ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

capability investigating threats in enterprise and production environments, taking ownership from identification to resolution. Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber ...

systems remain secure, resilient and compliant. You will own vulnerability management, incident triage, and threat detection using Microsoft Defender, Entra ID/AD, and SIEM with KQL. The role offers hybrid working (1 day per week in South London) with potential to move into a #J-18808-Ljbffr ...

capabilities, including: Zscaler Digital Experience (ZDX)Zscaler DeceptionZPA Privileged Remote Access (PRA)Experience with AWS cloud platform Experience integrating cloud security with SOC/SIEM platforms Understanding of Telecoms Security Act (TSA) requirements and implementation patterns Experience working in regulated environments such as telecommunications or critical infrastructure Exposure to DevSecOps ...

knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting capabilities. Understanding of vulnerability management, penetration testing and security remediation. Experience developing cyber security KPIs, KRIs and management reporting. Strong people ...

Security monitoring, managing security cases & tickets, security incident analysis, and other security tasks. Analysing a variety of security logs to identify actionable events (SIEM reports, alerts, tickets, system, network, security monitoring tools) Determine the attack type based on the triage of events collected Demonstrate analytical & technical thinking when triaging system ...

and security-awareness activity, and report on incidents, vulnerabilities and control evidence to technical and non-technical stakeholders. Qualifications Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC. Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure ...