76 to 100 of 192 SIEM Jobs in London

capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries … advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure critical security log sources with a focus on critical infrastructure services such as Active Directory (Domain Controllers, ADFS), network devices, firewalls, servers ...

/Istio), API Security, IaC security (e.g. Terraform, ARM templates).Network Security: Zero Trust, firewalls, segmentation, DDoS Protection.Security Logging and Monitoring: Security logging, SIEM integration, event correlation.And any of these would be great: CISSP, CCSP, or equivalent certifications.Azure Security Engineer Associate, Google Professional Cloud Security Engineer.Microsoft Certified: Azure Solutions Architect ...

operations center dashboards for anomalous activity.Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc.Minimum qualifications:Bachelor's degree or equivalent practical experienceCompleted relevant industry course/certification offerings such as CEH, GIAC or CompTIA Sec+.5 years of experience ...

ideally having led or owned a successful certification programmeStrong working knowledge of SOC 2, NIST CSF and other recognised security frameworksStrong technical understanding across SIEM, EDR, IAM, vulnerability management and DevSecOpsProven GDPR and data protection experience, ideally within a multi-jurisdiction environmentStrong understanding of AI security and governance, including prompt ...

center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Must be a British citizen to meet compliance and security clearance requirements. Office location will be a satellite site in Hampshire, with occasional travel ...

their practical application.SSDLC: Experience building Secure Software Development Lifecycle phases into engineering workflows.Bonus PointsExperience with security monitoring and event correlation systems (IDS/IPS, SIEM, AWS-native tooling).Knowledge of Zero Trust Architecture and its implementations (e.g., Cloudflare).Familiarity with secret management processes and tools.Experience in multi-cloud environments ...

experience and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Strong teamwork skills and attention to detailAbility to work independently as needed yet always thinking as part of a teamSelf-motivation and ...

Radio Access Networks (RAN), IMS, OSS/BSS platforms and network virtualisation (NFV/SDN). Understanding of Zero Trust architecture, identity security, encryption, SIEM, SOC integration and network segmentation. Professional certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001, NCSC CCP, TOGAF, SABSA or AWS Security. Experience working within ...

solutions on at least one major vendor stack, with Cloud Security Operations depth (e.g. Microsoft Sentinel Datalake/Defender XDR, CrowdStrike Falcon Next-Gen SIEM, Splunk Enterprise Security, Google Chronicle Security Operations, Elastic Security or Nozomi Networks across hybrid/multi-cloud integration patterns)Additional InformationOur commitment: Wavestone values and ...

Gain hands-on exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. •Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. •Support security assessments, threat modelling, technical testing and client projects. •Assist with modernising legacy VPN, proxy and firewall environments. •Work ...

Experience in Ops Sec roles, carrying out threat and vulnerability monitoring and risk assessment Strong skills working with Wazuh (essential), as well as other SIEM tools (preferably Splunk) Experience working with StreamAlert (or similar) Excellent knowledge of ISO27001, NIST or Cyber Essentials Extensive knowledge of security threats, controls, processes and ...

/Entra ID, Group Policy, O365, IntuneSolid networking foundations:TCP/IP, VLANs, DNS, VPNs, Wi-FiSecurity engineering knowledge:System hardening, endpoint security, SIEM, incident handlingISO27001, GDPR or PCI compliance exposureCertificates (SSL/TLS), WAF/DDoS, email securityAzure engineering background:Governance, networking, identity and security configurationOwnership mindset and strong ...

compliant environment, and you're comfortable in security audits and risk conversations. You're comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC.Observability ownership with Datadog (or equivalent) - you've defined SLOs, built the dashboards, and set the alerting culture.Experience leading or mentoring a DevOps team ...

phishing, BEC, and identity-related attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging ...

phishing, BEC, and identity-related attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging ...

them to a high standard on threat hunting, threat intelligence utilisation, and automated response, not just SLA compliance.Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves.Build the internal team into a trusted escalation layer, with clear incident response ...

toolset. Key Requirements:5+ years’ experience in Security Engineering or Security Architecture.Strong hands-on experience across cloud security (AWS/GCP), IAM (Entra ID), SIEM, Zero Trust and vulnerability management.Experience designing and delivering security improvements, not just operating existing controls.Comfortable influencing stakeholders and working autonomously in a fast-paced environment.Experience ...

Integrations: Build and maintain high-leverage integrations between cloud providers, SaaS platforms, and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform.Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and ...

Security Operations working within or alongside Security Operations Centre(s)Experience working in all hyperscaler environments, preferably holding Professional Cloud Architect CertificationExperience with multiple SIEM & SOAR Tooling, preferably Google SecOps (formerly Chronicle/Simplify)Experience with EDR/XDR and NDR Tooling, preferably Crowdstrike, Corelight, Microsoft Defender XDRConnect to your ...

and build relationships with C-suite and VP-level stakeholders (CIO, CISO, CTO)- • Strong knowledge of cybersecurity frameworks and technologies (e.g., NIST, Zero Trust, SIEM, EDR, MDR, IAM, threat detection, data protection)Preferred qualification - • Experience working in a matrix/overlay sales model, influencing strategy and collaborating cross-functionally with ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

and audit logging.Connector ecosystems – Experience designing secure integrations with enterprise systems such as JIRA, Azure DevOps, OpenPages/GRC, ServiceNow, SharePoint, Confluence, Git, IAM, SIEM or observability platforms.Developer enablement – Experience training, certifying or enabling distributed engineering communities, citizen developers or function-aligned delivery teams.Production AI operations – Experience with MLOps, LLMOps ...

hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity ...

continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network environments. Analyse security events to determine impact, severity, and appropriate … experience working within a Security Operations Centre (SOC) environment. Strong experience in security monitoring, alert triage, and incident investigation. Hands-on experience with: Splunk SIEM technologies Endpoint security tools Security monitoring platforms Experience developing and improving detection content and alert logic. Strong understanding of incident response processes and cyber security ...

threat modeling, code review), Identity & Access Management, Network Security, Data Protection, Incident Response. Hands-on experience implementing enterprise security solutions (Data Loss Prevention, WAF, SIEM, etc.)Preferred qualification - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or CISSP-ISSAP (Certified Information Systems Security Professional-Information Systems ...