1 to 25 of 45 SIEM Jobs in Manchester

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions. Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms. Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

Entra ID and other identity providers (IdPs). Strong understanding of attacker tactics, techniques and procedures, and the incident response lifecycle. Experience using EDR, SIEM and cloud security tooling to support investigations and response activities. Ability to communicate technical findings and recommendations to senior stakeholders. Why Join ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

and analysis Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis Understanding of regulatory stipulations regarding security incidents Experience with SIEM technologies (i.e. Splunk, Sentinel) Understanding of both Windows and Unix/Linux based operating systems Ideally, you’ll also Candidates must hold or be willing ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing, SIEM, IDS Experience with vulnerability management tools and processes (Rapid 7, Wiz etc.) Experience of operating with and to the ISO27001 standard Cloud computing cyber security assurance ...

Entra ID and other identity providers (IdPs). Strong understanding of attacker tactics, techniques and procedures, and the incident response lifecycle. Experience using EDR, SIEM and cloud security tooling to support investigations and response activities. Ability to communicate technical findings and recommendations to senior stakeholders. We are committed to equal ...

essential Experience in any of the following would strengthen your application: Terraform or cloud security automation. Cloud architecture or security design reviews. SIEM and cloud security monitoring. Security assurance or compliance. Highly regulated or security-sensitive environments. Cyber Essentials or ISO 27001 environments. AWS or broader security certifications. ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. How you'll work Technical expertise ...

What you need to succeed in the role Essential: Deep understanding of adversarial TTPs and threat actor lifecycles. Proven experience in malware, phishing, and SIEM log analysis. Strong grasp of threat modelling and risk assessment frameworks. Skilled in OSINT collection and analysis. Demonstrated leadership in CTI environments, including mentoring and ...

DHCP and Active Directory integrationExperience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco DuoExperience supporting both BAU operations and project-based delivery within complex enterprise environments.Strong troubleshooting and root-cause analysis skills ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

Istio), API Security, IaC security (e.g. Terraform, ARM templates). Network Security: Zero Trust, firewalls, segmentation, DDoS Protection. Security Logging and Monitoring: Security logging, SIEM integration, event correlation. And any of these would be great: CISSP, CCSP, or equivalent certifications. Azure Security Engineer Associate, Google Professional Cloud Security Engineer. Microsoft ...

response, and managed security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

engineering experience. Advanced Python development skills including REST APIs, JSON processing, testing and debugging. Experience developing and maintaining production Splunk SOAR playbooks. Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows. Experience using Git and software development best practices. Strong understanding of SOC operations and incident ...

NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/IPS, DLP, IAM, and encryption, and you stay current with emerging threats and technologies. Certifications such as CISSP, CCSP, CISM, or TOGAF ...

Experience in a Service Desk, IOC, NOC, or managed services environment. Strong knowledge of cyber security principles, security monitoring and incident response. Experience with SIEM, endpoint security and security event investigation (Microsoft security or ELK stack preferred but not required) Experience with digital forensics and incident response (DFIR) would … ID. Understanding of networking, firewalls, SD-WAN, wireless solutions, DNS, DHCP, TCP/IP, backup and recovery. Key Responsibilities Monitor and triage alerts from SIEM, EDR and cloud security platforms. Investigate security events, escalate threats and support incident containment and response. Analyse logs and monitoring data, assist with vulnerability remediation ...

AJ Bell is seeking a Security Monitoring & Detection Engineering Lead to own the architecture and engineering of our monitoring estate, focusing on Microsoft Sentinel and threat detection. You will lead complex investigations, incident response and ...