14 of 14 Jobs in Manchester

InfraView Ltd is looking for a Security Engineer to join their dynamic team in Manchester, offering a hybrid work model. In this role, you will be involved in addressing security incidents and working with clients ...

function over time. Key areas of experience include: Security monitoring and alert triage Security operations/SOC workflows Vulnerability management SIEM tooling such as Sentinel, Splunk, QRadar, Rapid7 or similar Working closely with infrastructure and technical teams Improving operational processes and reducing manual effort Automation or scripting mindset beneficial This ...

Experience: Strong technical expertise in security, network, and infrastructure technologies, including experience with secure Azure/AWS cloud environments, Microsoft Defender for Endpoint, Microsoft Sentinel, and security tooling development. Proven ability to drive security automation and operational improvements using modern DevOps practices such as CI/CD and Infrastructure ...

vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations in cybercrime ...

Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response ...

Python with solid scripting in PowerShell and Bash to drive automation and operational efficiency, combined with strong observability practice (for example Azure Monitor, Sentinel, Application Insights and Log Analytics) using SLIs, SLOs and distributed tracing to sustain and improve system reliability. Autonomy and technical leadership Proven ability to work independently ...

component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement and the ability to communicate insights and concepts to others (including briefing skills ...

process to be considered for the job. Please see job description attached for full list of responsibilities. Person Specification Knowledge Knowledge of Microsoft Defender, Sentinel, including Kusto Query Language (KQL), threat hunting, analytics rule development, security monitoring, incident investigation and automation capabilities. Education/Qualifications Holds highly developed specialist knowledge ...

Security Engineer – Microsoft, SIEM, Sentinel, AlienVault – Hybrid – Manchester – £55,000 - £60,000 + bonus You will work with some of the best Cyber Consultants in the country within a fast‐paced and demanding Security Engineering team. This is an exceptional chance to join one of the fastest growing and most … ideally MSSP Reviewing incidents, notifying malicious activities, and working with my client’s customers to investigate and solve incidents Experience with SIEM tools e.g. Sentinel Assess risks and threats for new and existing customers Monitor security alerts from security platforms Act on 2nd Line security alerts, incidents, requests, and events ...

Softcat plc is seeking a Security Engineer to join our Cyber Operations team in the UK. You’ll design and deliver SIEM/Sentinel engineering, onboard customers, configure data connectors, and build dashboards to enhance threat detection and response. The role offers hybrid working (2 days in the office ...

utilizing various security tools, automation, best practice and efficiency across the platforms in use and surrounding technical practices Deliver end‐to‐end SIEM/Sentinel engineering by onboarding customers, configuring data connectors, integrations, KQL, automation, dashboards and reporting. Implement tuning, enrichment and optimisation across Sentinel and align with other SIEM ...

years' experience in a SOC or MSSP environment at Tier 2-3 or Lead level Strong hands‐on experience with SIEM platforms (e.g. Microsoft Sentinel, Splunk, Elastic, LogPoint) Experience with EDR tools such as Microsoft Defender, SentinelOne, or Bitdefender Deep understanding of MITRE ATT&CK and modern threat detection methodologies … Certifications such as SC‐200, GCIH, GCIA, Security+, or BTL1 Experience in an MSSP or multi‐customer environment Microsoft security stack experience (Defender XDR, Sentinel, M365 security) Knowledge of cloud security, email security, and vulnerability management Experience with KQL or other query languages Scripting skills (PowerShell, Python) Familiarity with SOAR ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...

identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge of DevSecOps practices and integrating security … maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations, threat hunting activities and security improvement ...