16 of 16 Remote/Hybrid SIEM Jobs in the North West

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

platforms using REST APIs, SDKs, or webhooks. Experience building integrations with enterprise systems is highly desirable. Security Good understanding of cybersecurity concepts, such as: SIEM SOAR Identity and Access Management Threat Detection Incident Response Authentication and Authorization Experience with offensive security techniques, adversary emulation, or penetration testing is beneficial ...

Incident Response/DFIR consulting Digital forensics and malware analysis Threat hunting and compromise assessment Security operations or advanced investigation roles Experience working with SIEM, EDR and forensic tooling Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial Requirements: Based in the UK with full and permanent ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

leader in consulting, technology services, and digital transformation, committed to delivering positive change through technology and human collaboration. They are looking for a Splunk SIEM Engineer with active SC Clearance in place to design, develop and improve software, utilising various engineering methodologies, that provides business, platform, and technology capabilities … customers and colleagues. You will need to demonstrate your Multi-Platform SIEM Expertise: you need proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience ...

Security environment. A good practical knowledge of security technologies and wider business solutions including Firewalls, IDS/IPS, Identity and access management, SIEM, EDR, PAM, TIP, remote working and cloud technologies. Experience of delivering presentations to large groups of stakeholders Experienced in developing and operating Security Operations Centre capabilities. Desirable ...

skills and professional demeanour Proficient in Microsoft Office Applications Capacity to use analytical thinking to draw reasonable conclusions from various data sources, such as SIEM platform, Threat Intelligence and a spectrum of data logs, in support of a cyber incident. Desirable Experience Experience working in a fast-paced operational environment ...

mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions … knowledge of CI/CD pipelines and DevSecOps practices. Strong understanding of cloud security controls, security frameworks, and compliance requirements. Hands-on experience with SIEM platforms and cloud security tooling. Experience with incident, problem, and change management processes. Working knowledge of Wiz Cloud and Wiz Defend security platforms. Strong containerisation ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Knowledge/experience ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

assets from threats and risks by monitoring, detecting, analysing, and responding to security incidents. Key Responsibilities Oversee the day to day running of our SIEM solution (Chronicle) working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team. Define and facilitate the creation of new rules … fine-tuning existing rules within SIEM. Investigate SIEM alerts and other security incidents through to completion. Work within the Information Security Team to provide a dynamic monitoring and incident response capability. Monitor and analyse security events identifying trends, attacks, and potential threats. Identify and raise problems. Communicate & escalate these ...

configuration of Sentinel and log sources. Co-ordination of the testing, implementation and configuration of new data sources. Contribute towards the management of SIEM content such as detections. Line Management responsibilities for NMC Cyber Security Engineers. Working with wider NMC teams, contributing to Continual Service Improvement and innovations. What … need to succeed in the role Essential Experience of supporting and developing SIEM platforms in the context of a Security Operations Centre across a multi-tenant environment. Practical experience in the creation, testing, implementation, and support of custom tooling to support Security Operations. Initiative and the ability to produce quality ...

multiple cyber and infosec domains. With the support of the Cyber Security Manager and other security team members, this role will touch on IAM, SIEM, EDR and vulnerability management tool tweaking, integrating security into project life cycles, GRC certifications, 3rd party risk and assurance and more. I'm looking … expecting candidates to be experts across all of these fields, however, the more the better: Review, develop, monitor and mature the SIEM, EDR, email security and vulnerability platforms Support ongoing development and monitoring of IDS/IPS, detection and response solutions and other threat detection systems. Working with in-house ...

Infrastructure as Code principles Implement platform hardening and security best practices across the AWS environment Integrate cloud infrastructure and applications with security tooling, including SIEM, DLP, and other security platforms Manage identity and access controls across the environment, including SSO, IAM, and least-privilege access Monitor and improve platform security … networking, including VPCs, subnets, routing, and security groups Experience with cloud security and platform hardening Knowledge of integrating platforms with security tooling such as SIEM and DLP solutions Experience managing identity and access controls, including AWS IAM and SSO Commercial experience working with MongoDB Strong understanding of security best practices ...

implementation plans before taking responsibility for successful delivery. There’s also an increasing focus on modern security operations, so exposure to areas such as SIEM, SOAR and XDR would be useful. Beyond project delivery, you’ll act as a senior technical escalation point, carry out customer security audits and health … then remaining involved through implementation and ongoing support. Experience around security compliance frameworks and public-sector environments would be useful, as would exposure to SIEM, SOAR, XDR and infrastructure automation. More than anything, they want somebody who can take technical ownership. Someone who can get into the detail when needed ...