51 to 65 of 65 SIEM Jobs in the North of England

closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and … policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with ...

cloud security processes, remediation activities, and operational workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong … Chef. * Strong understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

without exposing them to the public Internet. Monitor and troubleshoot traffic, user activity, and security events across ZIA and ZPA using logs, dashboards, and SIEM integrations to identify and remediate issues. Collaborate with network and security teams to implement Zero Trust architecture , optimise performance, and enforce access controls based ...

services Design and implement enterprise grade logging and monitoring solutions using OCI Logging, OCI Monitoring, Events and Alarms. Integrate OCI monitoring with third party SIEM, ITSM and APM tools (e.g. Splunk, BMC etc.) Demonstrable experience with Oracle Cloud Infrastructure (OCI), including proficiency in the design and build of services such ...

Cyber Defence Engineering Lead to develop, implement and maintain security solutions for safeguarding bank systems and sensitive information. The role requires hands-on SIEM and analytics expertise, strong Python and DevSecOps skills, and experience with IaC/CaC, GitLab, and CI/CD pipelines. The position involves leading security platform ...

Barclays seeks a Cyber Defence Engineering Lead to design, implement and maintain security solutions protecting the bank’s systems and sensitive information. You will drive cryptographic initiatives, IAM projects and secure engineering patterns across teams. ...

enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies. Key Responsibilities: * Monitor and develop SIEM and threat detection platforms * Investigate and respond to security incidents and alerts * Support vulnerability scanning, remediation, and reporting activities * Assist with development of security policies, procedures … cyber threats and recommend improvements where appropriate Key Skills & Experience: * 2-4 years' experience within a cybersecurity or infrastructure security role * Experience working with SIEM tools and vulnerability management platforms * Strong understanding of EDR, XDR, MDR, IDS/IPS technologies * Good knowledge of Microsoft security technologies and infrastructure environments * Understanding ...

technologies and play a hands-on role in building a more resilient and secure environment. Key Responsibilities Take ownership of monitoring and developing SIEM activity across the environment, helping to improve detection capability over time Manage and enhance endpoint and threat detection tooling (including EDR, XDR, and MDR platforms … backup, disaster recovery, and data protection measures Skills & Experience: Demonstrable experience in a cybersecurity or infrastructure-focused security role Practical, hands-on exposure to SIEM platforms and vulnerability management tools Strong understanding of endpoint detection and response technologies (EDR, XDR, MDR) Good working knowledge of common cyber threats, attack methods ...

improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards, and governance Represent engineering in client governance and audit activities … issues Experience & Knowledge Essential: Significant experience in security engineering and platform management Strong leadership experience managing technical teams Deep knowledge of Microsoft Defender and SIEM platforms (e.g. Sentinel) Experience in hybrid cloud and on-prem environments Strong understanding of security architecture and frameworks Experience in regulated environments (e.g. financial services ...

threats, supporting vulnerability remediation across the estate, and helping ensure compliance with industry standards and regulations. What this role involves: Develop, monitorand mature the SIEM solution. Support ongoing development and monitoring of IDS/IPS, detection and response solutionsand other threat detection systems. Analyseincidents and coordinate appropriate responses, including containment … restorationand disaster recovery, aligning solutions with business objectives. What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDRand MDR. Solid understanding of common attack vectors, security principlesand risk ...

external SOC, youll be the technical backbone of the teams day-to-day security operations. That means triaging and responding to incidents, working with SIEM outputs, tuning EDR and email security tooling, and tracking vulnerabilities through to remediation. Beyond the operational work, youll be embedded into IT projects from … technical depth Solid experience across endpoint, network and cloud security Azure/Microsoft stack in particular Comfortable working with outsourced SOC functions and SIEM platforms Familiar with ISO 27001 and Cyber Essentials Plus Certifications such as CISSP, CISM, CEH or GIAC are a plus This is a genuinely stable, values ...

engineers during major incidents. The tooling scope has a strong Microsoft orientation. You work alongside the client's SOC provider where applicable, receiving escalated SIEM alerts while also monitoring and operating endpoint, vulnerability, and simulation tooling directly. You have direct access for investigation and threat hunting purposes. You bring experience … from Microsoft Defender and related email, endpoint and cloud security tooling Receive and act on escalated alerts from the client's SOC provider or SIEM platform Take ownership of all security incidents, validating indicators of compromise and determining impact Perform detailed investigations using KQL queries in Microsoft Sentinel and telemetry ...

internal and external stakeholders to accomplish key objectives using influencing and negotiation skills. Requirements & Qualifications Hands-on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

Blue Team Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior ...