76 to 98 of 98 SIEM Jobs in the North of England

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

business strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … designed solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success ...

services. You will lead policy and posture management, ensure zero-trust alignment, and collaborate with cross-functional teams on roadmap initiatives. The role emphasizes SIEM integration readiness, documentation, and continuous service improvement within a hybrid work setting with 2 days in the office. #J-18808-Ljbffr ...

Industrial Network Systems Engineer Company Automation Engineering Consultancy Firm Areas Defence, Factory Automation, UK Critical Infrastructure Tech CCNA, VCP, MCP, SOC, SIEM, SNMP Development Progression and technical development Based Sheffield office and various UK site work Offer Up to £55k + over time + vehicle + private medical Talentometry have ...

securing large-scale, cloud-based environments supporting critical public sector and government services. This is a hands-on engineering role focused on threat detection, SIEM engineering, security monitoring, log management, and SOC optimisation . You'll design and enhance detection capabilities, improve security visibility, and ensure organisations can rapidly identify … resilience while enabling faster, risk-based decision-making. What You'll Be Doing Detection Engineering & Threat Monitoring Develop, tune, and maintain detection rules across SIEM, EDR, and threat detection platforms. Create and optimise detection logic using technologies such as Splunk and endpoint security solutions. Map detections against the MITRE ...

implementatie en het beheer van specifieke security-oplossingen. Je bent de kartrekker voor onder andere het opzetten van ons nieuwe SOC, Microsoft Sentinel (SIEM) voor actieve threat detection en het beheren van Microsoft Defender for Cloud voor vulnerability management. Je analyseert en volgt security-incidenten op, en bent de drijvende … kracht achter de (versnelde) implementatie van een Security Operations Center (SOC). Ontwikkelen en onderhouden van detectieregels en playbooks (met SOAR/SIEM-tools); Samenwerken met collega’s om incidenten snel en effectief te mitigeren; Continu verbeteren van onze monitoring- en responsprocessen; Rapporteren van bevindingen en adviseren over structurele verbeteringen ...

looking for people who want to build something. What You’ll Do Alert Triage & Monitoring Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments. Investigate alerts to determine scope, severity, and whether escalation is warranted. Leverage AI-assisted triage and enrichment tools … lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication. Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure. Execute established ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

security issues and design effective remediation solutions Monitor and configure security tools - global EDR/XDR policies, blocklists, and automated containment rules including SIEM, EDR and respond to threat detection alerts. Maintain and enhance security monitoring capabilities through effective integrations and optimisation of security tooling, ensure effective data collection and … Detection & Response (EDR/XDR) tooling. Experience managing security tooling such as Microsoft Defender XDR, Sentinel, CrowdStrike, Splunk, QRadar, SentinelOne or similar enterprise-grade SIEM/XDR platforms. Direct experience securing Microsoft 365 tenants and standard corporate SaaS environments. Proven experience interfacing with, tuning, or triaging escalations from a third ...

Security Operations & Monitoring Support the day‐to‐day operation of information security controls and services. Monitor security tooling, alerts, and dashboards, including SOC and SIEM outputs. Investigate and respond to security events and incidents in line with agreed procedures. Escalate security incidents and risks to the Information Security Manager … detail. Experience working in regulated or enterprise environments. Exposure to cloud security concepts (e.g. Azure security services). Experience with security tooling such as SIEM, endpoint protection, or vulnerability management tools. Relevant education or certifications (or working towards) in information security. About Us Our benefits We offer all employees ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

shift basis, taking ownership of frontline threat detection and response within a busy security operations environment. Key Responsibilities: Review and triage output from SIEM, IDS/IPS and firewall platforms to detect potential compromise Act as first responder on confirmed incidents, working through investigation, containment and handover to senior staff … Open to rotating shift patterns, including nights/weekends Desirable: Industry-recognised certifications (e.g. CompTIA Security+, SSCP, CEH, GCIH) or working towards Familiarity with SIEM platforms or IT service management tools Track record of meeting SLA-driven targets in a fast-paced environment Comfortable operating within a round-the-clock ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...

findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support. Key Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling … network environments Detection tuning, validation and false-positive reduction Detection-as-Code and version control Attack simulation, purple teaming and adversary emulation Experience with SIEM platforms such as Microsoft Sentinel, Splunk or Elastic This is an excellent opportunity for a detection specialist to make a tangible impact on enterprise cyber ...

security incidents Conduct Vulnerability Management and incident response activities Prepare report incidents and SOC performance metrics to SOC Leadership Work hands on with SIEM detection tooling and prepare reporting used for the use-case development Contribute to reporting and configuration changes, enhancements, and operational alignment Ensure incident workflows, escalation paths … operations within government, defence, or critical infrastructure Previous hands on experience in Vulnerability management and incident response and security operations escalation Understanding of SIEM platforms, detection engineering, and Vulnerability alert management Familiarity with ITSM tooling, ideally ServiceNow Strong stakeholder management and reporting capability Understanding of regulated environments (MOD, HMG, Defence ...

including VPNs, VLANs, and Wi-Fi. Monitor and support servers, storage, backups, and virtual environments. Assist with patching, vulnerability remediation, endpoint security, MDR, and SIEM solutions. Support ITIL service desk processes, change management, and major incident management. Essential Skills & Experience Microsoft 365 and Entra ID administration. Intune MDM and Conditional … UniFi, Aruba, Veeam, Bitdefender, PRTG, SQL Server, MySQL, IIS, Apache, WSUS, and related technologies. Desirable ITIL Foundation. Microsoft certifications. VMware experience. Exposure to cybersecurity, SIEM, and MDR solutions. This is an excellent opportunity for a motivated IT professional looking to broaden their experience across infrastructure, cloud services, networking, and security ...

project delivery, and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

Security Engineer - AWS/SIEM Manchester - 4 days in the office, 1 day working remotely £55-60k pa A successful technology company in Manchester are recruiting a Security Engineer to assess and evaluate the effectiveness of existing security controls. You will also be responsible for the design and implementation … mitigate risks. Your experience should include: Firewall and Intrusion Detection system implementation Responding to security incidents and events Performing security audits Maintaining security controls SIEM and Cloud (preferably AWS) As part of a small team you will be solely responsible for ensuring the technical team meet security standards and pass ...

role is full-time and on-site, collaborating with IT teams to protect systems and data while improving security practices. You will monitor SIEM, investigate incidents and contribute to a resilient security ecosystem. The ideal candidate brings hands-on security experience, threat detection know-how and familiarity with security frameworks ...

Industrial Network Systems Engineer Company | Automation Engineering Consultancy Firm Areas | Defence, Factory Automation, UK Critical Infrastructure Tech | CCNA, VCP, MCP, SOC, SIEM, SNMP Development | Progression and technical development Based | Sheffield office and various UK site work Offer | Up to £55k + over time + vehicle + private medical Talentometry have … Hands-on network installation & commission experience. You may also have/work with: VMware Certified Professional (VCP). Microsoft Certified Professional (MCP). SOC, SIEM, SNMP. Interest in IOT/OT/ICS. Experience with network monitoring and management tools. If this sounds like something you want to be involved ...

Security Engineer – Microsoft, SIEM, Sentinel, AlienVault – Hybrid – Manchester – £55,000 - £60,000 + bonus You will work with some of the best Cyber Consultants in the country within a fast‐paced and demanding Security Engineering team. This is an exceptional chance to join one of the fastest growing and most … environment – ideally MSSP Reviewing incidents, notifying malicious activities, and working with my client’s customers to investigate and solve incidents Experience with SIEM tools e.g. Sentinel Assess risks and threats for new and existing customers Monitor security alerts from security platforms Act on 2nd Line security alerts, incidents, requests, and ...

addressing security incidents and working with clients to enhance their security posture. The successful candidate will have experience in a SOC environment, particularly with SIEM tools like Sentinel. A salary range of £55,000 to £60,000 plus bonuses is available for the right candidate. #J-18808-Ljbffr ...

hybrid (London/Bristol/Leeds/Sheffield) with remote work options and a 12-month contract to start asap. Key responsibilities include SIEM engineering, threat hunting, detection engineering, and securing CI/CD pipelines, with strong emphasis on stakeholder management and cross-functional collaboration. #J-18808-Ljbffr ...