12 of 12 Remote/Hybrid SIEM Jobs in Northern Ireland

Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams ...

platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities: This role has no supervisory responsibilities Posting date: Monday 19th October 2026 [11.59pm ...

such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks.* Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement.* Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and ...

vendor/third-party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

other enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance. Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures. Proven ability to influence technical decisions and drive adoption of secure patterns and ...

means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Join our Digital & Data team and work alongside cyber security, product, design and technology specialists … their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures ...

processes, with a focus on security risks and mitigations. Deep knowledge of technical details, integration, and functions of security tools and platforms (e.g., IAM, SIEM, vulnerability management, cloud security). Evaluating potential system enhancements and upgrades, influencing the security product roadmap. Identifying and implementing process improvements and product simplification opportunities ...

with JSONB; in-process caching with invalidation Security telemetry: Windows event logs, Active Directory, M365/Graph API, NetFlow Insider threat/UEBA/SIEM product experience Porting or re-platforming an existing system against a live reference implementation Comfortable reading C# well enough to port from it Agile, cross ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and … Experience with data classification, data handling, or data protection strategies that support DLP in cloud-hosted systems. Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response. Hands-on involvement in incident response or post-incident analysis from an engineering perspective (e.g., improving detections ...