3 of 3 Remote/Hybrid SIEM Jobs in Royston

model and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

security incidents, proactively hunting for threats, and continually improving security detections, controls and working practices. Key Activities: Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling. Triage security events, determine scope and impact, coordinate containment and remediation … closely related technical security role. Strong investigation, log analysis and correlation skills across endpoint, identity, email, cloud and network telemetry. Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation. Ability to document investigations clearly, maintain evidence and explain findings to technical and ...

offers hybrid working 2–3 days in the office, with a focus on protecting the technology estate and responding to incidents. You will monitor SIEM/EDR/XDR, investigate alerts, hunt threats, tune detections, support forensics, and contribute to security improvements. On-call rota participation is included. #J ...