1 to 25 of 35 Remote/Hybrid SIEM Jobs in the South East

regulated environment. Essential Experience Cyber Security Operations and Cyber Defence. Vulnerability Management and remediation. Security Incident Response and Major Incident Management. Security Monitoring and SIEM platforms. Threat Intelligence. Cloud Security, ideally Azure. Data Loss Prevention (DLP). Network Security. Security Governance and Risk Management. Working within regulated environments. Technical Knowledge ...

core network protocols (TCP/IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP). Framework Knowledge: Solid comprehension ...

Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

work some weekends and holidays Post-secondary education in Cybersecurity, comparable Desirable: Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash scripts ...

Architect endpoint protection, DLP and advanced threat protection solutions Design application security, API security and secure SDLC integration Architect Security Operations Centre (SOC) and SIEM capabilities Lead security technology evaluation, selection and implementation programmes Technical Leadership & Governance Lead security technical teams and provide architectural mentoring Establish security design standards, architecture … network security, micro-segmentation and secure access technologies Proficiency in cloud security across Azure, AWS or equivalent platforms Knowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewalls Understanding of cryptography, encryption standards and secure communication protocols Familiarity with MOD security requirements, defence standards and ...

cloud-first or SaaS environment. Technical Expertise: Hands-on experience engineering and testing security controls across major cloud infrastructure, IAM systems, endpoint tools, and SIEM monitoring platforms. Framework Knowledge: Strong working familiarity with trust service criteria, information security risk models (such as ISO 27001, NIST, or CIS benchmarks), and third ...

Agile methods such as SCRUM; Enterprise security packages, security enforcing software and devices, such as identity management and federation, cryptography, public key infrastructure, firewalls, SIEM, vulnerability scanning, etc. Additional Requirements: Must be eligible and willing to obtain UK Government Security Clearance. Find out more information about the Security Clearance ...

across a modern technology estate including: Microsoft Azure Microsoft Intune Okta Identity & Access Management Zscaler SentinelOne Mimecast Abnormal AI Tenable KnowBe4 SD-WAN Technologies SIEM and Security Monitoring Platforms About You We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder ...

/ZTNA rollout — identity-aware access across remote and internal services Automating identity lifecycle (JML) in Entra ID and key SaaS platforms Alongside that: SIEM engineering and detection tuning, vulnerability management, DLP, and incident response support — with a strong bias toward automation. What we're looking for An IT infrastructure ...

Policy and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy ...

cyber security or SOC experience. Good understanding of networking, DNS, IP addresses and firewalls. Knowledge of phishing, malware and common cyber threats. Exposure to SIEM or security monitoring tools. Sentinel, Defender or Splunk experience would be advantageous. Strong communication and problem-solving skills. The role is mostly remote and operates ...

required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Engineer, Cyber Security, IAM, PAM, RBAC, DevSecOps, SIEM, Vulnerability Management, Active Directory ...

owned a successful certification programme Strong working knowledge of SOC 2, NIST CSF and other recognised security frameworks Strong technical understanding across SIEM, EDR, IAM, vulnerability management and DevSecOps Proven GDPR and data protection experience, ideally within a multi-jurisdiction environment Strong understanding of AI security and governance, including prompt ...

oConfiguration Manager oSystem Center Service Manager oSystem Center Operations Manager Trelix Endpoint Protect Trend Micro Apex One Security Nextcloud Cireson Asset Management ManageEngine Log360 SIEM IRIS CACADE Veeam Backup and Restore Solutions Factory Symphony Desirable Qualifications: Bachelor’s or Master’s degree in: Computer Science, Engineering, or a related field ...

advantageous. Zscaler architect-level and ZDX certifications would be a strong advantage. Broader cyber security knowledge across areas such as SOC, EDR, vulnerability management, SIEM or compliance is desirable. Wider security certifications such as CISSP, Microsoft security certifications or relevant vendor credentials are beneficial. What ...

incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM, EDR, cloud security, and detection technologies A methodical approach, strong technical judgement, and the ability to remain calm during high-pressure incidents This is a hybrid ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

Senior SOC Engineer at Nomios, you’ll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection and response … intelligent workflows. You’ll also lead customer onboarding in collaboration with SOC Operations, ensuring secure, efficient deployments aligned with our model. Working directly with SIEM/XDR platforms and custom tooling, you’ll have access to dedicated SOC infrastructure: lab environments for malware analysis, detection testing, threat intel development, and ...

security operations function. Key Responsibilities: Investigate, analyse and respond to security incidents across a global environment. Monitor, tune and optimise security monitoring technologies, including SIEM and EDR platforms. Lead and coordinate incident response activities, ensuring issues are investigated through to resolution. Perform regular security assessments to identify vulnerabilities and support … experience working within a Security Operations Centre (SOC) or enterprise security operations environment. Proven hands-on experience administering and optimising enterprise security technologies, including SIEM platforms, Endpoint Detection & Response (EDR), Secure Web Gateways, Email Security solutions, and Cloud Security platforms. Strong understanding of security operations, with experience in incident response ...

Team Lead Deep understanding of end‐to‐end SOC operations including alert triage, incident response, threat hunting, and case management Extensive experience with SIEM platforms, security orchestration tools, and the broader SOC technology stack Strong knowledge of threat detection methodologies, alert correlation, and incident prioritisation frameworks Expert‐level understanding … tool evaluation, selection, or implementation projects. Experience with security automation, SOAR platforms, or playbook development. Experience working with or partnering with SOC/SIEM/EDR vendors and MSSP (Managed Security Service Provider) vendors. Familiarity with product management principles, agile methodologies, or requirements gathering processes. Experience presenting to executive leadership ...

contract. People from a background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote … upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat ...

Designs, including specification of interfaces between solution components. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment … tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat … creation, testing and maintenance of AI or machine learning technologies to assist with the optimisation of work flows or play books. Experience with SIEM (Security Information Event Management) technologies ...