1 to 25 of 236 Remote/Hybrid SIEM Jobs in the UK

modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ...

incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAML\OATH Experience with HIDS and NIDS ...

improve operational efficiency and reduce manual effort.Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity … join a leading tech company. The Security Engineer (SIEM/XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice. As Security Engineer (SIEM/XDR), you will design, build and maintain scalable security ...

Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence ...

Bash, BatchTechnologies: Experience with Host based firewall, File Integrity Management, Data Protection, Vulnerability Management, Attack Surface Management, IT AutomationCompliance: CIS Benchmarks, STIGs, PCI, HIPPADatabase: SIEM, MSSQL, Splunk, LogScaleIdentity: Identity, Active Directory, Azure-AD, SSOCloud: AWS, Azure, and GCP#LI-GT1#LI-JP2#LI-RemoteBenefits of Working at CrowdStrike: Market leader in compensation and ...

Code (IaC) and network automation. Excellent troubleshooting, stakeholder engagement, and communication skills. Experience working in complex enterprise or multi-cloud environments. Desirable Experience: SIEM, IDS/IPS, and endpoint security integration. Network monitoring and observability tools such as SolarWinds, LogicMonitor, Splunk, BigPanda, or Wireshark. Container and Kubernetes networking concepts. Relevant ...

response and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities ...

and provide technical leadership. Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code ...

Assistwith secure remote access/VPN configurations whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

learn deeper DFIR techniques and methodologies.Required ExperienceProven experience in incident response and digital forensics, with capability in host‐based, image, and log analysis.Experience using SIEM, EDR, IDS/IPS, and other security tools to triage, investigate, and respond to incidents.Ability to perform network analysis using tools such as Wireshark, tcpdump ...

core network protocols (TCP/IP, DNS, routing, switching) and architecture design. Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites. Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP). Framework Knowledge: Solid comprehension ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise ...

outside of direct reporting structures.Desirable qualifications include:MSc in Information Security.Certified Information Systems Security Professional (CISSP).GIAC Certified Incident Handler (GCIH).Vendor certifications across SIEM, vulnerability management, web filtering, intrusion prevention or email security technologies.WHAT YOU'LL GET IN RETURNCompetitive base salary.Up to 20% bonus opportunity.25 days' holiday.7% pension contribution.Life ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell, bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC's Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key Competencies Threat Intelligence Analysis Cyber Threat ...

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...

serve as a point of contactDevelop the security baselines and documentation as per required Work with monitoring and ensure logs are forwarded to the SIEM capability Assess vulnerabilities and implement solutions and strategies that mitigate those risksIdentify, implement, and automate cybersecurity measures and best practicesCoordinating incident response across the organisation ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...