101 to 125 of 788 SIEM Jobs in the UK

5+ years of professional IT experience, including a minimum of 3 years of dedicated information security experience. Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

and identity security. Microsoft Intune. Microsoft Defender XDR. Defender for Endpoint and/or Defender for Office 365. Microsoft Purview. Microsoft Sentinel or another SIEM platform. Vulnerability management. Security incident investigation. Threat analysis or Blue Team security operations. CIS Benchmarks and secure configuration assessment. Cyber security risk assessment and remediation. ...

platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities: This role has no supervisory responsibilities Posting date: Monday 19th October 2026 [11.59pm ...

would be great if you also have Experience with Zero Trust architectures beyond baseline identity and access controls, advanced security monitoring, detection engineering or SIEM tuning, or automation and scripting would be a real advantage. We’d also value exposure to enterprise AI tooling beyond standard end-user use, experience ...

maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focus Implement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security tools Collaborate with internal IT, development and third-party teams to embed security across the organisation Conduct risk assessments ...

Defender for Endpoint, Defender for Servers, Defender for Cloud Apps, Intune, Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware ...

application technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup technologies. An excellent understanding of security technologies including SIEM, firewalls, IDS/IPS, anti-virus, authentication, log management and content filtering. Good knowledge of ISMS, risk analysis, the CIA triad, attack vectors, cryptography and ...

environment, with an understanding of key regulatory guidelines (e.g., GDPR, DORA). Threat Detection & Cloud Security: Experience with intrusion detection, prevention, and management (e.g., SIEM) alongside vulnerability management on cloud systems and applications (ideally AWS and Kubernetes). Incident & Penetration Expertise: Experience leading incident response and management, with familiarity ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security ...

Good knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology ...

cloud landing zones using automation frameworks. Implement advanced networking (VPC, VPN, hybrid connectivity, load balancing, DNS, CDN) and security controls (IAM, RBAC, KMS, firewalls, SIEM integration). Automation & Infrastructure as Code (IaC): Develop, test, and maintain IaC templates using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines ...

ability to investigate suspicious or unauthorised account activity. Experience working with Endpoint Detection and Response (EDR) technologies and analysing endpoint telemetry. Understanding of SIEM platforms, security monitoring, IDS/IPS, firewalls, and network traffic analysis. Experience collecting and analysing evidence from Windows, Linux, and macOS systems, as well as mobile ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong troubleshooting, risk assessment, prioritisation and communication skills. Experience guiding colleagues, maintaining technical documentation and ...

best practices through documentation, workshops, and knowledge-sharing sessions. Contribute to continuous improvement initiatives across the wider security operations function. Skills & Experience: Experience with SIEM platforms such as Microsoft Sentinel, Splunketc Previousexperience working in a SOC, Threat Hunting, Detection Engineering, or Cyber Security Operations environment. Experience developing, testing, and tuning ...

analysing Windows security events, Azure logs and cloud telemetry. Knowledge of cyber security frameworks, attack methodologies and threat actor tactics. Experience developing and tuning SIEM detections. Strong Kusto Query Language (KQL) skills. Ability to work independently within a Security Operations environment. Excellent analytical and problem-solving skills. Desirable Skills Security ...

Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively across technical and ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

Intelligence and Red/Blue team) Experience in managing and running Threat hunting initiatives including developing Threat intelligence governance framework. In-depth experience with SIEM tools with a strategic oversight on appropriate use case methodologies. Implementation of robust security monitoring use cases and Threat hunting capabilities. Incident Response experience with ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

producing high standards of work on schedule in a pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM ...