126 to 150 of 667 SIEM Jobs in the UK

pursuit of ISO 27001 certification and the implementation of CIS controls.Roles and Responsibilities•Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance•Work with the network engineers to implement posture management i.e. ICE/NAC segmentation/lateral movement control and ...

practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot or similar AI-assisted security tooling experience managing or working closely with an outsourced ...

practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot or similar AI-assisted security tooling experience managing or working closely with an outsourced ...

Technology and/or Cybersecurity or relevant experience.Bonus Points: Incident Management and CSIRT operationChange ManagementMalicious Code: Detection and ResponseAudit, Logging, and Monitoring Controls (SIEM, UEBA, MDR/XDR).Intrusion Detection and ResponseExperience working with complex, sophisticated clientsStrong analytical capabilities and a desire to learn new thingsAble to work across multiple ...

monitoring, alert triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management.Hands-on experience with modern security operations tooling, including SIEM/XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platformsGood understanding of identity, access and cloud ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and ...

and firewall concepts; experience collaborating with network teams to design resilient architectures.Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance.Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and technology ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and ...

essential things required to be successful in the role 4+ years’ experience in a security or technical operations role Hands-on experience working with SIEM and EDR tools (essential) Experience investigating and responding to security alerts or incidents Familiarity with securing systems through patching, endpoint protection, or similar controls Working ...

CASB, FWaaS).Managing App segmentation and connector deployment.Zero Trust Client Connector configuration and rollout.Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc.Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust ...

solutions, vulnerability scanners and hardening baselines. Managing firewalls, VPNs, secure remote access and segmentation controls. Improving detection and response by working closely with SIEM/SOC teams. Ensuring critical logging, monitoring and compliance standards are always met. Automating deployments and controls using PowerShell, Python, Terraform or similar tools. Supporting vulnerability ...

ability (Python, Bash, or similar)Nice to haveBGP, FlowSpec, and traffic engineering knowledgeNetFlow/sFlow analysisIDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)SIEM experience (Splunk)Linux proficiencyVirtualisation (KVM, ESXi)Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIHBright Purple is an equal opportunities employer ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

Understanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scale Experience in operationalizing automation to support process efficiency Experience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis tools Deep understanding of both Windows and Unix/ ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you'll also Candidates must hold or be willing ...

topography and protocolsUnderstanding-of and adaptability-to regulatory stipulations regarding security incidents on a global scaleExperience in operationalizing automation to support process efficiencyExperience with SIEM technologies (i.e. Sentinel), cloud-based management and investigation consoles (i.e. Azure), and other Digital Forensics analysis toolsDeep understanding of both Windows and Unix/Linux ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

defence environmentsDesirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutionsUse of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)ITIL-aligned service management practices (incident, problem, change)Automation of operational activities (scripts, scheduled jobs, runbooks)Experience working in high-availability ...

Infrastructure environments. Experience of virtualisation platforms and associated infrastructure technologies. Knowledge of architecture and project delivery frameworks such as TOGAF and PRINCE2. Familiarity with SIEM technologies and wider network security tooling. Cisco Unified Communications and/or Asterisk PABX experience. Experience with cloud technologies including Microsoft Azure, AWS and Microsoft ...

work some weekends and holidays Post-secondary education in Cybersecurity, comparable Desirable: Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash scripts ...

enterprise/defence environments Desirable: VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

within secure/enterprise/defence environmentsDesirable: VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...

within secure/enterprise/defence environmentsDesirable:VCP CertificationExpertise with cloud platforms (AWS) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesVxRail and hyper-converged infrastructureAutomation of VCF lifecycle (patching, upgrades, deployment)Integration with enterprise identity ...