151 to 175 of 789 SIEM Jobs in the UK

Entra ID and other identity providers (IdPs). Strong understanding of attacker tactics, techniques and procedures, and the incident response lifecycle. Experience using EDR, SIEM and cloud security tooling to support investigations and response activities. Ability to communicate technical findings and recommendations to senior stakeholders. Why Join ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

. Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

security assessments (including ITHC). Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs. Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

discipline that keeps evidence admissible. Two or more of Velociraptor, KAPE, X-Ways, Magnet Axiom, EnCase, FTK, Volatility or the Zimmerman tools, plus a SIEM such as Splunk or Microsoft Sentinel and query languages including KQL. Cloud and identity forensics across Microsoft 365, Entra ID and at least ...

and analysis Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis Understanding of regulatory stipulations regarding security incidents Experience with SIEM technologies (i.e. Splunk, Sentinel) Understanding of both Windows and Unix/Linux based operating systems Ideally, you’ll also Candidates must hold or be willing ...

with vulnerability management and application security testing tools, including Qualys, SonarQube and WebInspect. Familiarity with CyberArk or other privileged access management solutions. Experience with SIEM tools such as Microsoft Sentinel and Rapid7. Knowledge of email security tools such as Proofpoint. Experience using ServiceNow for incident, change and release management. Strong ...

technologies, with experience managing and operating FortiGate firewalls Proven experience with Active Directory/Azure AD, including patch and group policy management Cloud native SIEM, SOCs and SOAR Windows Server, Windows 11, and Microsoft Application Suite Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and ...

domain or secure transfer products, such as Opswat or similar Data diode or one-way transfer architectures Integration with security tooling, such as SOC, SIEM or monitoring platforms Performance and throughput optimisation for secure data transfer systems Experience supporting service management processes, including incident, problem, change and configuration management Experience ...

domain or secure transfer products, such as Opswat or similar* Data diode or one-way transfer architectures* Integration with security tooling, such as SOC, SIEM or monitoring platforms* Performance and throughput optimisation for secure data transfer systems* Experience supporting service management processes, including incident, problem, change and configuration management* Experience ...

cloud platforms such as AWS, Azure, and Google Cloud. Experience with Okta, Salesforce, Slack, Jira, and GitHub. Experience with security tools and technologies, including SIEM, IDS/IPS, and endpoint protection. Proven success in contributing to a team-oriented environment. Proven ability to provide creative solutions to problems. Thorough knowledge ...

security tools to support efficient and secure operations. What You’ll Be Doing Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems. Configure, maintain, and optimise security technologies to safeguard hybrid ...

Desirable: Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Automation of operational activities (scripts, scheduled jobs, runbooks) Experience working in high-availability ...

Desirable:* Experience supporting platforms such as CyberArk (PAM), PKI services, or cross-domain/secure transfer solutions* Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms)* ITIL-aligned service management practices (incident, problem, change)* Automation of operational activities (scripts, scheduled jobs, runbooks)* Experience working in high-availability ...

across a broad range of enterprise and defence networking technologies, including : Cisco routing, switching, and Unified Communications. Network security, firewalls, IDS/IPS technologies. SIEM and security monitoring platforms. Endpoint management and data protection solutions. Microsoft Exchange and Windows Server environments. Active Directory, SCCM. Linux administration. WAN technologies and secure ...

telemetry standard with the architect: which sources go to Sentinel, at what level, and how a new service is onboarded before go‐live. Build SIEM workbooks and dashboards for coverage, alert quality and response times, and report SOC metrics (time to detect, triage and contain) monthly. Provide tenant‐aware alerting ...

enterprise/defence environments Desirable VCP Certification Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands‐on use of DevSecOps tools and CI/CD pipelines VxRail and hyper‐converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

/defence environments## ## Desirable:* VCP Certification* Expertise with cloud platforms (AWS) and Infrastructure as Code* Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)* Hands-on use of DevSecOps tools and CI/CD pipelines* VxRail and hyper-converged infrastructure* Automation of VCF lifecycle (patching, upgrades, deployment)* Integration with ...

work some weekends and holidays Post-secondary education in Cybersecurity, comparable Desirable: Cybersecurity certifications an asset (e.g. CISSP, GCFA, or similar) Experience with SIEM technology (e.g. Splunk, ELK, etc.) Willingness to work occasional overtime during peak times or holidays Experience writing SQL queries Experience writing PowerShell, Python, or Bash scripts ...

Experience with cross-domain/secure transfer solutions (e.g. Opswat or similar)* Data diode/one-way transfer architectures* Integration with security tooling (SOC, SIEM, monitoring platforms)* Performance and throughput optimisation for secure data transfer systems* Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code* Hands ...

leadership, strong Windows and Linux disk and memory forensics, static and dynamic malware analysis, and deep OS internals knowledge. Proficiency with Splunk or comparable SIEM platforms is essential, as is scripting in Python or similar. Familiarity with Volatility, CrowdStrike Falcon, cloud forensics (AWS/Azure/GCP), EDR tools such ...

GREM, CISSP, CISM, or equivalent. Experience conducting cloud (AWS, GCP, Azure) and OT incident response. Experience working with EDR tools (CrowdStrike, Defender, SentinelOne) and SIEM solutions (Splunk, Sentinel). Experience in malware analysis and reverse engineering, network forensics, memory forensics, or mobile forensics. Experience as a Payment Card Industry ...