176 to 200 of 789 SIEM Jobs in the UK

/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR/DPA 2018 Hands‐on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management tools Experience leading or supporting security incident response, root‐cause analysis and post‐incident reviews, including working ...

capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries … advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure critical security log sources with a focus on critical infrastructure services such as Active Directory (Domain Controllers, ADFS), network devices, firewalls, servers ...

SANS and NCSC Guidance) Technical knowledge of information systems, infrastructure, and networks Security monitoring and testing technologies such as vulnerability scanning, penetration testing, SIEM, IDS Experience with vulnerability management tools and processes (Rapid 7, Wiz etc.) Experience of operating with and to the ISO27001 standard Cloud computing cyber security assurance ...

Managed Security Service Provider (MSSP). Digital Risk Protection/Brand Management (Rapid7, Zerofox, SOCRadar). Supply Chain Security Risk Management (Security Scorecard). SIEM tools (Microsoft Sentinel, Splunk, ELK, Siemplify). Vulnerability Management (Qualys, Nessus, Nexpose). Cyber Security certifications (e.g., CompTIA, NIST, ISO27000, SOC2, GDPR). What ...

Cyber Security Management, Cyber Security Leadership or Security Operations Management Incident Response and Security Operations Vulnerability Management Microsoft Defender and Microsoft security technologies SIEM and security monitoring tools Security governance and cyber resilience Frameworks such as ISO27001, Cyber Essentials or NIST Why Apply? This is an opportunity to take ownership ...

data isolation in multi-tenant systems AWS security services, infrastructure as code, and enterprise identity integrations such as OAuth, OIDC and SAML Detection engineering, SIEM or cloud security monitoring, incident response or digital forensics SOC 2, ISO 27001 or enterprise customer security reviews Penetration testing or working with external security ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. It is the chance to work very ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. It is the chance to work very ...

Proven ability to present to senior management. Further technical skills to include some of the following - Threat intelligence, Data Loss Prevention, Security Monitoring and SIEM Operations, Network Security, etc This is an excellent chance to join a market leader in this key role. It is the chance to work very ...

sites. At least five GCSEs at grades A–C, or equivalent, including Maths and English. Technical capability Knowledge across multiple security domains, such as SIEM, firewalls, network intrusion prevention, data loss prevention and cloud security. Familiarity with cyber security products and managed security services. The ability to understand customers’ threat ...

documentation, risk management, reporting, and security assurance capabilities. Desirable Experience Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001, or equivalent standards. Experience with SIEM, OT security monitoring, vulnerability management, asset discovery, and endpoint security technologies. Relevant certifications such as CISSP, CISM, GICSP, or IEC 62443. Experience coordinating multi-stakeholder ...

model and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

model and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

including ISO 27001, NIST, CIS Controls , and experience supporting their implementation and continuous improvement. Hands-on experience with security technologies, tools, monitoring platforms, and SIEM solutions , including incident detection, response, investigation, and reporting. Solid technical background in security operations, infrastructure, cloud, or network security , with the ability to assess and ...

IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework ...

Messaging (Exchange 2016+), IIS, SQL 2012+, Linux appliances, architecture and OS, Back-up technologies, Citrix, and Cisco networking An excellent understanding of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, etc. An excellent understanding of security approaches: ISMS, risk analysis ...

Entra ID and other identity providers (IdPs). Strong understanding of attacker tactics, techniques and procedures, and the incident response lifecycle. Experience using EDR, SIEM and cloud security tooling to support investigations and response activities. Ability to communicate technical findings and recommendations to senior stakeholders. We are committed to equal ...

Hands‐on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data. Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts ...

essential Experience in any of the following would strengthen your application: Terraform or cloud security automation. Cloud architecture or security design reviews. SIEM and cloud security monitoring. Security assurance or compliance. Highly regulated or security-sensitive environments. Cyber Essentials or ISO 27001 environments. AWS or broader security certifications. ...

briefings. Support the integration of CTI into the customer's mission by building processes for its application within varied cyber defence technology stacks, including SIEM and TIP systems (Splunk, netflow, Sigma, Yara etc). Leverage Google Threat Intelligence Platform and other customer sources to maximise exploitation of CTI in Threat ...

architectureexperience. High assurance or governmentenvironments. Microsoft Identity and AccessManagement solutions. Linux administration. Azure AD/Microsoft Entra ID. SQL Always-On AvailabilityGroups. Security vulnerabilitymanagement. SIEM and log managementplatforms. Understanding of secure,federated identity architectures. Personal Attributes Strong analytical andtroubleshooting skills. Excellent attention to detail. Ability to work independentlywithin a secure ...

architectureexperience. High assurance or governmentenvironments. Microsoft Identity and AccessManagement solutions. Linux administration. Azure AD/Microsoft Entra ID. SQL Always-On AvailabilityGroups. Security vulnerabilitymanagement. SIEM and log managementplatforms. Understanding of secure,federated identity architectures. Personal Attributes Strong analytical andtroubleshooting skills. Excellent attention to detail. Ability to work independentlywithin a secure ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

Public Key Infrastructure (public and private), Endpoint and Workload Protection, Web Application Firewalls, Secure Email Gateways and Filters, Cloud Security, Secure DNS Large-scale SIEM or security data lake implementations A strong understanding of the fundamental operations of servers, operating systems, networks, cloud services, and infrastructure An expert understanding ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. How you'll work Technical expertise ...