176 to 200 of 667 SIEM Jobs in the UK

Azure, GCP, MS365) and understanding of cloud security principles.Experience in Operational Technology (OT) and understanding of SANS standards.Familiarity with modern security technology and tools, SIEM, and security automation.Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design.BenefitsDepartmentCyberEmployment TypePermanent - Full ...

MS365) and understanding of cloud security principles. Experience in Operational Technology (OT) and understanding of SANS standards. Familiarity with modern security technology and tools, SIEM, and security automation. Hands-on experience in security or IT engineering, including implementing technical controls, hardening systems, securing networks, or supporting secure architecture design. BenefitsDepartmentCyberEmployment ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

service x4 salary, cycle to work scheme and many, many more perks!Cyber Security Threat Hunter – Key Skills:Incident response processes/methodologies and SIEM operationsSecurity tooling, reporting, and delivering work in a structured/project-based wayIT/networking/security fundamentals including operating systems, networking and digital forensicsMicrosoft ...

impact the bank.What you'll get to do/ResponsibilitiesDetection Engineering - Design, build, test, and maintain high-fidelity detection rules and analytics in our SIEM and other security platforms.Proactive Threat Hunting - Formulate hypotheses and hunt for undetected attacker TTPs across our cloud (AWS, GCP, Azure), SaaS, and endpoint environments.Purple Team … strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls.SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule/query creation and analytics.Threat Hunting: Experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies.Cloud ...

experience delivering actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and ...

streamlining authentication/authorization to ensure unified access control across the board Deploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling) Respond to security incidents and harden environments post-incidents. Support control monitoring and remediation for compliance initiatives Gather ...

mitigation. Strong understanding of network security architecture and boundary security design. Proficiency in security incident investigation and threat analysis. Knowledge of security event management, SIEM and log analysis. Understanding of vulnerability assessment and remediation processes. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge of managed service delivery ...

Infrastructure Engineer/Analyst ( Hybrid/Chesterfield) – 12 Month FTC. VMWare, AD, Exchange, Windows Server, Azure, O365, Siem tooling, PowerShell, Networking, Meraki, Firewalls Infrastructure Engineer/Analyst: Do you have a background in supporting business or technical applications? Do you have a broad technical skill set but looking ...

obtain SC clearance. Interested? Please apply below. SOC Manager, Cyber Security Operations Manager, Security Operations Centre, SOC, incident management, threat intelligence, security monitoring, MSSP, SIEM, CISSP, CISM, ITIL, AWS, Azure, Remote, Contract, Inside IR35 ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. Personal and other skills Able to manage ...

desirable.Infrastructure as Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferredSecurity tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable.ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial.Personal and other skills Able to manage complexity ...

Public Key Infrastructure (public and private), Endpoint and Workload Protection, Web Application Firewalls, Secure Email Gateways and Filters, Cloud Security, Secure DNS Large-scale SIEM or security data lake implementations A strong understanding of the fundamental operations of servers, operating systems, networks, cloud services, and infrastructure An expert understanding ...

security operations or boundary security environments. Proven leadership experience managing security operations or managed service teams. Strong knowledge of enterprise firewalls, IDS/IPS, SIEM and threat monitoring technologies. Experience leading incident response and service delivery within secure environments. Excellent stakeholder management and communication skills. Desirable Experience within Defence, Government ...

services to multiple external clients rather than managing only an internal SOC. 2. Technical security operations experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft ...

access management, network security, logging and monitoring, encryption, secrets management, and workload protection.Experience using CSPM tools and other security technologies such as vulnerability scanners, SIEM, CNAPP, or configuration assessment platforms.Visa is an EEO EmployerQualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual ...

busy cyber security team within a large enterprise environment. Key Requirements: 2-3+ years' SOC experience Strong hands-on experience with IBM QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability ...

SaaS and IaaS environments. Device and mobility management. Windows Server and Windows operating systems. VMware and enterprise storage. VPN, SASE and cloud security technologies. SIEM and security monitoring platforms. Experience with technologies such as Mimecast, Varonis and Cisco Umbrella would be highly beneficial. You should also have experience with scripting ...

flow.Familiarity with identity and access management concepts such as Okta, Azure AD, SSO, and SAML, along with how email security integrates into SOC and SIEM/SOAR workflows.Experience engaging technical administrators, CISOs, C-level executives, and legal and compliance teams, with the ability to translate complex security architecture into clear ...

live and ongoing support. Working within Microsoft 365 and Azure environments. Microsoft security technologies such as Intune, Purview, Defender, Sentinel or Entra ID. SIEM platforms, incident response and security operations. Security frameworks including Cyber Essentials, NIST, CIS Controls and ISO 27001. Why This Opportunity? This is a role where ...

management. • Lead the vulnerability exception and risk acceptance process: assess compensating controls, document residual risk, and obtain formal sign-off. • Integrate VM tooling with SIEM (Splunk, Microsoft Sentinel), ITSM (ServiceNow VR module), and CMDB for automated ticket creation and asset correlation. • Automate vulnerability reporting and remediation tracking using Python, REST … Snyk, Anchore, or Aqua Security. • Automation and API integration: Python scripting, REST API calls to Qualys/Tenable/Rapid7; ServiceNow VR module configuration. • SIEM integration: Splunk, Microsoft Sentinel – correlating vulnerability data with threat events. • CMDB-driven asset correlation: ServiceNow CMDB, ensuring VM data reflects accurate asset inventory. • Network and ...

services and security tools to detect suspicious behaviour Escalate incidents where appropriate and work closely with engineering and incident response teams Develop and improve SIEM detection rules and alert tuning to reduce false positives Produce clear incident reports and maintain accurate documentation Participate in the on-call rota and support … cyber security environment Strong hands-on experience us ing Ela stic and/or Sp lunk for security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint ...

maturity across the organisation.About youTechnical expertiseProven experience implementing enterprise security platformsStrong knowledge of security risk management tools and techniquesDeep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways)Experience with firewall technologies (desirable)Knowledge of cloud security standards and solutions (desirable)Strong understanding of core ...

maturity across the organisation.About youTechnical expertiseProven experience implementing enterprise security platformsStrong knowledge of security risk management tools and techniquesDeep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways)Experience with firewall technologies (desirable)Knowledge of cloud security standards and solutions (desirable)Strong understanding of core ...

function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple ...