201 to 225 of 543 SIEM Jobs in the UK

re Looking For 5+ years’ experience in a SOC or cybersecurity operations role, including 2+ years in a leadership position . Strong understanding of SIEM, SOAR, EDR, IDS/IPS, and firewall technologies. Experience in incident response, threat intelligence, and forensic analysis . Proficiency in security frameworks like MITRE ATT More ❯

scripting such as Python, Perl, Bash, PowerShell, C++. CREST Practitioner Intrusion Analyst/Blue Teams Level 1 or other SOC related certifications. Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar. If you are interested in this role but not sure if your skills and experience More ❯

Familiarity with cyber threat intelligence models and frameworks like the Diamond Model, MITRE ATT&CK etc Familiarity with email security tools and/or SIEM/SOAR tooling like Splunk/Sentinel etc Relevant cyber or intelligence qualifications such as CCTIM, GCTI etc More ❯

Familiarity with cyber threat intelligence models and frameworks like the Diamond Model, MITRE ATT&CK etc Familiarity with email security tools and/or SIEM/SOAR tooling like Splunk/Sentinel etc Relevant cyber or intelligence qualifications such as CCTIM, GCTI etc More ❯

Familiarity with cyber threat intelligence models and frameworks like the Diamond Model, MITRE ATT&CK etc Familiarity with email security tools and/or SIEM/SOAR tooling like Splunk/Sentinel etc Relevant cyber or intelligence qualifications such as CCTIM, GCTI etc JBRP1_UKTJ More ❯

Familiarity with cyber threat intelligence models and frameworks like the Diamond Model, MITRE ATT&CK etc Familiarity with email security tools and/or SIEM/SOAR tooling like Splunk/Sentinel etc Relevant cyber or intelligence qualifications such as CCTIM, GCTI etc JBRP1_UKTJ More ❯

experience in a production setting. VMware Aria Operations (formally Log and network insight) Design, deploy, troubleshoot and manage to a 3rd line level and SIEM integration. Operational experience in zero trust, deny all by default, secure by design environments. Linux operating system (Ubuntu preferred) Design, deploy, troubleshoot and manage to More ❯

experience in a production setting. VMware Aria Operations (formally Log and network insight) Design, deploy, troubleshoot and manage to a 3rd line level and SIEM integration. Operational experience in zero trust, deny all by default, secure by design environments. Linux operating system (Ubuntu preferred) Design, deploy, troubleshoot and manage to More ❯

experience with Microsoft Sentinel and Azure Security technologies. Proficiency in Kusto Query Language (KQL) for building custom detection rules and workbooks. Strong understanding of SIEM/SOAR principles and security operations. Familiarity with Microsoft Defender XDR, Azure Monitor and Azure Security Center. Experience with incident response and threat intelligence tools. More ❯

on expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace and security events with features such as APM, RUM, SIEM, Kubernetes monitoring and more, all enhancing operational efficiency and reducing observability spend by up to 70%. Technical Account Managers in Coralogix are key in More ❯

Analytics). Proficiency in KQL (Kusto Query Language) for log analysis. Experience with automation scripting (PowerShell, Python, or Azure Functions). Desirable Familiarity with SIEM tools (Splunk, ELK, Azure Sentinel) Microsoft Certified: Azure Administrator Associate (AZ-104) Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Microsoft Certified: Azure Security Engineer More ❯

Analytics). Proficiency in KQL (Kusto Query Language) for log analysis. Experience with automation scripting (PowerShell, Python, or Azure Functions). Desirable Familiarity with SIEM tools (Splunk, ELK, Azure Sentinel) Microsoft Certified: Azure Administrator Associate (AZ-104) Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Microsoft Certified: Azure Security Engineer More ❯

FTP, POP, LDAP. It would be great if you had: Understanding of static malware analysis and reverse engineering. CREST Practitioner Intrusion Analyst. Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar appreciated. If you are interested in this role but not sure if your skills and More ❯

of static malware analysis or reverse engineering concepts. Certifications such as CREST Practitioner Intrusion Analyst (CPIA) or similar relevant industry certs. Experience with additional SIEM technologies, particularly QRadar. Key Details: Employment Type: Permanent Location: Based at the head office in Hemel Hempstead (Fully site-based). Work Pattern: Rotating More ❯

SIEM Content Engineer – National Security & Defence Hybrid role - Hemel Hempstead (1 day/week on-site) Clearance: Must hold or be eligible for DV I have a great opportunity for a skilled SIEM professional to work as a SIEM Content Engineer working for a leading consultancy’s Security Operations Centre … SOC) team. The role will be focused on Country Critical technology in the defence and national security space. Key Responsibilities Develop and maintain SIEM content (rules, dashboards, reports) Analyse SIEM data to detect and respond to threats Collaborate with SOC Analysts, Architects, and Engineers Stay current on emerging threats and … incorporate into detection logic Support security standards and best practices Requirements: 3+ years with SIEM tools (Splunk, Sentinel, QRadar) Strong understanding of security protocols and frameworks (NIST, ISO, PCI DSS) Scripting experience (Python, PowerShell, regex) Excellent problem-solving and communication skills Security certifications (CISSP, CISM, etc.) would be a plus. More ❯

SIEM Content Engineer – National Security & Defence Hybrid role - Hemel Hempstead (1 day/week on-site) Clearance: Must hold or be eligible for DV I have a great opportunity for a skilled SIEM professional to work as a SIEM Content Engineer working for a leading consultancy’s Security Operations Centre … SOC) team. The role will be focused on Country Critical technology in the defence and national security space. Key Responsibilities Develop and maintain SIEM content (rules, dashboards, reports) Analyse SIEM data to detect and respond to threats Collaborate with SOC Analysts, Architects, and Engineers Stay current on emerging threats and … incorporate into detection logic Support security standards and best practices Requirements: 3+ years with SIEM tools (Splunk, Sentinel, QRadar) Strong understanding of security protocols and frameworks (NIST, ISO, PCI DSS) Scripting experience (Python, PowerShell, regex) Excellent problem-solving and communication skills Security certifications (CISSP, CISM, etc.) would be a plus. More ❯

practices, deployment of agents and sensors Leverage advanced knowledge of security operations, cyber security tools, intrusion detection, and secured networks to integrate with the SIEM platform Triage emerging threats to protect assets and information in client environments. Partner with cross-functional technical teams to share expertise, research threats, and implement … risk areas that will require vulnerability prevention Stay current with Security technologies and make recommendations for use based on business value Skills & Qualifications Requirements SIEM administration, configuration, and optimization experience with platforms such as Alien Vault, IBM QRadar, ArcSight or LogRhythm Threat hunting experience Malware reverse engineering and outbreak management More ❯

organisational objectives Skills and experience we are looking for in our Information Security Officer: Proficiency in security domains, tools and technologies such as DLP, SIEM, SOAR and Vulnerability Management Good working knowledge of network security, firewalls, threat management, endpoint detection and response Ability to identify, assess, and mitigate security risks More ❯

organisational objectives Skills and experience we are looking for in our Information Security Officer: Proficiency in security domains, tools and technologies such as DLP, SIEM, SOAR and Vulnerability Management Good working knowledge of network security, firewalls, threat management, endpoint detection and response Ability to identify, assess, and mitigate security risks More ❯

experience. Good ISO 27001 knowledge (certification maintenance/achievement). Understanding of cloud (AWS preferred) and SaaS security risks. Hands-on with endpoint protection, SIEM, DLP, IAM, SSO. Clear understanding of GDPR. Familiarity with security tooling (endpoint, SSO/IAM, monitoring, scanning). Experience with risk assessments, incident response, security More ❯

experience. Good ISO 27001 knowledge (certification maintenance/achievement). Understanding of cloud (AWS preferred) and SaaS security risks. Hands-on with endpoint protection, SIEM, DLP, IAM, SSO. Clear understanding of GDPR. Familiarity with security tooling (endpoint, SSO/IAM, monitoring, scanning). Experience with risk assessments, incident response, security More ❯

Develop and implement strategies to ensure network and security infrastructure meets current and future needs. Monitor and respond to security incidents using tools like SIEM and Sophos MTR. Maintain system security by configuring firewalls, VPNs, and intrusion detection systems, and ensuring timely patching. Manage vulnerability remediation based on penetration test More ❯

Develop and implement strategies to ensure network and security infrastructure meets current and future needs. Monitor and respond to security incidents using tools like SIEM and Sophos MTR. Maintain system security by configuring firewalls, VPNs, and intrusion detection systems, and ensuring timely patching. Manage vulnerability remediation based on penetration test More ❯

Experience of creating security strategies to improve the security maturity of an organisation Proven experience and expertise in one or more of the following: SIEM systems preferably Microsoft Sentinel, network and systems security, intrusion detection/prevention, and malware analysis. Professional Qualifications: At least one professional qualification such as CISSP More ❯

ISO27001, PCI and GDPR. Possibly a certified ethical hacker Knowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferred Good exposure of user environment management More ❯