226 to 250 of 790 SIEM Jobs in the UK

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

capability through documentation, knowledge sharing and structured mentoring as the team grows. Skills, Knowledge & Attributes Essential Hands-on detection engineering experience, writing and maintaining SIEM detection rules, correlation logic and detection-as-code pipelines. Demonstrated incident response experience, leading or contributing to high-priority (P1/P2) investigations, containment and ...

test records and operational handover materials. Working knowledge of Microsoft Defender XDR and the integration of its workloads with Microsoft Sentinel. Sound understanding of SIEM operations, detection engineering principles, incident workflows and the requirements of a managed security service. Strong troubleshooting skills across Azure, APIs, identity, networking and data collection ...

test records and operational handover materials. Working knowledge of Microsoft Defender XDR and the integration of its workloads with Microsoft Sentinel. Sound understanding of SIEM operations, detection engineering principles, incident workflows and the requirements of a managed security service. Strong troubleshooting skills across Azure, APIs, identity, networking and data collection ...

hear from you if it's yours! Hands-on experience building with LLMs or agentic systems in production Detection engineering experience with a SIEM, SOAR, or detection-as-code pipeline Experience with fraud, anti-abuse, or trust and safety systems Cloud security and infrastructure hardening experience (AWS, identity providers, endpoint ...

responsible AI standards, guardrails or governance, including Generative AI or Agentic AI, within a regulated environment Hands-on experience with security tooling such as SIEM, firewalls and IAM solutions Experience with regulatory compliance such as GDPR or PCI-DSS within financial services Familiarity with programming languages such as Python, Java ...

response tools and platforms. Experience with managing and operating EDR platforms i.e. Crowdstrike, SentinelOne, or Microsoft Defender for Endpoint. Experience developing and using a SIEM platform e.g. QRadar or Azure Sentinel. Strong knowledge of cybersecurity concepts, tools, and techniques. Ability to work well under pressure in high-stress situations. Strong ...

file systems, persistence mechanisms, lateral movement techniques, and file-less attacks. Experience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions. Hands-on knowledge of forensic tools such as X-Ways, EnCase, Autopsy, TimeSketch, and Plaso, with familiarity in cloud forensics ...

artefacts, file systems, persistence mechanisms, lateral movement techniques, and file-less attacks.Experience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions.Hands-on knowledge of forensic tools such as X-Ways, EnCase, Autopsy, TimeSketch, and Plaso, with familiarity in cloud forensics and ...

Proven experience delivering IT or Cyber Security projects. Strong understanding of cyber security principles, technologies and best practices. Experience delivering projects involving cloud security, SIEM platforms, Microsoft security technologies, compliance programmes or infrastructure security. Excellent stakeholder management and communication skills. Previous experience within a Cyber Security or Networking environment. Eligible ...

networking, identity management, cloud services, virtualization, and Windows, Linux, and macOS environments. Solid understanding of cybersecurity technologies and practices, including security operations, incident response, SIEM, XDR, EDR/EPP, IDS/IPS, and related security frameworks. Ability to communicate complex technical concepts and articulate business value to both technical stakeholders ...

customer‐facing technical role. Strong problem‐solving mindset with the ability to think strategically and act tactically. Practical experience integrating security solutions with SIEM, SOAR, DevOps, and enterprise observability platforms Additional Information Preferred Qualifications Certificates such as CCSP, AWS Solutions Architect, Azure Architect Expert, GCP Professional Cloud Architect, CKA/ ...

event-driven and distributed architectures at enterprise scale. Broader cloud security engineering experience, including threat modelling, policy as code, security monitoring and integration with SIEM or SOAR capabilities. Strong software engineering and automation skills using languages and tools such as Python, Go, Shell, Helm or Ansible. Experience implementing enterprise observability ...

What you need to succeed in the role Essential: Deep understanding of adversarial TTPs and threat actor lifecycles. Proven experience in malware, phishing, and SIEM log analysis. Strong grasp of threat modelling and risk assessment frameworks. Skilled in OSINT collection and analysis. Demonstrated leadership in CTI environments, including mentoring and ...

hooks Experience with Logstash configuration, filtering and parsing. Knowledge of centralised logging architectures and AWS cross-account log aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. ...

and Active Directory integration Experience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco Duo Experience supporting both BAU operations and project-based delivery within complex enterprise environments. Strong troubleshooting and root-cause ...

and Active Directory integration Experience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco Duo Experience supporting both BAU operations and project-based delivery within complex enterprise environments. Strong troubleshooting and root-cause ...

DHCP and Active Directory integrationExperience integrating Cisco ISE with technologies such as: Microsoft Active Directory Entra ID PKI/Certificate Services Cisco Catalyst Centre SIEM Platforms MDM/UEM Platforms Cisco DuoExperience supporting both BAU operations and project-based delivery within complex enterprise environments.Strong troubleshooting and root-cause analysis skills ...

environments and applications. Hands-on experience with macOS security investigations and Linux workloads in cloud environments. Understanding of microservices and containerised environments. Experience using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability ...

Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and … security, network architecture and hybrid environment security knowledge. Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes. Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security. Ability to work independently, take ownership of technical deliverables and collaborate ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...