26 to 50 of 666 SIEM Jobs in the UK

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

Azure, or Google Cloud.· Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls.· Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools.· Experience with Linux administration, system hardening, patch management, and configuration management.· Experience investigating security incidents, reviewing ...

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of Scripting/automation using PowerShell or Python is desirable. Key Competencies Strong analytical and troubleshooting ...

DKIM, DMARC, and email fraud prevention. • Experience in security incident investigation and remediation. • Strong understanding of malware analysis and advanced email threats. • Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. • Knowledge of scripting/automation using PowerShell or Python is desirable. Key Competencies • Strong analytical and troubleshooting ...

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

Operations Engineer with a track record of threat detection engineering within a security operations center (SOC) or similar environment.You bring hands-on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools.You're proficient in scripting languages (e.g. Python) for automating security processes and customizing security ...

equivalent experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Participate in pre-sales tasks and perform ongoing support of delivery collateral.Familiarity with MITRE ATT&CKFamiliarity with ITILCHARACTERISTICSStrategic mindset, able to balance business ...

Strong knowledge of network security, identity & access management, endpoint protection, and cloud security (Azure preferred but will also consider AWS) Hands-on experience with SIEM technologies (e.g. Microsoft Sentinel and/or Defender) Azure security posture management, including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling ...

cyber defense. Demonstrated experience mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

enterprise environments Proven capability in security incident investigation and remediation, with strong understanding of malware analysis and advanced email threats, and familiarity with SIEM platforms such as Splunk, Sentinel, or QRadar Strong analytical, troubleshooting, and stakeholder communication skills - desirable: PowerShell or Python Scripting experience, and SC clearance or SC eligibility ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key Competencies Threat Intelligence Analysis Cyber Threat ...

threat hunting, incident response, or cyber investigations.Knowledge of cloud security principles and modern enterprise architectures.Experience working with security monitoring and intelligence platforms.Familiarity with SIEM technologies and threat intelligence feeds.Public sector, defence, or national security experience.Consulting or client-facing delivery experience.Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ArchitecturePlatform SecuritySecurity Architecture DesignRisk ...

incident response, or cyber investigations. Knowledge of cloud security principles and modern enterprise architectures. Experience working with security monitoring and intelligence platforms. Familiarity with SIEM technologies and threat intelligence feeds. Public sector, defence, or national security experience. Consulting or client-facing delivery experience. Key CompetenciesThreat Intelligence AnalysisCyber Threat AssessmentEnterprise Security ...

regulated environment. Essential Experience Cyber Security Operations and Cyber Defence. Vulnerability Management and remediation. Security Incident Response and Major Incident Management. Security Monitoring and SIEM platforms. Threat Intelligence. Cloud Security, ideally Azure. Data Loss Prevention (DLP). Network Security. Security Governance and Risk Management. Working within regulated environments. Technical Knowledge ...

control improvement plan and reporting cadence aligned to business priorities, regulatory expectations and risk appetite Security Operations & Threat Defence: Lead operational cyber defence across SIEM, endpoint protection, identity controls, email security, cloud security, vulnerability tooling and managed security service providers. Improve detection coverage, alert quality, escalation paths and response times ...

standards (FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect).Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling.Experience operating SIEM and/or SOAR platforms and tuning detection logic.Experience with vulnerability management and patch governance.Ability to write production-quality automation scripts.Demonstrated experience leading cross-functional ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

security operations teams within hybrid or outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid understanding of enterprise, network, cloud and SaaS ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and ...

them Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platforms Act as the escalation point for security‐related incidents across 2nd and 3rd line, providing expert ...