251 to 275 of 790 SIEM Jobs in the UK

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

What You'll Be Doing Designing, implementing, and maintaining security controls across infrastructure, applications, and platforms. Supporting security monitoring and threat detection capabilities through SIEM technologies and log management. Automating security processes and tooling using scripting and infrastructure automation techniques. Managing and securing network infrastructure, firewalls, and hybrid cloud environments. … Cyber Security Engineer, Security Operations, or Infrastructure Security role. Strong understanding of networking, cloud security, platform engineering, and security fundamentals. Experience with SIEM technologies such as Splunk, Sentinel, ELK, Cribl, or similar. Knowledge of Azure, AWS, or GCP cloud environments. Scripting or programming experience using Python, PowerShell, or Bash. Exposure ...

evolution of CyberOne's incident response capabilities and services. Duties and Responsibilities Incident Detection, Triage and Response Monitor and analyse alerts from SIEM, EDR/XDR, identity, email, cloud, network, and other security platforms to identify suspicious or malicious activity. Triage alerts, validate incidents, assess severity and business impact, and … and Experience Essential Hands-on experience in Cyber Incident Response, Security Operations (SOC), or Cyber Defence environments. Hands-on experience investigating security incidents using SIEM and EDR/XDR platforms. Strong understanding of the incident response lifecycle, including preparation, detection, analysis, containment, eradication, recovery, and lessons learned. Experience analysing Windows ...

Housing Association is seeking a Cyber Security Engineer to design, implement and maintain cyber security capabilities. You will work across Microsoft security technologies, IAM, vulnerability management, incident response and cloud security, providing security guidance on ...

Zempler Bank is seeking a Senior Information Security Engineer to join our Technology & Security Operations team in the UK. This hands-on role focuses on designing, building and improving security controls, tooling and processes protecting ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

systems remain secure, resilient and compliant. You will own vulnerability management, incident triage, and threat detection using Microsoft Defender, Entra ID/AD, and SIEM with KQL. The role offers hybrid working (1 day per week in South London) with potential to move into a #J-18808-Ljbffr ...

Cyber Security Manager, Security Lead or Information Security role Strong background in security operations and incident response Experience with Microsoft security technologies Knowledge of SIEM, endpoint security and threat management Understanding of frameworks such as ISO27001 and Cyber Essentials Excellent communication and stakeholder management skills What's on Offer? Opportunity ...

frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or ITIL are desirable. ...

Istio), API Security, IaC security (e.g. Terraform, ARM templates). Network Security: Zero Trust, firewalls, segmentation, DDoS Protection. Security Logging and Monitoring: Security logging, SIEM integration, event correlation. And any of these would be great: CISSP, CCSP, or equivalent certifications. Azure Security Engineer Associate, Google Professional Cloud Security Engineer. Microsoft ...

issues as required. Ensure appropriate monitoring, alerting, triage and escalation arrangements are in place for cyber security events, and that security tools such as SIEM, endpoint protection, email security and privileged access controls are configured and used effectively to support detection, response and assurance. Lead on cyber assurance activity, including ...

Security monitoring, managing security cases & tickets, security incident analysis, and other security tasks. Analysing a variety of security logs to identify actionable events (SIEM reports, alerts, tickets, system, network, security monitoring tools) Determine the attack type based on the triage of events collected Demonstrate analytical & technical thinking when triaging system ...

such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and ...

agents, either internally or customer facing. Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations. Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal ...

within complex security transformation programmes. Strong understanding of Security Operations (SecOps), including service design, operational readiness and implementation. Knowledge of enterprise security technologies, including SIEM, IAM/PAM, vulnerability management, CMDB and security monitoring platforms. Experience working within UK Government, Defence or similarly complex regulated environments. Familiarity with NCSC guidance ...

storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. Ability to analyze and interpret logs from various sources. Familiarity with SIEM and SOAR solutions. Ability to perform threat research and analyze current threats. Understanding of business email compromise (BEC) cases and investigation techniques. Business Responsibilities Fluent ...

response, and managed security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement ...

into customer and business impact. Understanding of cyber incident management models and escalation frameworks across enterprise environments. Familiarity with core cyber defence technologies (e.g. SIEM, Endpoint Detection and Response (EDR), Security Orchestration, Automation and Response (SOAR)). Knowledge of cloud and container security, and modern technology architectures. Experience with product ...

management tools such as PRTG or Nagios. Experience analysing network traffic, investigating security alerts and working with SOC teams would be beneficial. Familiarity with SIEM platforms such as Splunk Enterprise Security or LogRhythm, and tools such as Darktrace, would also be advantageous. This position offers a lucrative benefits package, which ...

into customer and business impact. · Understanding of cyber incident management models and escalation frameworks across enterprise environments. · Familiarity with core cyber defence technologies (e.g. SIEM, Endpoint Detection and Response (EDR), Security Orchestration, Automation and Response (SOAR)). · Knowledge of cloud and container security, and modern technology architectures. · Experience with product ...

artifact signing and provenance, pipeline integrity, datacentre network segmentation, ML framework exposure, data flows between datacentre and cloud. Detection & Response : Logging strategy, alerting and SIEM concepts, threat hunting, incident response, forensics fundamentals, tabletop exercises, backup and recovery testing. Nice to Have Certifications such as OSCP, OSWE, CRTO or AWS Certified ...

Security Operations working within or alongside Security Operations Centre(s) Experience designing SOC Architectures components and content level outcomes for at least one of SIEM, SOAR, EDR/XDR and Data Pipeline Management Tooling Experience in one or more vendors: Google SecOps (formerly Chronicle/Simplify), Wiz, Crowdstrike, Cribl, Microsoft ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...