251 to 275 of 670 SIEM Jobs in the UK

Access Proficiency in configuring, managing, and troubleshooting firewalls. Cisco, Palo Alto etc,. Experience with intrusion detection/prevention systems, as well as with SIEM tools and security incident response. Excellent problem-solving skills, analytical thinking, and the ability to communicate effectively with diverse stakeholders. CERTIFICATIONS: (any of below) · Cisco ...

Access Proficiency in configuring, managing, and troubleshooting firewalls. Cisco, Palo Alto etc,. Experience with intrusion detection/prevention systems, as well as with SIEM tools and security incident response. Excellent problem-solving skills, analytical thinking, and the ability to communicate effectively with diverse stakeholders. CERTIFICATIONS: (any of below) · Cisco ...

capability through documentation, knowledge sharing and structured mentoring as the team grows. Skills, Knowledge & Attributes Essential Hands-on detection engineering experience, writing and maintaining SIEM detection rules, correlation logic and detection-as-code pipelines. Demonstrated incident response experience, leading or contributing to high-priority (P1/P2) investigations, containment and ...

Gain hands-on exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. •Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. •Support security assessments, threat modelling, technical testing and client projects. •Assist with modernising legacy VPN, proxy and firewall environments. •Work ...

/Entra ID, Group Policy, O365, IntuneSolid networking foundations:TCP/IP, VLANs, DNS, VPNs, Wi-FiSecurity engineering knowledge:System hardening, endpoint security, SIEM, incident handlingISO27001, GDPR or PCI compliance exposureCertificates (SSL/TLS), WAF/DDoS, email securityAzure engineering background:Governance, networking, identity and security configurationOwnership mindset and strong ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

/information security field.Hands-on experience with cybersecurity or IT data sources, such as vulnerability scanners, endpoint detection tools, CMDBs, cloud platforms, identity systems, SIEM/logging platforms, or ticketing systems.Experience with version control tools (e.g., Git/GitHub/Gitlab) o Hands-on experience with data visualization tools (e.g. ...

platforms: AWS (S3, RDS, Glue), Azure (ADLS, Purview), GCP (BigQuery) Data cataloguing tools — Collibra, Alation, Informatica ETL pipelines and data lineage concepts Security & Privacy SIEM/DLP tools integration (Splunk, Microsoft Purview) Identity & Access Management basics (IAM, RBAC) Encryption, tokenization, and data masking techniques Scripting & Automation Python/Bash ...

secure, scalable and resilient architectures across People, Process, Technology and Infrastructure. Key Requirements Proven Security Architecture/SOC experience. Experience with at least two: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence. Strong knowledge of cyber security, risk and vulnerability management. Experience across on-premises and cloud security architectures. Ability ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

and you'll lead the engineering side of onboarding new customers onto the platform. What you'll be doing Designing and maintaining the SIEM and XDR platform — data ingestion, log parsing and normalisation, retention, performance Writing and tuning detections in KQL, and building automation to cut manual analyst effort Scripting ...

compliant environment, and you're comfortable in security audits and risk conversations. You're comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC.Observability ownership with Datadog (or equivalent) - you've defined SLOs, built the dashboards, and set the alerting culture.Experience leading or mentoring a DevOps team ...

contract is based in Harlow with hybrid work (1 day onsite). Key duties include monitoring, triaging and investigating security incidents using IBM QRadar SIEM and Microsoft Defender, with knowledge of MITRE ATT&CK, NIST CSF and incident response lifecycle. #J-18808-Ljbffr ...

cyber security or SOC experience. Good understanding of networking, DNS, IP addresses and firewalls. Knowledge of phishing, malware and common cyber threats. Exposure to SIEM or security monitoring tools. Sentinel, Defender or Splunk experience would be advantageous. Strong communication and problem-solving skills. The role is mostly remote and operates ...

hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity ...

and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre (SOC) and SIEM capabilitiesLead security technology evaluation, selection and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and governance processesDrive … solutionsStrong understanding of network security, micro-segmentation and secure access technologiesProficiency in cloud security across Azure, AWS or equivalent platformsKnowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewallsUnderstanding of cryptography, encryption standards and secure communication protocolsFamiliarity with MOD security requirements, defence standards and accreditation ...

continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network environments. Analyse security events to determine impact, severity, and appropriate … experience working within a Security Operations Centre (SOC) environment. Strong experience in security monitoring, alert triage, and incident investigation. Hands-on experience with: Splunk SIEM technologies Endpoint security tools Security monitoring platforms Experience developing and improving detection content and alert logic. Strong understanding of incident response processes and cyber security ...

background in security engineering, information security, governance, risk or compliance; Experience building security controls and automated security solutions in modern cloud environments; Knowledge of SIEM, vulnerability management, data protection, endpoint security or exposure management platforms; Experience with APIs, automation, scripting and infrastructure-as-code technologies; Familiarity with Azure ...

information security, governance, risk or compliance Experience building security controls and automated security solutions within modern cloud environments Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms Experience working with APIs, automation, scripting and infrastructure-as-code technologies Familiarity with cloud platforms ...

phishing, BEC, and identity-related attacks.Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging ...

and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level ...

critical outsourcing oversight. Incident management & operations: Own the security incident response plan; lead major incident management for cyber events. Operate and improve security monitoring, SIEM, and alerting across the Azure estate. Run the security awareness and training programme for all ~180 staff. Manage relationships with external SOC, MSSP, and specialist ...