276 to 300 of 793 SIEM Jobs in the UK

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

Chronicle/Siemplify, Microsoft Sentinel, Palo Alto XSOAR, Torq, Tines). Hands‐on experience with APIs and security tool integrations. Understanding of security technologies (SIEM, EDR, VM, Networking & Firewalls, IDS/IPS, Cloud, Web proxy, etc.). The role hybrid with travel to their London office 2-3 days ...

environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security Monitoring Design, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks. Develop advanced threat hunting queries and investigation workflows. Onboard … initiatives. Required Experience 5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell ...

vendor/third-party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

capabilities at scale. Serve as the Windows platform product owner for cross‐portfolio teams, including Sophos XDR, EDR, MDR, Workspace Protection, X‐Ops, NG‐SIEM, and Endpoint Management. Use endpoint telemetry, customer feedback, field input, support trends, competitive analysis, and platform data to prioritize work and make clear product decisions. ...

platforms: AWS (S3, RDS, Glue), Azure (ADLS, Purview), GCP (BigQuery) Data cataloguing tools — Collibra, Alation, Informatica ETL pipelines and data lineage concepts Security & Privacy SIEM/DLP tools integration (Splunk, Microsoft Purview) Identity & Access Management basics (IAM, RBAC) Encryption, tokenization, and data masking techniques Scripting & Automation Python/Bash ...

efficiency and drive business outcomes. Deep technical knowledge of modern cybersecurity technologies including endpoint security, XDR/EDR, cloud security, identity and access management, SIEM/log management, incident response, and threat intelligence Experience with security transformation programs, including Zero Trust architecture, cloud migration security, legacy estate modernisation, and security ...

improve logging and observability pipelines using tools such as Fluent Bit, OpenTelemetry and Grafana. Integrate platform logging and monitoring with wider security operations and SIEM tooling. Support network security monitoring and visibility across infrastructure and hardware network appliances. Improve the effectiveness of security tooling, including EDR, vulnerability scanners and antivirus ...

consent handling for opt-in contributors, and secure adoption of tooling built with external research partners. Monitoring and detection. Audit-log ingestion to our SIEM, anomaly detection on identity and workload behaviour, and egress monitoring across the cluster and the unified layer, so misuse or exfiltration attempts surface early enough ...

security, having worked within a compliant environment, and comfortable in security audits and risk conversations. Comfortable with security tooling such as CrowdStrike and Rapid7, SIEM/SOC. Observability ownership with Datadog (or equivalent), having defined SLOs, built the dashboards and set the alerting culture. Experience leading or mentoring a DevOps ...

customer-facing technical role, such as implementation, sales engineering, product support, or technical account management. Demonstrate working knowledge of cybersecurity technologies (e.g., SIEM, ASM, Vulnerability Management, or SOAR) and SaaS solutions. Apply project management principles to establish ownership, set clear timelines, and hold internal and external stakeholders accountable for driving ...

detect, assess, and respond to threats, coordinating with cross-functional teams to improve security controls and awareness. The role requires hands-on experience with SIEM, IDS, and EDR, plus problem-solving skills to drive rapid uplifts in security posture. #J-18808-Ljbffr ...

engineering experience. Advanced Python development skills including REST APIs, JSON processing, testing and debugging. Experience developing and maintaining production Splunk SOAR playbooks. Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows. Experience using Git and software development best practices. Strong understanding of SOC operations and incident ...

high-pressure, time-sensitive incident environments Willingness to work some weekends and holidays as part of a rotation Desired: Hands-on experience with EDR, SIEM, and forensic collection tools Familiarity with OSQuery, SQL, or KQL Knowledge of MITRE ATT&CK and incident response frameworks Industry certifications such as GCIH, GCED ...

systems. ✔️ Manage and configure firewalls, IDS/IPS, and endpoint security. ✔️ Investigate security alerts and coordinate incident responses. ✔️ Maintain and analyze logs using SIEM tools. ✔️ Conduct digital forensics and root‐cause analysis of incidents. ✔️ Implement data encryption, MFA, and secure access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace and security events with features such as APM, RUM, SIEM, Kubernetes monitoring and more, all enhancing operational efficiency and reducing observability spend by up to 70%.****The Role**As a Technical Account Manager ...

Security Operations , including major and complex incidents. Experienced taking ownership of serious incidents and driving the technical response through to resolution. Hands-on with SIEM technologies , ideally Microsoft Sentinel, Splunk or similar. Strong across detection engineering, threat detection and EDR . Experienced operating across modern cloud security environments and technologies ...

Office 365) and security monitoring. Implement identity and access management (IAM), Privileged Identity Management (PIM) encryption, and network security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices … Squarcle policies and processes. KNOWLEDGE, SKILLS & EXPERIENCE ESSENTIAL Experience in cyber security roles across enterprise or complex environments, including SOC delivery and/or SIEM operations. Strong understanding of: Network security, identity management, and endpoint protection Cloud security (AWS, Azure, or similar) Security frameworks (ISO 27001, NIST, CIS) Proven experience ...

Infrastructure Security role. Strong understanding of vulnerability management processes and remediation workflows. Experience investigating and responding to security incidents. Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions. Knowledge of operating system security across Mac, Windows and Linux environments. Experience with identity and access management concepts. Understanding … Experience securing public cloud platforms. Knowledge of Microsoft 365 security technologies. Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7. Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic. Experience implementing endpoint detection and response (EDR/XDR) technologies. Understanding of Identity Governance ...

provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect … Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk ...

management/recording, credential rotation, least privilege, EPM/PRA) across on-prem and cloud workloads.* Lead complex integrations with AD/EntraID, IdPs, SIEM/SOAR, CSPM, ITSM, DevOps tooling (CI/CD), and secrets management.* Be responsible for the operational model: backup/recovery, DR, platform upgrades, policy … identity protocols (SAML/OIDC/OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal ...

managing security incidents through their full lifecycle while collaborating with technical and business stakeholders. Key Responsibilities Monitor and investigate security alerts generated by SIEM, EDR/XDR, identity, email, cloud and network security tools. Lead and support cyber security incident investigations, including phishing, malware, account compromise, unauthorised access and data … trend analysis and security governance reporting. Essential Experience Experience working within Incident Response, Cyber Security Operations or SOC environments. Strong hands-on experience with SIEM and EDR/XDR technologies. Proven ability to investigate and respond to cyber security incidents. Knowledge of Windows and Linux security investigations, authentication events, security ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...