301 to 325 of 671 SIEM Jobs in the UK

networking integration (vSphere, vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

and developing net-new strategic partners. Proven experience carrying and exceeding revenue quotas. Strong understanding of MSSP business models, managed security services, MDR, XDR, SIEM, SOC, SASE, Endpoint, and broader cybersecurity solutions. Experience developing executive relationships and influencing senior decision-makers. Demonstrated ability to create and execute strategic business plans. ...

oConfiguration Manager oSystem Center Service Manager oSystem Center Operations Manager Trelix Endpoint Protect Trend Micro Apex One Security Nextcloud Cireson Asset Management ManageEngine Log360 SIEM IRIS CACADE Veeam Backup and Restore Solutions Factory Symphony Desirable Qualifications: Bachelor’s or Master’s degree in: Computer Science, Engineering, or a related field ...

cyber incident response and investigations. Coordinate external penetration testing and ensure findings are appropriately addressed. Oversee the administration of security technologies and controls, including SIEM, NAC, Microsoft Defender and related tooling. Support phishing simulation programmes and ensure lessons learned are embedded. Conduct security due diligence assessments for new or changed ...

management, log retention policies, and custom metric volume to maximize ROI and control licensing costs. Security & Compliance: Leverage Datadog Security products (CSPM, CWPP, Cloud SIEM, Container Security) to maintain compliance postures and mitigate runtime threats. Collaboration & Enablement Cross-Functional Mentorship: Act as the go-to escalation point and technical mentor ...

management, log retention policies, and custom metric volume to maximize ROI and control licensing costs. Security & Compliance: Leverage Datadog Security products (CSPM, CWPP, Cloud SIEM, Container Security) to maintain compliance postures and mitigate runtime threats. Collaboration & Enablement Cross-Functional Mentorship: Act as the go-to escalation point and technical mentor ...

advantageous. Zscaler architect-level and ZDX certifications would be a strong advantage. Broader cyber security knowledge across areas such as SOC, EDR, vulnerability management, SIEM or compliance is desirable. Wider security certifications such as CISSP, Microsoft security certifications or relevant vendor credentials are beneficial. What ...

remediation toolingThe confidence to work independently, make risk-based decisions and support junior engineersExperience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful.Relevant certifications such as AZ-500, AZ-400, Security+, CySA+, CEH or OSCP would also ...

confidence to work independently, make risk-based decisions and support junior engineers Experience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful. Relevant certifications such as AZ-500, AZ-400, Security+, CySA+, CEH or OSCP would also ...

Engineer, etc.) ideally in cybersecurity or enterprise software. Strong understanding of the Security Operations Center (SOC) environment, tools, and workflows. Comfortable explaining and troubleshooting: SIEM and SOAR integrations Security alert workflows and incident investigation processes Technical proficiency in: Writing SQL queries to extract and analyze data Experience working with APIs ...

influence strategy, resource planning, and customer engagement models.Technical ExpertiseDeep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software.Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools.Sales AcumenStrong consultative selling skills.Ability to translate technical features into business benefits.Leadership & CommunicationProven ability to lead cross-functional teams.Excellent presentation, negotiation ...

support a defence/aerospace client on a 3-month contract in the UK. The role focuses on monitoring security events with IBM QRadar SIEM, incident response, and threat detection, with remote work and occasional site visits. You will investigate incidents across platforms, manage the incident lifecycle, perform log analysis ...

Defender XDR. Experience with Defender for Endpoint, Defender for Identity, Defender for Office 365 and/or Defender for Cloud Apps. Strong understanding of SIEM, XDR, SOAR, detection engineering and threat hunting. Experience designing solutions across hybrid and multi-cloud environments. Proven ability to lead complex client engagements and solutioning ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have:Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have: Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions … knowledge of CI/CD pipelines and DevSecOps practices. Strong understanding of cloud security controls, security frameworks, and compliance requirements. Hands-on experience with SIEM platforms and cloud security tooling. Experience with incident, problem, and change management processes. Working knowledge of Wiz Cloud and Wiz Defend security platforms. Strong containerisation ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity.Security Operations & Incident ResponseMonitor and investigate security … improve the detection stackWhat You'll Bring:Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

Auto enrolment pension scheme, Life Assurance, Westfield Health Cash plan & Lifestyle benefits – Discount on selected stores. Responsibilities include: Develop content for a complex and growing SIEM infrastructure. This includes use cases, dashboards, active channels, reports, rules, filters, trends and active lab sessions. Use SIEM in the daily operational work, which … Advanced industry-standard SOC Security qualifications (SANS, ISC2, etc.). Proven Tier 3 SOC Engineering experience (2 years) Demonstrable experience working with SIEM technology and SIEM engineering (including tool configuration), i.e. within an enterprise SOC. Experience in the creation of use cases, analytics and playbooks. Experience with automation languages, such ...

threat modeling, code review), Identity & Access Management, Network Security, Data Protection, Incident Response. Hands-on experience implementing enterprise security solutions (Data Loss Prevention, WAF, SIEM, etc.)Preferred qualification - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or CISSP-ISSAP (Certified Information Systems Security Professional-Information Systems ...

systemic weaknesses that increase incident likelihood or blast radius, including: Unpatched or inconsistently patched systems Exposed services and misconfigurations Degraded or ineffective controls Using SIEM and security tooling to prioritise patching and vulnerability risk based on real exposure and exploitability, not CVSS scores alone Partnering with IT, Cloud, and Engineering ...

Flagstone is seeking a senior security engineer to own and operate detection and incident response across our Azure cloud security stack. You will work hands-on with Microsoft Sentinel, Defender for Cloud, and XDR tooling ...

experience and/or related qualifications highly regarded Highly developed written and verbalcommunication,critical thinking, and analytical skills. Proficiency with SOC tools such as SIEM and SOAR, ideally in a corporatetechnologyenvironment. Astrongunderstandingofcommon cyber threats and attacks against financial services organisations. Proven ability to translate incident learnings into practical improvements ...

Flagstone is actively seeking a senior security engineer to own critical parts of our security stack across Azure, Sentinel, Defender for Cloud, and related tooling. You’ll drive incident response, threat detection, and secure AI ...

technical authority and SME for security data within the Elastic Security ecosystem Design, implement and maintain scalable security data ingestion pipelines into Elastic SIEM Own the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources Define and continuously improve data quality standards ...