301 to 325 of 793 SIEM Jobs in the UK

Detection Engineer

Hiring Organisation
Sanderson Government and Defence
Location
London, United Kingdom
Employment Type
Permanent
Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Detection Engineer

Location
United Kingdom
Detection Engineer (SOC/SIEM/Splunk) £450 per day Outside IR35 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Detection Engineer

Hiring Organisation
Sanderson Government and Defence
Location
South East London, UK
Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. Not sure what … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Head of Cyber Security and Assurance

Location
West Midlands, England, United Kingdom
Operations: Act as the technical lead for major cyber security incidents and critical vulnerabilities impacting West Midlands Police. Establish operational frameworks, playbooks, security monitoring (SIEM/XDR), and simulated wargaming exercises. Governance, Policy & Compliance: Own and update Information Assurance policies aligned with national frameworks (NCSC, NIST CSF, ISO 27001). ...

Senior Engineering Manager, AI Security, Global Security & Defence

Location
City Of London, England, United Kingdom
such as Azure AI Foundry, AWS Bedrock or Gemini Enterprise Agent Platform. Agent orchestration frameworks, MCP integrations and AI‐assisted development tools/ADK.dev. SIEM, SOAR, identity governance and enterprise secrets‐management technologies. Cloud‐native modernisation, container platforms and reusable engineering standards. Relevant cloud architecture, cyber security or AI certifications. ...

SOC Analyst - Security Operations & Cloud Focus (Hybrid)

Location
Greater London, England, United Kingdom
and Engineering to resolve incidents across Security Operations, incident response, vulnerability management and cloud security, with opportunities to develop expertise across platforms like SIEM, EDR/XDR and related tooling. #J-18808-Ljbffr ...

Cyber Security Analyst

Location
Bellshill, Scotland, United Kingdom
Provides input and support to operational projects related to cyber security Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Experience of delivering/supporting cloud focused security solutions with a solid understanding of current cyber threats (essential) Strong cyber ...

Cyber Security Analyst

Location
Aberdeen City, Scotland, United Kingdom
relevant industry certifications (e.g. CySA+, Security+) and risk management knowledge (essential) Knowledge and experience working across a diverse range of cyber security tools, including SIEM technologies, EDR, NIDS etc. (essential) Self-motivated with a willingness to go the extra mile to achieve important goals (essential) Excellent verbal and written communication ...

Incident Response Engineer, UK Security Operations, Hampshire

Location
Greater London, England, United Kingdom
center dashboards for anomalous activity. Demonstrate subject matter expert across typical security disciplines, vulnerability, Endpoint Detection and Response(EDR), Security Information and Event Managemen (SIEM) etc. Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative ...

Security Engineer

Location
Greater London, England, United Kingdom
developers to the platform, with documentation that make the secure path the easy one. Build logging, metrics and alerting for platform services, and contribute SIEM detection rules. Required Hands‐on experience building and operating production services with Python. Using Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting. ...

Head of Cyber Security Operations

Location
Greater London, England, United Kingdom
complex and/or international organisation. Experience leading or redefining a SOC, including working with managed security service providers. Strong technical knowledge across SIEM, threat detection, incident response, threat intelligence, threat hunting and security engineering. Experience handling major cyber incidents and confidently advising senior executives. Broad understanding of enterprise security ...

Security Analyst

Location
Greater London, England, United Kingdom
ensure secure delivery across the programme. Experience Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and ...

Privileged Access Management (PAM) Architect

Hiring Organisation
Randstad Digital
Location
London, UK
and enterprise environments. Design & Integration: Produce High-Level Designs (HLDs), Low-Level Designs (LLDs), and security architecture documents while integrating CyberArk with Active Directory, SIEM, and ITSM tools. Policy & Security Governance: Define privileged access policies, credential management, session monitoring, and conduct security gap analyses aligned to industry standards (NIST/ ...

Network Security Consultant - Systems Integrator

Location
Lancashire, England, United Kingdom
security design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation ...

Operational Security Manager

Location
Farnborough, England, United Kingdom
Cyber Resilience Act. Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody, and technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms. Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications. Strong leadership, stakeholder ...

Managing Engineer, Data Security Engineering (Hybrid OR Remote)

Location
Belfast City District, Northern Ireland, United Kingdom
other enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance. Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures. Proven ability to influence technical decisions and drive adoption of secure patterns and ...

8x Senior Security Analysts - Internet Service Provider

Location
West Yorkshire, England, United Kingdom
Cross-Team Coordination & Remediation Follow-Through Collaboration with Security Engineering Escalation & Incident Handling Regulatory Compliance Governance & Reporting Skills/Must Have Microsoft Defender XDR SIEM & Log Analysis Vulnerability Management SC Clearable Salary £48,654.60 + £9,965.40 (Shift) #J-18808-Ljbffr ...

Privileged Access Management (PAM) Architect

Hiring Organisation
Randstad Digital
Location
Corsham, Wiltshire, South West, United Kingdom
Employment Type
Contract
Contract Rate
£67 - £89 per hour + Negotiable
runbooks. Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies. Integrate PAM solutions with Active Directory/LDAP, enterprise SIEM tools, and ITSM platforms. Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks. Key Requirements Demonstrable track record in an enterprise ...

Cloud Security Operations Engineer

Hiring Organisation
MJA (London) Ltd
Location
London, United Kingdom
Employment Type
Permanent
and/or GCP and you must be hands on and be able to embed security tools. Your experience should also include security monitoring, SIEM platforms, EDR, detection engineering, alert triage and incident response. You MUST have AI enablement experience/knowledge and be able to demonstrate build skills ...

Security Architect

Location
Manchester, England, United Kingdom
NIST, ISO 27001, CIS, OWASP etc., and ideally have experience designing or supporting PCI compliant environments. You’re hands‐on with tools such as SIEM, IDS/IPS, DLP, IAM, and encryption, and you stay current with emerging threats and technologies. Certifications such as CISSP, CCSP, CISM, or TOGAF ...

SOAR & OT Security Engineer for CNI – SC Cleared

Location
Bradley Stoke, England, United Kingdom
Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response. ...

Senior Security Engineer

Location
United Kingdom
similar) Understanding of OWASP Top 10 and application security fundamentals Nice to have Relevant certifications (AWS Security Specialty, CISSP, CISM, CEH) Experience with SIEM platforms (Splunk, Elastic, or AWS-native) Penetration testing or red team experience Kubernetes security (OPA/Gatekeeper, Falco, network policies) Incident response and forensics experience What ...

Senior Network Engineer, Studios

Location
Greater London, England, United Kingdom
class) and the hybrid workflows that depend on them. Security: hands‐on management of the firewall estates; network hardening; security telemetry to the group SIEM; work within a security‐by‐design framework aligned to group policy, with deviations justified and recorded. Build, migration and leadership -- Project One: support lab validation ...

Incident Manager (UK)

Location
United Kingdom
Frameworks and governance such as NIST, SOCII, ISO27001 etc. Security certification such as CEH, CCNA, OSCP, GCIH etc. Security tools/practices such as SIEM, EDR, NDR, OSINT etc. Security clearance. Commitment As a ‘bench’ Incident Manager you will be called whenever a suitable incident is raised by our clients ...

SOC Analyst - Level 3

Hiring Organisation
ARM (Advanced Resource Managers)
Location
London, United Kingdom
Employment Type
Contract
Contract Rate
GBP Annual
IR35 * Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment. * Hands-on experience investigating security alerts and incidents using SIEM * Experience analysing Windows and Linux host artefacts, authentication activity * Working knowledge of incident response life cycle activities including preparation, detection, analysis, containment, eradication, recovery and ...