326 to 350 of 793 SIEM Jobs in the UK

and automation Familiarity with data visualization tools (Tableau, Power BI, Looker, or similar) Experience working with large-scale, high‐velocity datasets (logs, streaming telemetry, SIEM data) Bonus: Understanding of security concepts (e.g., MITRE ATT&CK framework, security operations experience) Analytical Skills: Strong statistical analysis and quantitative reasoning skills Ability ...

networking integration (vSphere, vSAN, Aria Suite)* Overlay/underlay network design concepts* Automation of network configuration (Ansible, Terraform, APIs)* Integration with security tooling (SIEM, SOC platforms)* Cloud networking (AWS, Azure) and hybrid connectivity* Experience working in secure or regulated environmentsThis is not an exhaustive list, and we are keen ...

maintain security protocols, including Multi-Factor Authentication (MFA), Mobile Device Management (MDM), and Intune solutions. Use and administer security tools such as Microsoft Defender, SIEM, and EDR solutions. Proactively monitor security alerts and address potential threats, collaborating with global security teams as needed. Process Improvement & Automation Drive process improvements and ...

perform effectively in high-pressure situations Desirable ITIL certification ISO 22301 and/or ISO 27001 knowledge Experience with Cisco, VMware, ServiceNow, Veeam, Fortinet, SIEM and vulnerability management tools You will play a key role in protecting critical business services, driving operational resilience and leading responses to incidents that have ...

conduct vulnerability assessments, lead incident response, and implement security policies and procedures across the organization. You will ensure GDPR and ISO27001 compliance, work with SIEM tools for threat detection, manage access controls and firewalls, oversee security awareness, perform audits and risk assessments, and help maintain disaster recovery and business #J ...

/DX improvements. Strong automation background (Python; Terraform/Ansible; policy-as-code) and telemetry integration (synthetic monitoring, real-user metrics, Grafana/Datadog), SIEM, and ticketing. Hands-on experience with multi-region resiliency, global load balancing, egress segmentation, and change governance. Demonstrated AWS networking/security expertise for proxy ...

package registries, internal APIs and databases while implementing specified controls: Agent Firewall egress allowlisting, default‐deny NetworkPolicy, SSH port‐forward restrictions, managed secrets and SIEM audit events Scale, cost and developer experience — load test against the vendor sizing envelope, tune prebuilds, autostop, dormancy, quotas and warm capacity, and measure cold ...

What you'll be doing Working at 2nd Line level , investigating and responding to security incidents through to resolution Monitoring customer environments and investigating SIEM alerts Proactively threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra ...

and communicate clearly under pressure. Comfortable working in a fast-paced, shift-based environment (including nights and weekends). Nice to have: Experience with SIEM tools (Splunk preferred). Working knowledge of DDoS attacks and network security concepts. Familiarity with virtualisation technologies (KVM, ESXi). Linux and basic scripting ...

experience Desirable Skills Azure Databricks, Data Factory, or Data Lake Kafka, Event Hubs, or Spark Kubernetes Azure Monitor, Grafana, or Prometheus Cybersecurity experience, including SIEM/SOAR technologies Financial Services experience Ideal Candidate You will be a Software/Data Engineer first , with strong Azure expertise and the ability ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

Security Engineer (SIEM/XDR) – Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) Making sure you fit the guidelines as an applicant for this role is essential, please … read the below carefully. This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading tech company. The Security Engineer (SIEM/XDR) role is Hybrid, in the London office 1-2 times a month . You must be UK based and able to travel ...

helping ensure customer environments are onboarded effectively and monitored securely. Working closely with SOC Analysts, Engineers and customers, you will support the implementation of SIEM and SOAR technologies, maintain SOC infrastructure and contribute to the ongoing improvement of our security operations capabilities. What will you be doing? Design, deploy and … support SIEM solutions to meet customer security requirements. Work with customers and internal stakeholders to gather requirements and support onboarding activities. Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability. Support the development and deployment of SOAR playbooks to streamline incident response processes. Maintain the availability ...

Operations Centre (SOC) transformation engagements. Candidates are expected to have progressed through architecture, engineering, SOC or consultancy roles and to have delivered enterprise-scale SIEM, EDR/XDR and managed security service change. The role will initially lead a major enterprise migration from an incumbent endpoint detection and limited-hours … Cyro's propositions and pre-sales activity. Primary responsibilities: soc architecture and Transformation: Lead discovery, current-state assessment and target-state design for SOC, SIEM, SOAR, EDR/XDR and protective monitoring engagements. Define monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans ...

management of security incidents, from investigation and containment through to remediation and post-incident review Monitor, triage and respond to security threats using EDR, SIEM, NDR and email security platforms, working closely with managed security providers Own the organisation's patching and vulnerability management programme, ensuring timely remediation and reporting … architecture Requirements Extensive experience in an IT infrastructure, network security or cyber security engineering role Proven experience administering enterprise security technologies, including firewalls, EDR, SIEM, NDR, SASE, email security and Network Access Control (NAC) Strong knowledge of vulnerability management, enterprise patching and incident response, with the ability to investigate, prioritise ...

weeks. This rotation ensures uninterrupted monitoring and response capability across all time zones and handoff points. Key Responsibilities Triage and analyze security alerts from SIEM, EDR, and other detection tooling, prioritizing based on severity, risk, and business impact. Investigate security incidents and cases end-to-end, from initial detection through … Skills Demonstrable experience in a SOC, incident response, or security analyst role (typically 2+ years ). Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling. Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Strong understanding ...

native utilities and investigative artefacts. \n Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions. \n Experience using endpoint detection and response ...

controls, native utilities and investigative artefacts. Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues. You will support the initial implementation … type and severity. Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Stakeholder and Client Reporting, and engagement Assist in architectural design to facilitate the onboarding ...

eradication, and post-incident review, and help mature the firm's incident response playbooks, tooling, and processes globally.Monitor, tune, and improve detection capabilities across SIEM, EDR, network security monitoring, email security, and cloud security posture management tools.Partner with IT infrastructure, application development, and business teams to embed security into … threat landscape facing financial institutions, including phishing/BEC, insider threats, and data exfiltration risks tied to confidential deal information.Practical experience with SIEM platforms, log analysis, and security monitoring/alert triage.Working knowledge of vulnerability management processes and tools (e.g., Tenable, Qualys, Rapid7).Strong scripting/automation skills (e.g., Python ...

delivering real-world impact and working alongside talented colleagues who care deeply about quality, collaboration and customer success. About the Role: As an OT SIEM Engineer, you will play a key role in strengthening cyber security monitoring and threat detection capabilities across complex enterprise and Operational Technology (OT) environments, with … particular focus on Microsoft Sentinel. This is a hands‐on engineering role where you will support the development and enhancement of SIEM capabilities, integrating security telemetry, developing detection content and implementing automation to improve security operations. You'll work closely with Cyber Defence and Security Operations teams, helping to deliver ...

and GDPR. Proven leadership across information security, cyber risk or assurance. Strong technical understanding of cloud, application, network, endpoint and data security. Experience with SIEM/SOC, vulnerability management and incident response. Strong stakeholder management with a pragmatic, hands-on approach. #J-18808-Ljbffr ...

Penningtons Manches LLP is seeking a Security Engineer to protect the firm’s technology environment. You will monitor security operations, triage alerts, coordinate with the external SOC, and lead incident response for security events. You ...

looking for: An understanding of information security principles and controls, including areas such as encryption, identity and access management and security information and event management Experience gained within an IT, technology, information security, risk or business-focused environment Strong analytical and judgement skills, with the ability to assess information and ...

technical authority and SME for security data within the Elastic Security ecosystem Design, implement and maintain scalable security data ingestion pipelines into Elastic SIEM Own the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources Define and continuously improve data quality standards ...