326 to 350 of 671 SIEM Jobs in the UK

build custom detection logic, automate response workflows, and create tools that operationalize security at scale across cloud-native and distributed computing environments Experience with SIEM platforms, detection technologies, and forensic investigation techniques with demonstrated ability to build detection for novel attack techniques that don't have established patterns yet and ...

security strategy.Strong knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials.Strong experience of cyber risk management, audit, assurance and remediation.Experience overseeing SOC, SIEM, security monitoring and alerting capabilities.Understanding of vulnerability management, penetration testing and security remediation.Experience developing cyber security KPIs, KRIs and management reporting.Strong people management, stakeholder management ...

knowledge and practical experience of NIST, ISO 27001 and Cyber Essentials. Strong experience of cyber risk management, audit, assurance and remediation. Experience overseeing SOC, SIEM, security monitoring and alerting capabilities. Understanding of vulnerability management, penetration testing and security remediation. Experience developing cyber security KPIs, KRIs and management reporting. Strong people ...

securing DLG’s environments in line with compliance commitmentEnsuring security technical platforms are configured to optimise the overall security offered to DLG.Improving SIEM coverage of DLG’s overall environmentMaking sure that all changes to the production environment have been reviewed and approvedCommunicating and building relationships at various levels with ...

testing, reporting and evidence collection.Develop command line tools, APIs, integrations and workflows that simplify assurance activity.Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools.Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities.Use data to identify control ...

and evidence collection. Develop command line tools, APIs, integrations and workflows that simplify assurance activity. Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools. Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities. Use data ...

Comfortable writing and reviewing code (Python, Go, TypeScript, or similar)Experience building integrations and automating security workflowsExperience with security tools at scale — SAST, DAST, SIEM, endpoint, cloud, identity, AI/ML, vulnerability management platformsAI and agentic security knowledge:Understanding of AI/ML security risks, attack vectors, and vulnerabilitiesFamiliarity with ...

made it operational, feeding hunts, detections and decisions. A track record of leading globally distributed technical teams across time zones. Hands‐on experience with SIEM/Data Lakes, implementing and supporting. Experience with DDoS mitigation. Experience with threat hunting and purple teaming. OUR OFFER A collaborative environment with colleagues from ...

made it operational, feeding hunts, detections and decisions. A track record of leading globally distributed technical teams across time zones. Hands-on experience with SIEM/Data Lakes, implementing and supporting. Experience with DDoS mitigation. Experience with threat hunting and purple teaming. OUR OFFERA collaborative environment with colleagues from ...

plans aligned with MITRE ATT&CK, NIST, and CIS benchmarks, while guiding forensics and incident response activities. The role requires hands-on SOC/SIEM management, cloud security expertise (AWS/GCP), and a background in automation and threat modeling. #J-18808-Ljbffr ...

more of the following areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence ...

incident response, or cyber security operations environment Experience investigating complex threats including ransomware, malware, account compromise, and targeted attacks Hands-on experience with SIEM, EDR, cloud security, and detection technologies A methodical approach, strong technical judgement, and the ability to remain calm during high-pressure incidents This is a hybrid ...

management.Significant knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks.Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work.Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...

telemetry uplift. Minimum Qualifications Experience in detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience ...

commercial enterpriseExperience working with and relationships across financial services, manufacturing, retail or CPG, healthcare, or energy or utilities marketKnowledge of modern security stack, including SIEM/SOAR, EDR/XDR, IAM, data security, or cloud security, and where AI is being adopted across itKnowledge of emerging AI-security topics, including ...

five (5) weeks. This rotation ensures uninterrupted monitoring and response capability across all time zones and handoff points.Key ResponsibilitiesTriage and analyze security alerts from SIEM, EDR, and other detection tooling, prioritizing based on severity, risk, and business impact.Investigate security incidents and cases end-to-end, from initial detection through containment … Capabilities, and SkillsDemonstrable experience in a SOC, incident response, or security analyst role (typically 2+ years).Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling.Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework.Strong understanding of core ...

attribution analysis. Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries. Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defence teams with intelligence‐driven context and prioritisation. Develop and refine … individual contributor or functional lead. Strong knowledge of system, network, and application security, including Windows and Linux internals. Experience analysing threats using telemetry from SIEM, EDR, and TIP platforms, and familiarity with CTI tools and sources such as OSINT, dark web sources, ISACs, Recorded Future, Mandiant, Flashpoint, Anomali, ThreatConnect ...

A leading cybersecurity firm in the UK is seeking a Senior Security Engineer to join their Managed Security Service Provider team. The role involves driving Sentinel adoption, leading client onboarding, and developing custom data connectors. ...

with detection engineering, incident response, and security automation. You’ll design detections, lead high-severity investigations, build automation with tools like Tines, and own SIEM/data pipelines. You’ll mentor engineers and translate threat intel into concrete improvements. #J-18808-Ljbffr ...

technical security infrastructure and policies.Develop technical solutions and new security toolsets to mitigate security vulnerabilities and automate repeatable tasks.Build, implement and tune SIEM event correlation rules/logic, and content, to filter out security events associated with known network behaviour, known false positives and/or known errors.Build, implement and ...

service governance, customer success and major incident coordination while driving continual improvement and ensuring exceptional service delivery. This role covers SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services, with a focus on translating security data into actionable business insights #J-18808-Ljbffr ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

Researcher's threat models and failure mode library. Maintain awareness of how enterprises currently secure coding agents (or don't), what tools they use (SIEM, DLP, CSPM), and how Watcher fits into their existing stack. Understand which failure modes are the biggest problems for security buyers, and prioritize systematically what ...

fundamentals and common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength ...

blockchain fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...