351 to 375 of 670 SIEM Jobs in the UK

only through customer success proxies. Experience with hyperscalers, MSSPs and/or PubSec is a solid plus.Security Domain Knowledge: Hands-on knowledge with SIEM, SOAR, XDR or broader security operations platforms, either as a product manager or as a practitioner such as a SOC analyst, detection engineer, or security architect. ...

analysis, digital forensics, crisis management, SOC operations and supporting toolsStrong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous.Also, during your professional experience you will have gained experience in an OT/ ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

cloud or security technologies Agile project delivery MS Project and Azure DevOps PRINCE2 methodology Managing multiple concurrent projects Experience delivering projects involving Microsoft Sentinel, SIEM, SOC, Microsoft Defender, EDR, networking or managed security services would be highly advantageous. Why apply? Salary up to £65,000 Hybrid working just one office ...

cyber resilience, influence security decisions and drive secure DevSecOps practices across cloud, networks and applications. This role combines leadership with hands-on expertise in SIEM/XDR and security automation. #J-18808-Ljbffr ...

with experienced engineers to design secure systems. The position requires strong fundamentals in networking, Windows/Linux, IAM, and cloud concepts, plus exposure to SIEM/EDR tooling. A hybrid work model is available, with on-site collaboration at least three days per week. #J-18808-Ljbffr ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

Conditional Access) Azure IaaS and networking (VPN Gateway, routing, connectivity design) Strong working knowledge of: Enterprise networking (routing, switching, firewalls) Security operations, logging, and SIEM integration Proven experience leading engineering teams across infrastructure/network/security transformations Strong data handling capability, including advanced Excel for engineering control and analysis ...

bear in a tailored response to a major incident.Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.“Nice To Have” Skills and Experience:BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer ...

Digital Vault, PVWA, CPM, PSM, and Privileged Threat Analytics (PTA) (where applicable). Experience integrating CyberArk with enterprise infrastructure such as Active Directory, LDAP, SIEM, IAM, and cloud platforms. Ability to define architecture, lead technical design workshops, and provide implementation best practices. Strong troubleshooting, migration, and upgrade experience for CyberArk ...

mature SOC Knowledge of Service Management tools, such as: CRM, Salesforce, Confluence, Power apps, Microsoft 365Solid understanding of cyber security concepts, including SIEM, EDR, XDRStrong team playerAbility to work under pressure, handling escalations calmly and competentlyAbility to use initiative and work independentlyOrganised and professional with the ability to multi-taskExcellent ...

SaaS apps both web and native, including their architecture, user experience considerations, and common integration patternsSecurity and performance monitoring, and 3rd party signals integrations (SIEM, WAF, etc)Understanding of the general cybersecurity landscape with respect to threats and challengesExperience with SaaS/PaaS/cloud-based services, driving their adoption ...

Defining the system specifications to support optimal performance.· Integrate workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, data discovery and classification tools (e.g., Varonis, BigID), and cloud platforms like Microsoft Azure.· Define the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

iboss platform and multi-tenant console, so partners can support their own end customers directly. Support partners' technical integration questions — RMM/PSA tooling, SIEM, ticketing systems, and existing network stack. Build partner-facing enablement materials: technical FAQs, architecture reference diagrams, onboarding guides, and training/certification content, distinct from ...

experience Experience within energy, utilities, renewables, oil & gas or other critical infrastructure sectors. Knowledge of security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. ...

Code Safe Deployment strategies and CI/CD Cloud-based and Cloud-native system design Observability Developer Experience DevOps and SRE InfoSec and SIEM If you know this, even better: We’re interested in talking to people who have worked with different technologies. We’re looking for candidates ...

work and can collaborate effectively across technical and business stakeholders. Responsibilities for the Cyber Security Analyst: Monitor, investigate and respond to security alerts across SIEM platforms and ticketing systems, managing incidents through to resolution Participate in an on-call rota to support live security incidents Manage incident queues and approvals … overall security posture Essential Skills for the Cyber Security Analyst: Strong experience in security use case development and security tooling operations Practical experience with SIEM platforms and vulnerability management solutions Solid understanding of Security Operations processes and incident response frameworks Knowledge of networking fundamentals, IAM, perimeter controls and operating systems ...

client environments. CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from … access models. Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues.You will support the initial implementation and … type and severity.• Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. • Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization.• Stakeholder and Client Reporting, and engagement• Assist in architectural design to facilitate the onboarding ...

onboarding of EMEA detection rules into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE … experience). Strong background in security incident investigation, threat analysis, and threat hunting. Experience reviewing, tuning and validating detection rules and security alerts within SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, or LogRhythm . Experience working with Microsoft Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex ...

campaign attribution analysis.Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries.Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defense teams with intelligence-driven context and prioritization.Develop and refine Priority Intelligence … senior individual contributor or functional lead.Strong knowledge of system, network, and application security, including Windows and Linux internals.Experience analyzing threats using telemetry from SIEM, EDR, and TIP platforms, and familiarity with CTI tools and sources such as OSINT, dark web sources, ISACs, Recorded Future, Mandiant, Flashpoint, Anomali, ThreatConnect, or VirusTotal.Hands ...

resilience. You will sit at the heart of our cyber defence operations, working daily with technologies including Microsoft O365 Defender, Entra ID, Intune, Rapid7 SIEM, and Sophos Antivirus. Youll be responsible for monitoring security events, investigating suspicious activity, responding to incidents, and continuously improving our security posture. This … cyber security What you will do: Security Monitoring & Incident Response Actively monitor alerts and telemetry across endpoints, identities, email, and cloud services using Rapid7 SIEM, Microsoft Defender, and Sophos AV. Investigate suspected cyber attacks including malware infections, phishing campaigns, identity compromise, and unauthorised access attempts. Perform triage, root cause analysis ...

Google Public Sector UK is seeking a Security Platform Engineer to design, build, and manage cloud-native security platforms with a focus on Kubernetes-based environments. You will develop scalable tooling, automate security controls, and ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...