351 to 375 of 793 SIEM Jobs in the UK

across the organization. The role requires hands-on experience in security monitoring, incident response and AWS security, with a focus on proactive threat hunting, SIEM tuning and security tooling #J-18808-Ljbffr ...

issues as required. Ensure appropriate monitoring, alerting, triage and escalation arrangements are in place for cyber security events, and that security tools such as SIEM, endpoint protection, email security and privileged access controls are configured and used effectively to support detection, response and assurance. Lead on cyber assurance activity, including ...

programme A background in a regulated environment, such as financial services, insurance or the public sector Hands-on Sentinel onboarding, including custom connectors and SIEM integration (APIs, Logic Apps, Azure Functions, Logs Ingestion API) Practical Microsoft Purview experience AWS and Azure security experience Experience baselining a partly configured environment and ...

weaknesses, then partner with security engineering and technology teams to close gaps Own detection and tooling: Own our security monitoring and detection capability, including SIEM, EDR and threat intelligence platforms, driving the tooling roadmap, tuning detections to cut noise, and championing automation Report on what matters: Define and own Security ...

What we’re looking for: Proven experience leading SOC/Cyber Security Operations teams Strong background in incident response and threat management Experience with SIEM, monitoring, and detection engineering Knowledge of frameworks such as ISO27001, NIST, GDPR Ability to operate at both technical and strategic levels #J-18808-Ljbffr ...

and enterprise environments. Design & Integration: Produce High-Level Designs (HLDs), Low-Level Designs (LLDs), and security architecture documents while integrating CyberArk with Active Directory, SIEM, and ITSM tools. Policy & Security Governance: Define privileged access policies, credential management, session monitoring, and conduct security gap analyses aligned to industry standards (NIST/ ...

and enterprise environments. Design & Integration: Produce High-Level Designs (HLDs), Low-Level Designs (LLDs), and security architecture documents while integrating CyberArk with Active Directory, SIEM, and ITSM tools. Policy & Security Governance: Define privileged access policies, credential management, session monitoring, and conduct security gap analyses aligned to industry standards (NIST/ ...

What you’ll be doing Building and improving security controls across our cloud and Microsoft 365 environments Developing detections, automations and response capabilities using SIEM, SOAR and security tooling Investigating and responding to security incidents and helping drive lessons learned Conducting threat hunting and using threat intelligence to identify potential … recovery capabilities and operational security processes What we’re looking for Security Engineering, Security Operations or Cloud Security Microsoft Azure (preferred), AWS or GCP SIEM and SOAR platforms such as Microsoft Sentinel or Splunk Microsoft Defender, Entra ID, EDR/XDR and identity security technologies Incident response, threat hunting and ...

hunting, support detection automation, and help drive remediation with cross-functional teams. You’ll bring 5+ years in Security Operations/Incident Response, strong SIEM/EDR experience, and hands-on skills in KQL/SPL, PowerShell and Python. #J-18808-Ljbffr ...

handling incident remediation and guiding both technical and non-technical teams with security best practices. The ideal candidate brings cloud security expertise, familiarity with SIEM/SOAR/EDR tools, and knowledge of frameworks like NIST/ISO. Willingness to obtain required UK clearance is essential. #J-18808-Ljbffr ...

monitor threats, investigate incidents, and drive improvements in security posture with advanced tooling and automation. Role requires hands-on expertise with firewalls, WAFs, VPNs, SIEM/SOAR, and Zero Trust. Hybrid working with in-office presence in Osterley is expected as part of Sky’s campus culture. #J-18808-Ljbffr ...

with two days per month in the London City office, and a day rate of £250 inside IR35. The successful candidate will work with SIEM tools, contribute to incident handling, and help improve security controls. #J-18808-Ljbffr ...

Operations Analyst (SecOps) Permanent Location: South Manchester (Hybrid - onsite 2 days a week) Salary: £45,000 - £55,000 (+ benefits) Skills: SecOps, Microsoft Sentinel, SIEM, Incident Response, Microsoft Defender We are recruiting for an experienced Cyber Security Operations Analyst to join an established IT Managed Services Provider, supporting security operations ...

Network Architekturen – egal ob on-premises, hybrid oder in der Cloud Technisches Know-how in Enterprise Networks, Cloud-Security und modernen Security-Lösungen (z.b. SIEM/SOC, Secure Access, RAS Lösungen). Idealerweise Zertifizierungen wie CISSP, CISM, ISO 27001 Lead Implementer, CISA, Cisco Cybersecurity Associate, CCNA oder ExtremeXpert Associate. ...

Threat hunting, analysis, monitoring, Optimising, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best ...

Analysts to manage Authority’s environment’s systems. Skills/Experience: Previousexperience of Enterprise ICS/network architectures and technologies Experienceand knowledge of SIEM solutions; having the ability to identify use cases andtheir creation, their deployment and tuning. Experienceas a mentor/coach to junior analysts Previousexperience of utilising ...

with SOC 2 and ISO‐27001 Strong understanding of cloud security principles (networking, IAM, secrets management, logging, monitoring) Experience implementing security tooling such as SIEM, EDR, and CSPM security platforms Track record of building scalable, pragmatic security programs in high‐growth environments Ability to balance strong security practices with usability ...

incidents, and support continuous improvement. You should have a background in IT or cybersecurity, strong analytical thinking, and good communication. Nice-to-have SIEM experience (QRadar, Splunk, Sentinel) and knowledge of TCP/IP and common threats. #J-18808-Ljbffr ...

Intune. Experience ofIdentity & Access Management Principles and Practices. Experience of Cyber Security principles and practices, including the administration and use of Microsoft Defender and SIEM tools. Experience ofApplication Packaging Principles and Practices. There will be opportunities for development and training. Part of the EUC Development role is packaging applications ...

control environments. Experience with SDN, network virtualisation, data-centre technologies or network automation . Knowledge of cyber-security technologies such as next-generation firewalls, SIEM, IAM and OT security monitoring. Experience planning design packages and preparing deliverables for formal client submissions. Why This Opportunity? This is an opportunity to work ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

infrastructure Conduct vulnerability assessments and penetration tests Lead incident response and mitigation Implement security policies and procedures Ensure compliance with GDPR, ISO27001 Work with SIEM tools for threat detection Manage access controls and firewalls Oversee employee security awareness programs Respond to emerging cyber threats Document incidents and reports Collaborate with ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

telemetry uplift. Minimum Qualifications Experience in detection engineering, security engineering, or software development with a focus on cybersecurity. Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience ...

knowledge and experience in advanced intelligence analysis techniques, security research, and Open-Source Intelligence (OSINT) to proactively identify and assess potential risks. Knowledge of SIEM tools such as Splunk will be beneficial to your day to day work. Demonstrated ability to effectively convey complex cybersecurity concepts to both technical and ...