376 to 400 of 790 SIEM Jobs in the UK

and customer engagement models. + Technical Expertise - Deep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software. - Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools. + Sales Acumen - Strong consultative selling skills. - Ability to translate technical features into business benefits. + Leadership & Communication - Proven ability ...

means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Join our Digital & Data team and work alongside cyber security, product, design and technology specialists … their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures ...

impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. You'll also guide and mentor two analysts, without direct line management, and support the rollout … advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping teams identify, contain and remediate threats Give timely advice on response plans based on incident ...

onboarding of EMEA detection rules into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE … experience). Strong background in security incident investigation, threat analysis, and threat hunting. Experience reviewing, tuning and validating detection rules and security alerts within SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, or LogRhythm . Experience working with Microsoft Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex ...

support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing … updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. ...

expansion. Key Responsibilities Security Engineering & Operations Design and implement security solutions across cloud, endpoint, identity, and network security. Configure and maintain security tools, including SIEM, EDR, WAFs, firewalls, IAM, and vulnerability management platforms. Collaborate with infrastructure and DevOps teams to embed security into CI/CD pipelines. Lead the deployment … cybersecurity engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing ...

delivery of scalable, secure, and high-performing monitoring platforms. This includes supporting the deployment and integration of technologies such as Google SecOps (Chronicle), SIEM platforms, cloud-native security tooling, and network security solutions. Using your experience across cloud or infrastructure engineering with security exposure, you will help ensure platforms … Support the design, build, and maintenance of security monitoring platforms across cloud, hybrid, and on-premise environments Assist with the deployment and integration of SIEM and cloud-native security platforms, including Google SecOps/Chronicle and similar technologies Build and maintain log ingestion pipelines, ensuring reliable data flow across multiple ...

Experience in a Service Desk, IOC, NOC, or managed services environment. Strong knowledge of cyber security principles, security monitoring and incident response. Experience with SIEM, endpoint security and security event investigation (Microsoft security or ELK stack preferred but not required) Experience with digital forensics and incident response (DFIR) would … ID. Understanding of networking, firewalls, SD-WAN, wireless solutions, DNS, DHCP, TCP/IP, backup and recovery. Key Responsibilities Monitor and triage alerts from SIEM, EDR and cloud security platforms. Investigate security events, escalate threats and support incident containment and response. Analyse logs and monitoring data, assist with vulnerability remediation ...

Capgemini in the UK is seeking a Security Incident Management Analyst to detect, investigate, and respond to threats across government and commercial clients. You’ll monitor security systems, log incidents, and ensure tool health, collaborating ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response team: Provide support on all types of cyber incident ...

lead end-to-end security engineering projects in a Microsoft environment. You will work across identity and access management, cloud security, vulnerability management and SIEM/detection, with a focus on SSO improvements and Zero Trust initiatives. The role suits a hands-on security professional ready to take broader technical ...

Consulting Group is seeking an Information Security Analyst for its Security Operations Centre. The role involves monitoring security across SIEM/EDR, investigating alerts, and proactively hunting threats to protect PA's technology estate. You will develop detections, playbooks and dashboards; support forensics and post-incident reviews; and contribute ...

Ambikatechs is seeking a Cyber Security Analyst to safeguard IT systems, monitor threats, and ensure regulatory compliance. You will work with threat management, SIEM tools, and incident response to protect our infrastructure. Join a team that collaborates with IT, conducts risk assessments, implements access controls, and develops incident response plans. ...

vulnerability management, and IAM governance. The role interfaces with the external SOC and owns disciplines across vulnerability/compliance and IAM. You will monitor SIEM tools, lead incident response, manage Defender products, and tune detection policies. #J-18808-Ljbffr ...

initial triage of events and incidents; Support the operation and administration of the security stack, including endpoint protection, vulnerability management, email security, cloud security, SIEM/SOC integrations and secure access controls; Assist with vulnerability review, prioritisation, remediation tracking and reporting across servers, endpoints, cloud services and network infrastructure; Support … technical role; Monitoring, triaging and escalating security alerts, incidents or vulnerability findings; Using or supporting common security tools such as endpoint protection, vulnerability management, SIEM/SOC tooling, email security, identity protection, web security or cloud security platforms; Supporting Microsoft Windows, Windows Server, Microsoft Azure, Microsoft 365, Active Directory ...

service governance, customer success and major incident coordination while driving continual improvement and ensuring exceptional service delivery. This role covers SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services, with a focus on translating security data into actionable business insights #J-18808-Ljbffr ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

global and regulated environments. Preferred Qualifications Hands-on experience with Claroty, OPSWAT, or comparable OT security and file security platforms. Knowledge of network segmentation, SIEM, PAM, secure remote access, or industrial network architectures. PMP, PRINCE2, or equivalent project management certification. WHY YOU SHOULD JOIN FUSION: At Fusion, you’ll join ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

/Sheffield 3 days per week. This is a 12 month temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with ...

/Sheffield 3 days per week. This is a 12 month temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

policy and standards, and support incident response efforts across the Cyro digital estate. The role requires experience in security operations, familiarity with EDR, SIEM and network security, and the ability to work in a hybrid setup in Farnborough/Home. #J-18808-Ljbffr ...