376 to 400 of 670 SIEM Jobs in the UK

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.Key … governance requirements.Conduct periodic security audits and risk assessments, offering actionable recommendations.Security tooling engineering and maintenance:Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.Manage upgrades, configuration changes and feature enhancements.Support the Cyber Incident Response teamProvide support on all types of cyber incident response as part ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...

aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity. … Conduct periodic security audits and risk assessments, offering actionable recommendations. Security tooling engineering and maintenance: Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets. Manage upgrades, configuration changes and feature enhancements. Support the Cyber Incident Response teamProvide support on all types of cyber incident response ...

ISO27001, PCI and GDPR. Possibly a certified ethical hackerKnowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions Understanding of common frameworks, such as ITIL or LEAN is preferredGood exposure of user environment management, including desktops ...

challenge assumptions, influence stakeholders, and work with engineering and operations to embed security into delivery pipelines, with a focus on AWS, IAM, data protection, SIEM, and incident response. #J-18808-Ljbffr ...

Jobtailor, based in Greater London, seeks a Senior Cyber Security Operations Manager to drive performance across Shared Service's Cyber Services. You will act as a technical escalation point and line manager, guiding teams through ...

successful candidate will operate as a market-facing leader and trusted advisor for enterprise clients. They will help clients modernise their SOC, consolidate SIEM and XDR capability, improve response outcomes, and realise the value of Microsoft Security investments through practical, scalable and commercially strong solutions. Key ResponsibilitiesThe AMBG Senior Cyber ...

service documentation and reports. Experience working around cyber security services or SOC environments would be particularly useful, with an understanding of technologies such as SIEM, EDR or XDR beneficial. Experience with tools such as Microsoft 365, Salesforce, Confluence or Power Platform would also be advantageous. About ...

and improve a dedicated SOC protecting client networks in Azure and AWS. You will work in a 24/7 shift-based environment, leveraging SIEM tools to detect and investigate security incidents, and collaborate with multiple teams. The role requires flexibility for DV/SC readiness and hybrid working where ...

systemsExperience with one or more of the following areas Administering or deploying monitoring and observability tools such as CheckMK, Prometheus or ZabbixAdministering or deploying SIEM tools such as Elastic Security, Splunk or Trellix ESMWorking with dashboarding and visualisation tools such as Kibana or GrafanaPreferredAnsible automation experienceKnowledge of monitoring networking equipment ...

ForStrong experience with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring.Solid PowerShell scripting and automation skills.Experience with SIEM, SCOM, and enterprise troubleshooting tools.Knowledge of hybrid infrastructure and hyperconverged environments is advantageous.Cloud certifications are desirable but not essential. ...

with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring. Solid PowerShell scripting and automation skills. Experience with SIEM, SCOM, and enterprise troubleshooting tools. Knowledge of hybrid infrastructure and hyperconverged environments is advantageous. Cloud certifications are desirable but not essential. ...

and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven service modelling. Infrastructure-as-code and pipeline automation (Terraform, CI/CD) for platform ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

solutions across internal and customer networks. Act as a technical centre of excellence for network and device security. Monitor and investigate security events using SIEM, IDS/IPS and other security tools. Investigate and resolve security incidents and provide incident response support. Manage vulnerabilities and support penetration testing and security … design. Liaise with customers, suppliers and technology partners as required. Technical Requirements Strong hands-on experience with: Cisco firewalls, routers and switches Juniper platforms SIEM IDS/IPS Vulnerability management Penetration testing Computer forensics Secure network design and management Security monitoring and incident investigation Good knowledge of: ISO 27001 ITIL ...

work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats.Key ResponsibilitiesMonitor and respond to security alerts across SIEM and EDR platformsManage and tune security tools including firewalls, WAFs, and endpoint protectionInvestigate and support response to security incidentsPerform vulnerability assessments and remediation trackingSupport implementation … environmentsContribute to security policies, standards, and proceduresAssist with threat detection engineering and rule tuningRequired Skills & ExperienceStrong understanding of core security technologies (NGFW, WAF, EDR, SIEM)Experience in a SOC, security engineering, or infrastructure security roleGood knowledge of networking and common attack types (e.g. SQL injection, phishing, malware)Experience with ...

role You will evolve Checkout.com’s security posture across our multi-cloud environments and SIEM platform. This role sits at the intersection of cloud security engineering and detection capability — responsible for both hardening the infrastructure we operate on and ensuring we can see what's happening across it. You will … security baseline across AWS, Azure, and GCP. You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking on the most complex cloud security and detection engineering challenges across the organisation. What you’ll be responsible for Cloud Security Secure ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology.A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements.Key ResponsibilitiesOwn the incident … definition, SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance.Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks.Own the vulnerability management programme (on‐prem ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

and manage security incidents based on business risk and impact Conduct proactive threat hunting across endpoint, network, identity and cloud environments Develop and optimise SIEM detection rules, correlation logic and monitoring use cases Investigate security activity across cloud platforms including AWS, Azure and GCP Analyse threat intelligence and emerging attack … risk and exploitability Contribute to SOC maturity through automation, process improvements, playbook development and post-incident reviews Support and optimise security tooling including SIEM, EDR, email security, cloud security and threat intelligence platforms Produce security reports, operational metrics and technical documentation while collaborating with technology and security teams What ...

positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team … cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security monitoring technologies.Strong ...

positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team … cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security monitoring technologies.Strong ...

positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team … cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security monitoring technologies.Strong ...