426 to 450 of 499 SIEM Jobs in the UK

Cyber Security, with the following skills and experience: Experience in SOC operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform ...

including AWS and Azure . Infrastructure as Code (IaC) implementation experience. Experience integrating with enterprise services such as Active Directory, PKI, monitoring platforms, and SIEM solutions. Experience with DevSecOps tooling and CI/CD pipelines. API-driven automation of privileged account lifecycle management. Integration of PAM platforms with SIEM/ ...

guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance … read and write IAC (Terraform) code, comfortable with IAC lifecycles Familiarity with container security and Kubernetes Understanding of secure coding, penetration testing techniques, SIEM, and vulnerability management Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing ...

Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You’ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting … clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities ...

experience in Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with security testing, attack … Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure, AWS or Google Cloud APIs, REST integrations and automation Identity ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small … engineering teams Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR Experience onboarding data sources and services into SIEM platforms Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth Experience deploying applications across cloud, containerised and on-premises environments Strong understanding ...

vulnerability management activities and coordinate external penetration testing. Work alongside outsourced SOC and security partners to investigate and respond to security incidents. Ensure comprehensive SIEM monitoring across the technology estate. Develop, implement and maintain information security policies, standards and procedures. Assess cyber risks and recommend appropriate mitigation strategies. … Layer 2/3, OSPF and VPNs. Network security controls including Cisco ISE, TACACS, IPS and endpoint protection. Security monitoring and incident response within SIEM environments. Vulnerability management and penetration testing. Security governance aligned to ISO 27001, NIST and risk management frameworks. Developing security policies, conducting audits and managing security ...

Barclays seeks a Cyber Defence Engineering Lead to design, implement and maintain security solutions protecting the bank’s systems and sensitive information. You will drive cryptographic initiatives, IAM projects and secure engineering patterns across teams. ...

solutions. Bonus Points: Prior experience at an open‐source or developer‐centric infrastructure company. Familiarity with observability (logs, metrics, traces) or security analytics (SIEM/XDR) use cases. If you’re driven to build your own pipeline, master complex deal cycles, and help customers unlock the power of Search ...

Network Engineer/Network Analyst - Cisco, CCNP, LAN/WAN, SD-WAN, CheckPoint, Zscaler/NetScaler, Cisco ISE, Meraki WiFi, SIEM, BAU/Projects. 12 Month FTC. London Hybrid. c.£70k-£80k + Oncall + Bonus + Excellent Benefits Global Law Firm seeks an experienced Network Support Engineer to join ...

environments (e.g. air-gapped, defence) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Automation of account onboarding/offboarding (API-driven) Integration with SIEM/SOC tooling ...

controls across identity, endpoint, cloud and data protection. Configure and support Microsoft Intune, Microsoft Defender, Microsoft Purview and related Microsoft security technologies. Assist with SIEM configuration, alert tuning and security monitoring. Support Identity & Access Management improvements, including MFA, Conditional Access and Microsoft Entra ID. Work closely with Infrastructure, Platform and … Experience with Microsoft Intune and Microsoft Defender. Understanding of Identity & Access Management, including Microsoft Entra ID, MFA and Conditional Access. Experience supporting or configuring SIEM platforms (Microsoft Sentinel or similar). Knowledge of endpoint security and vulnerability management. Experience working within Azure and/or AWS environments. Basic PowerShell scripting ...

controls across identity, endpoint, cloud and data protection. Configure and support Microsoft Intune, Microsoft Defender, Microsoft Purview and related Microsoft security technologies. Assist with SIEM configuration, alert tuning and security monitoring. Support Identity & Access Management improvements, including MFA, Conditional Access and Microsoft Entra ID. Work closely with Infrastructure, Platform and … Experience with Microsoft Intune and Microsoft Defender. Understanding of Identity & Access Management, including Microsoft Entra ID, MFA and Conditional Access. Experience supporting or configuring SIEM platforms (Microsoft Sentinel or similar). Knowledge of endpoint security and vulnerability management. Experience working within Azure and/or AWS environments. Basic PowerShell scripting ...

responsibilities: This is an interesting opportunity where you will work with the cyber resilience team and assist with the Security Operations function, including EDR, SIEM, gathering security control framework evidence and general day-to-day assistance with security tasks. You will help deliver a strategy which will enhance the organisation … campaigns. Stay informed about emerging cyber threats and vulnerabilities. You will need: Good knowledge and understanding of SOC processes and procedures. Basic experience using SIEM systems such as MS Sentinel, LogRhythm, AlienVault, Splunk Good understanding of incident response stages and handling. Basic knowledge and experience using leading endpoint detection and ...

understanding of Information Security solutions e.g. email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Experience working within ...

SIEM Engineer - (Havant/Reading/Hybrid) - Inside IR35 Day Rate - up to £700 Duration - 6 months Harvey Nash's Client have a requirement for a SIEM Engineer, you must be SC Cleared to commence this post. You will support the team in: Lead onboarding and integration of log sources … and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks) Automate deployment and configuration across environments to improve consistency and speed of delivery Perform ongoing tuning and optimisation of detections ...

satellite communications and maritime technology sector. Duties and responsibilities of the Cyber Security Engineer: Develop and maintain information security policies, procedures and standards. Monitor SIEM, IDS/IPS and security monitoring tools, investigating and resolving cyber security incidents. Design, build, implement and support secure network solutions across internal and customer … Support colleagues with cyber security advice, training and best practice. Technologies you will work with include: Cisco Firewalls, Routers and Switches. Juniper networking platforms. SIEM and IDS/IPS solutions. Vulnerability Management and Penetration Testing tools. Computer Forensic tools. ISO27001, ITIL and GDPR. Qualifications and requirements: Minimum 5 years' experience ...

serviceswhile helping to shape and develop our cyber offering. What Youll Be Doing Analysing security alerts and detections from SOC tools, including SIEM Working with automation and playbooks using SOAR tools Implementing mitigation and remediation activities following cyber incidents Supporting the efficiency and effectiveness of SOC operations Contributing … What Were Looking For Essential Skills & Experience Strong understanding of advanced cyber security concepts Experience working in SOC or cyber advisory environments Knowledge of SIEM technologies and security monitoring Understanding of malware concepts and cyber risk management Ability to communicate complex technical findings to stakeholders Desirable Scripting experience (Python ...

priority, ensuring appropriate escalation and response. Manage end-to-end incident response activities from detection through to resolution. Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks. Conduct real-time analysis of logs and security data to identify malicious activity or policy violations. Work closely … documentation, and operational procedures. Requirements: Proven experience working as a SOC Analyst (Tier 2/3) within enterprise or critical environments. Strong experience with SIEM technologies (e.g. ArcSight or similar), including configuration and engineering support. Ability to triage security alerts and accurately assess risk, impact, and priority. Experience managing security ...

vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities. Understanding of security operations concepts, including security monitoring, incident response, SIEM platforms, managed detection and response (MDR), and threat investigation practices. Knowledge of cloud and hybrid environments (preferably GCP), alongside a solid understanding of Linux, Windows … application security testing, threat modelling, or security assessment activities. Exposure to media, streaming, or content delivery platforms. Experience with security tools (e.g., vulnerability scanners, SIEM, endpoint protection). Basic understanding of threat modelling techniques. Experience working in hybrid (on‐prem + cloud) environments. Benefits and perks Free SkyTV ...

/secure environments (e.g., air-gapped, defence) Desirable Cloud platforms (AWS/Azure) + Infrastructure as Code Integrating enterprise services (Active Directory, PKI, monitoring, SIEM) DevSecOps tooling and CI/CD pipelines API-driven automation of onboarding/offboarding SIEM/SOC integration for audit/monitoring Containers (Kubernetes, Docker ...

high level designs, low level designs and deployment level designs. Support the design of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate. Solution architecture of Security Operations Centre solutions to meet specific customer requirements, across solution conceptualisation, architecture … Policy and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy ...

bring your unique skills and perspectives to help pioneer progress and protect what matters most. The role will focus on building and maintaining SIEM environments, with a particular focus on the management of core environment setups and data onboarding into Cloud platforms. You will work closely with stakeholders to support … complex data ingestion routes, working collaboratively to engineer technical solutions. As part of this role, you will contribute to delivering a robust and reliable SIEM platform for our 24/7 EIT Cyber Security Operations to use to monitor and detect potential threats. Working as part of a collaborative and ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity ...

security monitoring strategy and best practice. What you will bring: Proven experience deploying and managing Splunk at enterprise scale. Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning. Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning … experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation. Strong problem-solving skills and a proactive approach ...