451 to 475 of 673 SIEM Jobs in the UK

plans for the Palo Alto Networks portfolio, ensuring Nomios has a clear commercial approach across areas such as network security, Cortex, XSIAM, XDR, SASE, SIEM, EDR, AI security and OT security. Increase the attachment of Nomios managed and professional services to Palo Alto Networks solutions, including relevant managed NOC, managed ...

Defining the system specifications to support optimal performance. Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure. Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix ...

written and verbal communication skills in English Experience with Kafka/Pulsar, CAEP, RISC, feature stores, OPA/Rego, Zero Trust, post-quantum cryptography, SIEM/XDR architectures, or mobile threat defence is highly valued. Spanish is a plus. Recruitment Process Introductory conversation with Talent CTO & CPO conversations Collaborative ...

focusing on key customer accounts and delivering value to public sector accounts.Extensive platform selling experience in complex sales with multiple buying centers.Experience selling Cybersecurity, SIEM, EDR or CNAPP (DevSecOps, CloudOps) solutions is highly preferred.Established trusted relationships with CIOs and CISOs with the ability to influence and drive strategic conversationsExpertise ...

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, traces, and security events with features such as APM, RUM, SIEM, Kubernetes monitoring, and more, enhancing operational efficiency and reducing observability spending by up to 70%.We seek a **Product Reliability Engineer** who ensures that the Coralogix ...

including network security, malware analysis, threat hunting, threat intelligence production, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem ...

including network security, malware analysis, threat hunting, threat intelligence production, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem ...

that underpin critical defence, government and public sector services.What you will do as a Senior Application EngineerSupport, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and responseDeliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives.Contribute … sharing.Ensure compliance with engineering governance, ITSM processes, and cyber security policies.What you’ll bringSolid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar)Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions.Understanding of application lifecycle management, integration patterns, and secure ...

underpin critical defence, government and public sector services. What you will do as a Senior Application EngineerSupport, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and responseDeliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute … compliance with engineering governance, ITSM processes, and cyber security policies. What you'll bringSolid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar)Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions. Understanding of application lifecycle management, integration patterns, and ...

critical defence, government and public sector services. What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. … with engineering governance, ITSM processes, and cyber security policies. What you'll bring Solid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar) Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions. Understanding of application lifecycle management, integration patterns, and ...

and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level … security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands‐on experience using KQL, Microsoft Defender XDR, and threat intelligence sources ...

secure environments (e.g. air-gapped, defence)Desirable:Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesAutomation of account onboarding/offboarding (API-driven)Integration with SIEM/SOC tooling ...

secure environments (e.g. air-gapped, defence)Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, PKI, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesAutomation of account onboarding/offboarding (API-driven)Integration with SIEM/SOC tooling ...

environments (e.g. air-gapped, defence) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Automation of account onboarding/offboarding (API-driven) Integration with SIEM/SOC tooling ...

cyber security strategy, detection capabilities and security controls across cloud, infrastructure, applications and data. Work with modern technologies, developing your expertise across cloud security, SIEM, XDR, DevSecOps and security automation. Collaborate with experienced colleagues across Information Security, Technology, Architecture and Engineering. Continue to grow in a culture that values curiosity … containment, recovery and communication. Conducting proactive threat hunting and investigating suspicious activity across cloud and on-premise environments. Monitoring and analysing security events using SIEM, XDR and cloud-native security technologies. Supporting the ongoing development of detection capabilities, alerting and incident response playbooks. Reviewing technical solutions, architecture and technology changes ...

business-as-usual activity. Conducting risk analysis reviews, identifying security gaps, and defining remediation options. Onboarding and reviewing log sources into the SOC/SIEM, and validating cyber incident alerts. Producing reports on developing risks and relaying threat information back to stakeholders. Owning and participating in security audits, assessments and … Hands-on experience with ServiceNow ticket management Previous experience within a technical cyber security team, ideally with SOC exposure. A strong working knowledge of SIEM, vulnerability scanners, WAF, IDS/IPS, firewalls, IAM, patch management and endpoint/MDR/EDR protection. Experience investigating and contextualising modern cyber threats, and ...

enabled risk.Key ResponsibilitiesLead security and IT projects to enhance the security posture of infrastructure and the companyDetect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling (e.g. CrowdStrike, SentinelOne)Conduct threat hunting across cloud and endpoint environments using a Zero Trust frameworkAdminister company-wide IAM and security monitoring … Science or a related field, or significant professional security experience 3+ years of hands-on experience in security engineering and incident response Experience with SIEM platforms and security monitoring systems Experience with EDR tools such as CrowdStrike or SentinelOne Knowledge of SOAR platforms and automation of security workflows Familiarity with ...

determine whether it represents a confirmed security incident. This includes performing detailed analysis to understand root cause, scope, impact, and attacker behaviour using SIEM platforms and supporting telemetry. You will coordinate and support incident response activities in line with defined SOC and customer processes, assisting with containment, eradication, and recovery … continual service improvement by identifying recurring issues and proposing corrective actions. What experience you'll bring: You will have hands‐on experience working with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, and a strong understanding of incident response workflows and escalation management. You will be comfortable analysing security ...

security, and managed bespoke and off-the-shelf applications across the firm. Задачи: Maintain and optimise the security platform, including configuring EDR policies, tuning SIEM rules, and optimising system performance Monitor security threats, analyse alerts, respond to incidents, conduct vulnerability scans, and support remediation and risk mitigation Lead and participate … with relevant legal and regulatory obligations, including Solicitors Regulation Authority standards, regulations, and principles Требования: Experience managing EDR platforms, configuring EDR policies, and tuning SIEM Experience with Microsoft Security, including Defender ATP, Azure Security Centre, Entra ID, Intune, and Conditional Access Experience configuring and managing next-generation firewalls, preferably Palo ...

and maintain detection coverage for cloud‐native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud. Vulnerability & Configuration Management: Own vulnerability management for cloud … and integrating security scanning into CI/CD workflows. Good experience with container and image security — scanning, runtime protection, supply chain risk. Experience with SIEM and detection engineering — building and tuning cloud‐native detection rules, threat hunting across CloudTrail and application logs. Familiarity with automation platforms and AI‐driven security ...

and maintain detection coverage for cloud-native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud.Vulnerability & Configuration Management: Own vulnerability management for cloud workloads … Terraform, CloudFormation) and integrating security scanning into CI/CD workflows.Good experience with container and image security — scanning, runtime protection, supply chain risk.Experience with SIEM and detection engineering — building and tuning cloud-native detection rules, threat hunting across CloudTrail and application logs.Familiarity with automation platforms and AI-driven security tools ...

customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.Your role as Senior Security Engineering ConsultantThe Security Engineering Consultant role sits within the Security Operations … within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A key aspect of the role ...

Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. Key Responsibilities: Design and deliver detection rulesets across SIEM and XDR platforms Develop and tune detection logic using KQL or equivalent query languages Design detection use cases aligned to MITRE ATT&CK and real … detection approaches Identify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing ...

Designs, including specification of interfaces between solution components. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment … tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

Investigating and analysing escalated security alerts from Tier 1 analystsConducting detailed incident investigations to determine scope, impact and root causeMonitoring and analysing activity across SIEM, EDR and other security platformsIdentifying indicators of compromise, suspicious activity and emerging threatsSupporting incident response and containment activitiesPerforming threat hunting activities to proactively identify potential … within a Security Operations Centre (SOC), cyber security operations or incident response environmentExperience investigating and responding to complex security alerts and incidentsStrong knowledge of SIEM platforms and security event analysisExperience with endpoint detection and response (EDR) technologiesA good understanding of incident response processes and methodologiesKnowledge of common attack techniques, tactics ...