451 to 475 of 499 SIEM Jobs in the UK

clear and effective stakeholder communication, and mentoring other members of the SOC team. What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities … Unix shell) Experience working in all phases of the SDLC Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products Industry recognized certifications (CISSP, GCIH, GCFA, OSCP ...

Monitor security events, alerts, and incidents across enterprise networks and systems. Manage security cases and tickets through to resolution. Analyse logs and data from SIEM platforms, security monitoring tools, network infrastructure, and endpoint technologies. Investigate and triage security alerts to identify malicious activity and determine attack methods and techniques. Follow … and Linux environments. Excellent written and verbal communication skills. Desirable Industry certifications such as GCIH, GCIA, or equivalent cyber security qualifications. Experience working with SIEM platforms and security monitoring technologies. Knowledge of Oracle and virtualised environments. What's on Offer Opportunity to work within a highly skilled cyber security team. ...

improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards, and governance Represent engineering in client governance and audit activities … issues Experience & Knowledge Essential: Significant experience in security engineering and platform management Strong leadership experience managing technical teams Deep knowledge of Microsoft Defender and SIEM platforms (e.g. Sentinel) Experience in hybrid cloud and on-prem environments Strong understanding of security architecture and frameworks Experience in regulated environments (e.g. financial services ...

threats, supporting vulnerability remediation across the estate, and helping ensure compliance with industry standards and regulations. What this role involves: Develop, monitorand mature the SIEM solution. Support ongoing development and monitoring of IDS/IPS, detection and response solutionsand other threat detection systems. Analyseincidents and coordinate appropriate responses, including containment … restorationand disaster recovery, aligning solutions with business objectives. What I'm looking for: Experience in a cybersecurity or infrastructure security role. Experience of commonplace SIEM and vulnerability management tools Strong knowledge of detection and response solutions, such as EDR, XDRand MDR. Solid understanding of common attack vectors, security principlesand risk ...

external SOC, youll be the technical backbone of the teams day-to-day security operations. That means triaging and responding to incidents, working with SIEM outputs, tuning EDR and email security tooling, and tracking vulnerabilities through to remediation. Beyond the operational work, youll be embedded into IT projects from … technical depth Solid experience across endpoint, network and cloud security Azure/Microsoft stack in particular Comfortable working with outsourced SOC functions and SIEM platforms Familiar with ISO 27001 and Cyber Essentials Plus Certifications such as CISSP, CISM, CEH or GIAC are a plus This is a genuinely stable, values ...

Made Tech helps UK public sector organisations build and run better digital services. Our Cyber practice sits at the heart of that mission - working alongside government departments, agencies, and critical national infrastructure owners to improve ...

Cyber Consultant to help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned … MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge of MITRE ATT&CK and ...

Cyber Consultant to help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned … MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge of MITRE ATT&CK and ...

busy enviornment. Responsibilities include: Monitoring and triaging security alerts Investigating potential security incidents Escalating threats where appropriate Producing security reports and documentation Supporting SIEM tuning and optimisation Maintaining awareness of emerging cyber threats and vulnerabilities Working collaboratively within a fast-paced SOC environment Requirements Around 1+ year's commercial experience … security or a SOC environment Good understanding of networking, operating systems and security fundamentals Exposure to incident response and security monitoring Experience with any SIEM platform (Microsoft Sentinel, Splunk, Microsoft Defender, QRadar, Elastic etc.) Strong communication skills What's on offer? Competitive salary 25% shift allowance 25 days annual leave ...

Unix, and network devices to PAM platforms An understanding of Active Directory privileged account management practices Experience in integrating Security Information and Event Management (SIEM) systems for PAM event logging and alerting Familiarity with recognised security frameworks, including ISO 27001 and the NIST Cybersecurity Framework (CSF) Strong troubleshooting skills ...

hybrid basis, paying a salary range up to £62,000 plus bonus. Lead IT Security Analyst: Duties Lead security operations across multi-site infrastructure (SIEM, EDR, network security) Act as the senior escalation point for cyber incidents and investigations Drive incident response - triage, containment, root cause analysis Oversee and improve … Analyst: Technical Experience Proven experience in IT security/cyber operations Strong knowledge of infrastructure, networks, cloud, and endpoint security Hands-on experience with SIEM, EDR, IAM, firewalls, vulnerability tools Confident leading incident response and technical investigations The permanent opportunity for a Lead IT Security Analyst will be based ...

security plans and policies Centre of excellence for network and device security Designing, building, testing, commission and troubleshoot security solutions (IDS/IPM/SIEM) Writing and maintaining configuration/reconfiguration documentation, schematics, support guides and other documentation as required. The successful candidate will have: Minimum of 5 years multi … exposure including hands on experience of designing and managing secure networks including: Cisco Firewalls, Routers & Switches Compliance Standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen testing tools Juniper platforms Must hold, or have the ability to easily achieve SC Security Clearance Excellent organisation with pro-active ...

hackajob is collaborating with Made Tech to connect them with exceptional professionals for this role. Made Tech helps UK public sector organisations build and run better digital services. Our Cyber practice sits at the heart ...

operations function, supporting the monitoring, detection and response to security threats across the organisation's estate. You will bring solid hands-on experience across SIEM and log management tooling, working independently on complex security issues and contributing to the continuous improvement of the SOC capability. You will need proven experience … senior level SC clearance held or ability to pass Interested? Please apply below. SOC Engineer, Senior SOC Engineer, Security Operations Engineer, SIEM Engineer, Splunk, Cribl, Threat Detection, Incident Response, Security Operations, SC Cleared, Public Sector, London, Remote, Contract, Inside IR35 ...

Senior Network and Security Engineer - L2/L3 Network Infrastructure - Cyber Security - SIEM tools My client who are leaders in their field are looking for a Senior Cyber Security and Network Analyst to provide effective and timely operational support, development and management of the IT network and security infrastructure … cyber security and network infrastructure, ensuring systems remain secure, resilient, and aligned to business needs Manage day-to-day security operations, including monitoring SIEM platforms, Firewalls, endpoint protection, and threat detection tools Investigate security incidents and vulnerabilities, recommending and implementing corrective actions where required Maintain and support network technologies including ...

accountable for the design, implementation, and operation of key security technologies and services across a cloud‐first environment, including: Security Information and Event Management (SIEM) Security Orchestration, Automation and Response (SOAR) Endpoint Detection and Response (EDR/XDR) Network Detection and Response (NDR) Vulnerability and Exposure Management Security Incident Management ...

internal and external stakeholders to accomplish key objectives using influencing and negotiation skills. Requirements & Qualifications Hands-on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

systems and sensitive information. To be successful as Cyber Defence Engineering Lead you should have: Hands‐on expertise with Security Information and Event Management (SIEM) and security analytics platforms such as Sentinel, Splunk, Elastic, Cribl, and Snowflake. Strong background in Python development, automation, DevSecOps, and security engineering principles. Experience with ...

highly visible security operations function with global impact upon Colt, business units, partners, and customers. Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities Use cases preparation and implementation, connector deployment, maintenance & health checks Responsible for operational activities, Technology escalation … surrounding enterprise systems Strong Scripting experience (python, powershell, Unix shell) Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Extensive knowledge of network and server security protocols, technologies, and products Ability to learn quickly and leverage prior experiences to effectively solve current security ...

providing technical assurance and challenging service quality where required Identify detection gaps through incident reviews and trend analysis Drive improvements across Detection Engineering, telemetry, SIEM and Security Operations processes Develop automation opportunities and support AI-assisted investigations and remediation Collaborate with Security Engineering, Architecture and Cyber Defence teams to continuously … organisation's security posture Essential Experience Google SecOps CrowdStrike Darktrace Detection Engineering, including rule creation, tuning and optimisation Enterprise Security Operations and incident investigation SIEM administration and security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation ...

major cyber incidents when they arise. Key responsibilities include: Leading cyber resilience strategy across cloud and enterprise technology environments. Overseeing cyber operations including SOC, SIEM, threat intelligence, vulnerability management, attack surface management and incident response. Working closely with the CISO to develop and implement strategic initiatives that improve operational resilience … Experience Required Proven experience in a senior cyber security leadership role within a large and complex organisation. Strong technical background covering cyber operations, SOC, SIEM, threat intelligence, incident response, penetration testing and red teaming. Extensive experience leading cyber incidents and crisis management activities across enterprise environments and supply chains. Strong ...

and external partners (e.g. SOCaaS providers), and running post‐incident reviews and tabletop exercises. Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly. Compliance & Certification Own SOC 2 Type II and ISO 27001/27017/… post‐incident review. Working knowledge of SOC 2 and the ISO 27000 series. Comfortable evaluating and operating security tooling such as EDR, DLP, or SIEM platforms. A strong cross‐functional operator, comfortable bridging IT, Security, Engineering, and GTM teams. Valued Exposure to privacy regulation (e.g. GDPR) and AI governance frameworks ...

proprietary models and systems from novel threats like prompt injection, data poisoning, and model inversion/extraction. Automate critical security workflows using Agentic/SIEM integration to achieve high operational velocity and enable rapid response to millisecond attack speeds generated by autonomous adversary AI. Execute regular offensive security operations, including …/Penetration Testing against agentic frameworks and LLM integrations. Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance ...