501 to 525 of 789 SIEM Jobs in the UK

maintain threat models, assess security controls, and build tools for proactive detection, configuration drift monitoring, and automated remediation. You will be responsible for managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams … Develop and maintain threat models for information assets and services. Build and optimise security tools for detection, remediation, and orchestration. Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation. Develop, test, and deploy advanced threat detection use cases based on vulnerability insights. Analyse ...

organisation's cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security, while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and … Defender, Purview, Exchange Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring. Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation ...

Security Operations Specialist you will play a critical role in protecting our digital infrastructure. You’ll lead the implementation and management of SIEM systems, Fortinet security tools, and endpoint detection & response (EDR) while conducting vulnerability assessments and penetration testing to stay ahead of cyber threats. You’ll enhance identity and … infrastructure security Strong experience with Fortinet security products and solutions Advanced knowledge of Microsoft Active Directory and Entra ID administration Demonstrated experience with SIEM implementation and management Strong background in network security and infrastructure protection Experience with IDS/IPS systems and security monitoring tools Proven incident response and threat ...

hands-on engineering role focused on the implementation, maintenance, optimisation and integration of security technologies across complex enterprise environments. Key Responsibilities Administer and maintain SIEM and security monitoring platforms Configure and optimise log ingestion, correlation rules and alerting Develop and maintain automation using PowerShell, Python and Regex Integrate security technologies … analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies ...

Senior Microsoft Security Engineer Azure Security | Microsoft Sentinel | Defender XDR | Purview | SIEM Engineering We are currently supporting a leading organisation looking to hire an experienced Senior Microsoft Security Engineer to join their security engineering function. This is an excellent opportunity for a security professional with strong Microsoft security expertise … and implementation plans Required Experience Strong commercial experience within Microsoft security engineering roles Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation Strong knowledge of Microsoft Defender XDR security capabilities Experience with Microsoft Purview DLP, sensitivity labels and information protection Strong understanding of Azure security principles ...

align with Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior … discussions. What You'll Bring: Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments ...

pipelines; integrate and maintain code scanning platforms Detection, operations & tooling Monitor and respond to security events and incidents in cloud and hybrid environments Maintain SIEM data pipelines needed for reliable alerting Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (e.g., Puppet) Develop dashboards and alerts … configuration management (e.g., Puppet) Hands-on experience building GitHub Actions and workflows Experience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh) Experience in building custom cloud security tools or integrations Interest in leveraging AI for cloud security monitoring and automation Contributions ...

identify, shape, and qualify opportunities across AI-driven security and the security of AI systems Architect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modelling Define security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding … and supply chain security Solid grounding in Identity and Access Management, including PAM, IGA, ITDR, and machine/non-human identity governance Familiarity with SIEM platforms (e.g. Microsoft Sentinel, Splunk) and SOAR tooling Awareness of AI governance frameworks and standards (NIST AI RMF, ISO/ ...

Implementing Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout … stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable ...

Implementing Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout … stakeholder engagement and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable ...

response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, and document the intent, data source, and expected behavior of each detection Detection Tuning and Health - Own false positive rates, alert … retest Log Source Health - Validate the health and completeness of security log sources, detect collection failures and silent feeds, and onboard or update SIEM log sources in a timely manner Automation and Tooling - Apply a developer and problem-solving mindset to the work, using scripting to build internal tooling, process ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

high‐level and low‐level designs, implementation procedures, runbooks, support documentation, control evidence and technical standards. Integrate PAM with Active Directory, identity‐management workflows, SIEM, ITSM, cloud services, databases and applications, including the development and support of custom web connectors and third‐party application connectors. Investigate platform incidents, failed rotations … connectors. Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load‐balancing fundamentals. Integration with Microsoft Sentinel or another SIEM for privileged‐access monitoring, alerting and audit evidence. Knowledge of Azure and hybrid‐cloud privileged‐access patterns; AWS or GCP experience is desirable. Scripting and ...

actively shaping the security posture of organizations that matter.This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment.If you are successfully offered this position, you will go through a series … problem-solving mindset.Familiarity with incident, problem, or change management.Understanding of security principles and best practices.Strong communication and multitasking skills.Nice-to-Have Skills:Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel).Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS).Certifications like CompTIA Security+, Splunk certified user ...

actively shaping the security posture of organizations that matter. This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment. If you are successfully offered this position, you will go through a series … with incident, problem, or change management. Understanding of security principles and best practices. Strong communication and multitasking skills. Nice-to-Have Skills: Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel). Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS). Certifications like CompTIA Security+, Splunk ...

Cisco is seeking a Security Technical Account Manager to drive adoption and optimization of the Splunk platform for our critical customers. You will act as a trusted advisor, translating complex security use cases into practical ...

E‐Resourcing Ltd in Manchester is seeking a Security Engineer to assess and enhance the effectiveness of existing security controls, with a focus on AWS and SIEM. You will design and implement security solutions to ...

Menzies LLP in Manchester is seeking an IT Security Analyst to join the IT & Innovation team. You will monitor security alerts from the SoC, investigate incidents, and help improve configurations to strengthen security across the ...

Accenture PLC is seeking a Cyber Security Engineer to join its Security Engineering team in a hybrid environment, spanning cloud, on-premises and hybrid setups. You will design, implement, and maintain security solutions to safeguard ...

Vodafone Group Plc is seeking a Level 3 Security Analyst in Newbury to join its Cyber Defence Operations Center of Excellence. This role is pivotal in protecting millions of customers from cyber threats through advanced ...

TRIA in the United Kingdom is seeking a skilled SOC Analyst to join a market-leading energy-sector organisation undergoing an IT security transformation. You will secure IT and OT networks and act as the ...

Viasat is seeking a RTO Security Analyst to join the frontline 24x7 team monitoring networks for suspicious activity and triaging security alerts. You will handle incidents across online and on-prem infrastructures, determine attack use ...

Xcede Recruitment Solutions is looking for an experienced Security Analyst for a 6-month contract that is fully remote. The successful candidate will support a significant technology transformation programme while maintaining effective security visibility during ...

Requirements Experience with deploying and using a Security Information and Event Management (SIEM) Knowledge of current operating systems i.e., Windows Server 2016-2019, Windows 10, Mac OS and Linux Microsoft Policy & Security – GPO’s, Patching (WSUS), Defender Antivirus & Firewall Penetration Testing exposure/awareness Experience performing technical analysis involving security ...

bring You’ll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. ...