576 to 600 of 787 SIEM Jobs in the UK

expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, traces, and security events with features such as APM, RUM, SIEM, Kubernetes monitoring, and more, enhancing operational efficiency and reducing observability spending by up to 70%. We seek a Product Reliability Engineer who ensures that ...

building, maintaining and enhancing the security tooling that underpins our detection and response functions. The ideal candidate will work deeply across technologies including SIEM, SOAR, EDR, email security and cloud security platforms, contributing engineering expertise to ensure these controls operate effectively and deliver high‐quality telemetry. You will be responsible … updates. Engineer and optimise SOAR automation and integrations to reduce manual analyst workload and streamline response processes. Onboard high‐value security logs into the SIEM from the backlog, ensuring quality, normalisation and integration into detection logic. Support SOC and CIRT during incidents by providing engineering expertise, rapid telemetry onboarding, and ...

and automation within the SOC. You will own end-to-end incidents and provide senior technical depth across multiple toolchains. Key duties include designing SIEM detections aligned to MITRE ATT&CK, mentoring analysts, and driving improvements in detections and playbooks while working with Sentinel, Defender XDR, CrowdStrike, Entra #J ...

action and decision while maintaining focus on achieving optimal outcomes as part of a collaborative development effort. Experience in enterprise security solutions (endpoint, SIEM, networking, etc). Seasoned with financial services sales (banking) or BFSI market. Team Player, Competitive, Optimistic, Enthusiastic, Trust Builder. #J-18808-Ljbffr ...

and engineering for client projects. You will research approaches, influence macro strategy, and set direction for client demands while leading SOC component design for SIEM, SOAR, EDR/XDR and data pipelines across client engagements. #J-18808-Ljbffr ...

will collaborate with strategy, operating model teams and clients, researching new approaches, and leading the design of SOC architectures and data tooling across SIEM, SOAR, EDR/XDR. #J-18808-Ljbffr ...

shift team, you will use your expertise to detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers … Endpoint, Defender for Identity, Defender for Cloud Apps), including deployment, configuration, and day‐to‐day operational management within an enterprise environment. Knowledge of SIEM and EDR/EPP technologies , with a particular focus on leveraging Microsoft Sentinel and Defender to deliver threat detection, investigation, and response capabilities. Proven ability ...

Operations Analyst (SecOps) Permanent Location: South Manchester (Hybrid - onsite 2 days a week) Salary: £45,000 - £55,000 (+ benefits) Skills: SecOps, Microsoft Sentinel, SIEM, Incident Response, Microsoft Defender We are recruiting for an experienced Cyber Security Operations Analyst to join an established IT Managed Services Provider, supporting security operations … incidents across multiple customer environments. Analyse security events, logs and technical evidence to assess threats, identify vulnerabilities and determine appropriate remediation actions. Work with SIEM technologies, including Microsoft Sentinel, supporting the ongoing development and improvement of security monitoring capabilities. Provide advanced technical support for complex security and cloud-related incidents ...

clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false‐positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities … Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem‐solving and ...

problem solving and influencing best practice, this role offers real scope to make an impact. What you will be doing Monitor, develop and optimise SIEM and threat detection systems Investigate security incidents, coordinating response, containment and escalation Conduct vulnerability scanning and support remediation across the IT estate Work closely with … Proven experience in a cyber security or infrastructure security role Strong understanding of security principles, threat detection and risk-based thinking Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR Knowledge of cyber security frameworks such as ISO 27001 or NIST Understanding ...

clients demands. The role reports to our Senior SecOps Engineers, supporting on the building of solutions for client across the SOC ecosystem such as SIEM, SOAR, Data Analytics Platforms and Data Ingestion infrastructure/tooling. Part of the role requires independent research and development, applying new concepts and innovation within … skills in at least one of Python, C#, "R" or similar preferred. Experience delivering technology solutions. Experience with at least one SOC solution i.e. SIEM, SOAR, EDR/XDR and Data Management Tooling, preferably Google SecOps (formerly Chronicle/Simplify), Crowdstrike, Wiz, Cribl, Microsoft Sentinel and Microsoft Defender XDR Understanding ...

with defined SLOs and KPIs, coordinating with market security and technology teams. Detection & Response Operations Identify and investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets. Provide detection tuning and feedback loops … security incident management. Demonstrated experience leading or supervising SOC teams, including direct people management, coaching, and performance management. Deep technical understanding of SIEM platforms, SOAR orchestration, EDR/XDR solutions, log management, and security event investigation workflows. Expert-level understanding of security monitoring, alert triage methodologies, incident escalation frameworks, and ...

Team Lead Deep understanding of end‐to‐end SOC operations including alert triage, incident response, threat hunting, and case management Extensive experience with SIEM platforms, security orchestration tools, and the broader SOC technology stack Strong knowledge of threat detection methodologies, alert correlation, and incident prioritisation frameworks Expert‐level understanding … tool evaluation, selection, or implementation projects. Experience with security automation, SOAR platforms, or playbook development. Experience working with or partnering with SOC/SIEM/EDR vendors and MSSP (Managed Security Service Provider) vendors. Familiarity with product management principles, agile methodologies, or requirements gathering processes. Experience presenting to executive leadership ...

cyber security operations team, providing technical guidance, mentoring and support. Take ownership of security incidents, coordinating investigations, containment and recovery. Improve security monitoring, SIEM detections, threat hunting and incident response playbooks. Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management. Manage outsourced security … operations team. Strong technical expertise in security operations, incident response and detection engineering. Experience with cloud security, particularly Microsoft Azure and Entra ID, alongside SIEM and endpoint security technologies. Strong stakeholder management and communication skills, with the ability to explain technical risks to non-technical audiences. Relevant qualifications such ...

and access provisioning in partnership with ITSM. Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR/SIEM, and incident response. Manage vendors and core infrastructure partners, ensuring cost-effective delivery, timely patching, and contract governance. Maintain secure, high-performance connectivity for offices, labs … Okta or similar) Endpoint Management (Intune, Jamf, or similar) Corporate Networking (LAN/Wi-Fi/VPN/firewalls) Cyber Security Operations (EDR, SIEM, vulnerability management, incident response) Demonstrated ability to define and enforce standards and processes that combine agility with control. Strong vendor and stakeholder-management capability. Excellent communication ...

uncommon? (not required) Certifications such as Network+, Security+, CySA+ 1-3 years' experience as a Security/Network Administrator or equivalent knowledge Prior SIEM experience and/or administration Hands‐on experience with parsing data, log formats, regular expressions Scripting experience (bash, PowerShell, python) Multiple OS experience (mac, windows) Knowledge … various security methodologies and processes, and technical security solutions (SIEM, IDS/IPS, Firewall Solutions, Offensive Security tools) #J-18808-Ljbffr ...

SIEM Content Engineer –Sentinel – London – £550–£700 per day - 5 Months - Hybrid/2 Days p/w in London We are seeking an experienced SIEM Content Engineer to join a Cyber Security team on an initial 5-month contract. This is an excellent opportunity for a technically strong security … play a key role in strengthening enterprise security monitoring and cyber resilience. You will be responsible for developing high-quality detection content, engineering SIEM integrations, optimising security telemetry and implementing automation to improve threat detection and response capabilities across a complex enterprise environment. Working closely with Security Operations, Cloud, Infrastructure ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … with strong judgement, clear communication and the ability to turn threat intelligence and adversary behaviour into practical defensive capability. Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

Detection Engineering, translating CDO priorities into a clear roadmap for monitoring, detection, investigation and response. Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile. Define and govern the onboarding … with strong judgement, clear communication and the ability to turn threat intelligence and adversary behaviour into practical defensive capability. Extensive experience across security monitoring, SIEM engineering, detection engineering and incident response within a complex enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production ...

and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: SIEM Content and Platform Engineer Location: Hybrid; 1 day per month reporting in London office Employment Type: Full Time Purpose of Role We are seeking … experienced SIEM Content & Platform Engineer to join the Cyber Security team. The role combines SIEM platform engineering, detection content development, security engineering, automation, and operational support to improve enterprise monitoring and cyber resilience. The engineer will work with Security Operations, Infrastructure, Cloud, and Application teams to deliver scalable telemetry, high ...

and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance. Job Title: SIEM Content and Platform Engineer Location: Hybrid; 1 day per month reporting in London office Employment Type: Full Time Purpose of Role We are seeking … experienced SIEM Content & Platform Engineer to join the Cyber Security team. The role combines SIEM platform engineering, detection content development, security engineering, automation, and operational support to improve enterprise monitoring and cyber resilience. The engineer will work with Security Operations, Infrastructure, Cloud, and Application teams to deliver scalable telemetry, high ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. Responsibilities: Deploy, configure, and manage cloud security … platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. Responsibilities: Deploy, configure, and manage cloud security … platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking ...

detection and anomaly detection. Experience with service mesh security concepts (e.g., Istio, Linkerd) and workload identity. Experience in detection engineering, logging pipeline development, or SIEM tuning in containerised environments. Experience in contributing to security-focused open-source projects or internal security platform tooling. About the job As a part … ensure security incidents can be swiftly resolved. Responsibilities Deploy, configure, and manage cloud security platform tools and technologies, including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP). Develop and implement security monitoring and logging strategies. Investigate and ...

protective monitoring and SOC transformation engagements across enterprise environments. The role demands progression through architecture, engineering, SOC or consultancy roles and delivering enterprise-scale SIEM, EDR/XDR and managed security service changes. The successful candidate will own engagements from discovery and target-state design through migration, assurance and service ...