651 to 675 of 770 SIEM Jobs in the UK

Job Title: Information Security Operations Manager Reporting to: Information Technology Location:Head Office, White City Place, West London Contract Type: Full time, 37.5 hours per week About Us: ME+EM is one of the UK’s ...

solutions in alignment with enterprise architecture principles and security policies. Design and architect security solutions across multiple domains, including: Security Information and Event Management (SIEM) Identity and Access Management (IAM) Endpoint Security (EDR, MDM, Endpoint Management tools) Cloud and On-Premises Security Architectures Create high-level and detailed architectural designs … Qualifications & Skills Demonstrated experience creating high-level security solution designs and authoring detailed technical documentation. Proven expertise in designing solutions across multiple security domains including DLP, SIEM, IAM, and Endpoint Security. Strong background in security architecture or solution design , with at least 3+ years in a dedicated security architecture role. ...

Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling Help develop emerging AI/agentic security use cases What we're looking for Strong hands ...

security ensuring integrity and security of networks; Good working knowledge & experience of Cisco Firewalls, Routers& Switches Compliance standards (ISO27001 and ITIL) Security tools sets (SIEM, IDS/IPS) Pen Testing tools Vulnerability Management Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks … years multi network exposure including hands on experience of designing and managing secure networks including the following systems: Cisco Firewalls, Routers, Switches Juniper platforms SIEM tools IDS/IPS Penetration testing (PEN Testing) Computer Forensic tools ISO27001 & GDPR knowledge Ability to communicate network security issues to peers and management Ability ...

and identifying areas for improvement. Producing DLP reports, matrices and security metrics that provide a clear picture of controls, risks and gaps. Working with SIEM and EDR technologies to investigate threats and improve detection. Reviewing vulnerabilities, prioritising risks and working with technical teams to make sure they're addressed. Supporting … that, you'll have a solid background in information or cyber security and experience across some of the following: Security Operations/incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics NIST ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

agent intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific … multi-agent patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across ...

Investigate identity and cloud-based compromise (e.g. anomalous sign-ins, malicious OAuth consent, mailbox access), including session/token revocation Design, build and test SIEM detection rules mapped to MITRE ATT&CK, and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python … Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius of an incident Run hypothesis-led threat hunts, not just reactive alert triage Mentor junior analysts and help drive ...

deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead and work closely with the SOC engineers … and evidence them for client audits (ISO 27001, Cyber Essentials Plus). Security tooling & engineering Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security. Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads. Own tooling health: versioncurrency, coverage ...

environments Support security architecture and hardening initiatives across servers, operating systems, cloud platforms, Kubernetes and infrastructure services Support implementation, tuning and operational maturity of SIEM, alerting and security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and … switching, firewalling and network segmentation principles Experience with edge and web security platforms such as Cloudflare, Akamai or similar technologies Experience implementing and managing SIEM, logging, monitoring and security detection platforms Strong understanding of infrastructure hardening, IAM, privileged access management and secrets management Experience securing Kubernetes, containerised workloads and cloud ...

security, engineering, architecture, technology and client workstreams to maintain momentum, resolve delivery blockers and oversee initiatives across areas including IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust Own project governance, including RAID management, status reporting, decision tracking, change control and escalation, maintaining appropriate human review … including planning, RAID management, governance, financial tracking, resource coordination and stakeholder reporting Good understanding of security domains such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise ...

and monitoring are consistent, high-quality, and provided as a standard capability for all teams. Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configuration Work as part of a virtual SOC with the Security Operations Team to support … security for networks, systems, web applications, APIs and databases. Good understanding of secure software development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and ...

comparable distribution, including systemd, networking, storage, process limits, TLS certificates and a full working day in the shell. Experience running at least one SIEM or log management platform in production; Wazuh is preferred, but Elastic, OpenSearch, Graylog, Splunk or Security Onion experience transfers well. A working understanding of how logs … Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service provider experience; involvement in the security community; and an interest in working alongside ...

shift basis, taking ownership of frontline threat detection and response within a busy security operations environment. Key Responsibilities: Review and triage output from SIEM, IDS/IPS and firewall platforms to detect potential compromise Act as first responder on confirmed incidents, working through investigation, containment and handover to senior staff … Open to rotating shift patterns, including nights/weekends Desirable: Industry-recognised certifications (e.g. CompTIA Security+, SSCP, CEH, GCIH) or working towards Familiarity with SIEM platforms or IT service management tools Track record of meeting SLA-driven targets in a fast-paced environment Comfortable operating within a round-the-clock ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and … Experience with data classification, data handling, or data protection strategies that support DLP in cloud-hosted systems. Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response. Hands-on involvement in incident response or post-incident analysis from an engineering perspective (e.g., improving detections ...

Security Engineer (SIEM/XDR) - Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading ...

onboarding and access controls -Configure credential rotation, reconciliation and session management -Develop automation using PowerShell, Python and REST APIs -Integrate PAM with Active Directory, SIEM, cloud services and business applications -Support upgrades, patching, resilience testing and disaster recovery activities -Investigate PAM incidents and authentication issues -Produce technical documentation and operational … and security control requirements Desirable -Financial services experience -CISSP, CISM, Microsoft Security or PAM certifications -Experience integrating PAM tooling with Microsoft Sentinel or other SIEM platforms Package -Salary up to £80,000 -Bonus -Pension -Private Medical Insurance -Hybrid working (3 days per week in London) For a confidential discussion regarding ...

products with demonstrated IR capability in one or more of the following: Microsoft Defender, CrowdStrike, Sentinel One, Trend Vison One. Good understanding of SIEM tools with knowledge of one of the following: Splunk, Google SecOps or Sentinel. Broad technical knowledge of networks, operating systems, applications, identity and cloud environments … activities based on incident learnings, intelligence and emerging threats. Support purple team exercises and adversary simulations to validate detection and response capabilities. Use of SIEM-less technologies to analyse data and find security incident. Understanding and experience of automation tools and using agentic capabilities to improve analysis, triage, containment and ...

candidate availability. RESPONSIBILITIES Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary. Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards. Utilise playbooks, existing knowledge and accurate online resources … with current vulnerabilities, attacks, and countermeasures. Identify, respond and remediate cyber events generated through monitoring technologies. EXPERIENCE Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm). Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused ...

reviews, including lessons learned and remediation strategies Support incident readiness through tabletop exercises and simulation activities Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms Produce clear, detailed incident and forensic reports for both technical and non-technical audiences Skills/Must have: 4+ years’ experience … security incidents in client-facing or consultancy environments Strong technical knowledge across networking, endpoint security, and digital forensics Hands-on experience with EDR and SIEM platforms (e.g., Microsoft Defender, Sentinel, CrowdStrike, SentinelOne or similar) Solid understanding of attacker tactics, techniques, and procedures (TTPs) and incident response methodologies Ability to remain ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

cyber-security principles, tools, and technologies. Proven and well-evidenced analytical, investigative and problem-solving skills. Hands‐on experience with SIEM (Security Information and Event Management) tools. Proven ability to write and present clear, concise, accurate and logical reports. Excellent communication and teamwork abilities. If you possess these skills and ...

coding practices and test-driven development approaches within an engineering or security context. Practical exposure to security platforms (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)) and their role in detection engineering. Understanding of how custom detection rules, alerts, and telemetry are designed, tested, and implemented ...