676 to 700 of 789 SIEM Jobs in the UK

deepest expertise. BeyondCyberArk, the role carries breadth across the modern security stack: hands-onexperience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate forclients. You will reportto the Cyber Operations Lead and work closely with the SOC engineers … and evidence them for client audits (ISO 27001, Cyber Essentials Plus). Security tooling & engineering Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security. Support Zscaler (ZIA/ZPA)deployment and policy work alongside the zero trust leads. Own tooling health: versioncurrency, coverage ...

environments Support security architecture and hardening initiatives across servers, operating systems, cloud platforms, Kubernetes and infrastructure services Support implementation, tuning and operational maturity of SIEM, alerting and security monitoring platforms Support Layer 7 and web security initiatives including WAF, reverse proxy, API protection and edge security controls Support implementation and … switching, firewalling and network segmentation principles Experience with edge and web security platforms such as Cloudflare, Akamai or similar technologies Experience implementing and managing SIEM, logging, monitoring and security detection platforms Strong understanding of infrastructure hardening, IAM, privileged access management and secrets management Experience securing Kubernetes, containerised workloads and cloud ...

security, engineering, architecture, technology and client workstreams to maintain momentum, resolve delivery blockers and oversee initiatives across areas including IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust Own project governance, including RAID management, status reporting, decision tracking, change control and escalation, maintaining appropriate human review … including planning, RAID management, governance, financial tracking, resource coordination and stakeholder reporting Good understanding of security domains such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise ...

and monitoring are consistent, high-quality, and provided as a standard capability for all teams. Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configuration Work as part of a virtual SOC with the Security Operations Team to support … security for networks, systems, web applications, APIs and databases. Good understanding of secure software development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and ...

comparable distribution, including systemd, networking, storage, process limits, TLS certificates and a full working day in the shell. Experience running at least one SIEM or log management platform in production; Wazuh is preferred, but Elastic, OpenSearch, Graylog, Splunk or Security Onion experience transfers well. A working understanding of how logs … Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service provider experience; involvement in the security community; and an interest in working alongside ...

shift basis, taking ownership of frontline threat detection and response within a busy security operations environment. Key Responsibilities: Review and triage output from SIEM, IDS/IPS and firewall platforms to detect potential compromise Act as first responder on confirmed incidents, working through investigation, containment and handover to senior staff … Open to rotating shift patterns, including nights/weekends Desirable: Industry-recognised certifications (e.g. CompTIA Security+, SSCP, CEH, GCIH) or working towards Familiarity with SIEM platforms or IT service management tools Track record of meeting SLA-driven targets in a fast-paced environment Comfortable operating within a round-the-clock ...

detective, and responsive security controls that integrate directly into cloud platforms, CI/CD pipelines, and shared enterprise services Integrate cloud security controls with SIEM and security tooling to generate high-quality signals for detection, investigation, and incident response Support incident handling and response by engineering detection logic, automation, and … Experience with data classification, data handling, or data protection strategies that support DLP in cloud-hosted systems. Familiarity with security telemetry, logging pipelines, and SIEM platforms used for detection, investigation, and incident response. Hands-on involvement in incident response or post-incident analysis from an engineering perspective (e.g., improving detections ...

Security Engineer (SIEM/XDR) - Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading ...

onboarding and access controls -Configure credential rotation, reconciliation and session management -Develop automation using PowerShell, Python and REST APIs -Integrate PAM with Active Directory, SIEM, cloud services and business applications -Support upgrades, patching, resilience testing and disaster recovery activities -Investigate PAM incidents and authentication issues -Produce technical documentation and operational … and security control requirements Desirable -Financial services experience -CISSP, CISM, Microsoft Security or PAM certifications -Experience integrating PAM tooling with Microsoft Sentinel or other SIEM platforms Package -Salary up to £80,000 -Bonus -Pension -Private Medical Insurance -Hybrid working (3 days per week in London) For a confidential discussion regarding ...

products with demonstrated IR capability in one or more of the following: Microsoft Defender, CrowdStrike, Sentinel One, Trend Vison One. Good understanding of SIEM tools with knowledge of one of the following: Splunk, Google SecOps or Sentinel. Broad technical knowledge of networks, operating systems, applications, identity and cloud environments … activities based on incident learnings, intelligence and emerging threats. Support purple team exercises and adversary simulations to validate detection and response capabilities. Use of SIEM-less technologies to analyse data and find security incident. Understanding and experience of automation tools and using agentic capabilities to improve analysis, triage, containment and ...

candidate availability. RESPONSIBILITIES Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary. Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards. Utilise playbooks, existing knowledge and accurate online resources … with current vulnerabilities, attacks, and countermeasures. Identify, respond and remediate cyber events generated through monitoring technologies. EXPERIENCE Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm). Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused ...

reviews, including lessons learned and remediation strategies Support incident readiness through tabletop exercises and simulation activities Recommend improvements to detection and response capabilities across SIEM, EDR, and SOAR platforms Produce clear, detailed incident and forensic reports for both technical and non-technical audiences Skills/Must have: 4+ years’ experience … security incidents in client-facing or consultancy environments Strong technical knowledge across networking, endpoint security, and digital forensics Hands-on experience with EDR and SIEM platforms (e.g., Microsoft Defender, Sentinel, CrowdStrike, SentinelOne or similar) Solid understanding of attacker tactics, techniques, and procedures (TTPs) and incident response methodologies Ability to remain ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

Vulnerability and Incident management. Ensure Operational Security capabilities such as Security Operations Centre (SOC), Security Incident Response Team (SIRT), Security Information and Event Management (SIEM), Threat & Vulnerability Management, Identity & Access Management, Data Loss Prevention, Penetration Testing are well embedded and managed through either the UK in-house team, Group … Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able to utilise risk management ...

cyber-security principles, tools, and technologies. Proven and well-evidenced analytical, investigative and problem-solving skills. Hands‐on experience with SIEM (Security Information and Event Management) tools. Proven ability to write and present clear, concise, accurate and logical reports. Excellent communication and teamwork abilities. If you possess these skills and ...

coding practices and test-driven development approaches within an engineering or security context. Practical exposure to security platforms (e.g., Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR)) and their role in detection engineering. Understanding of how custom detection rules, alerts, and telemetry are designed, tested, and implemented ...

within or directly supporting cybersecurity, SOC, or detection engineering functions. Detection Engineering Lifecycle Strong understanding of the detection engineering lifecycle, including use case development, SIEM rule authoring, alert tuning, and detection validation. Familiarity with detection-as-code practices and platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic SIEM). Working knowledge ...

apply concepts across multiple domains Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud ...

systems as part of a team on a rotating 24 x 7 x 365 basis. Your background should include exposure to security technologies including SIEM/EDR, firewalls, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority … report on anomalous behaviour. Determines and directs Advanced remediation and recovery efforts (with assistance from tooling and/or Level 2) Investigate alerts using SIEM, data visualisation, pattern analysis and automation. Solid cyber security skills including SIEM Have the drive to dive deep into issues Ability to identify security threats ...

posture while ensuring exceptional service delivery. This is a highly visible role that combines cyber security expertise, customer engagement and service leadership across SOC, SIEM, MDR, threat intelligence and incident response services. What You’ll Be Doing Act as the primary customer contact for managed cyber security services. Lead service … security data into meaningful business insights, recommendations and executive reports. Drive Customer Success Plans and Continuous Service Improvement initiatives. Monitor service performance across SOC, SIEM, MDR, EDR/XDR, vulnerability management and threat intelligence services. Coordinate the response to major security incidents, managing communications, escalations and stakeholder engagement. Identify security ...

background in solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile … DevOps, or Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

background in solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile … DevOps, or Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

Senior Cyber Security Analyst – SIEM, EDR, DLP, and firewalls – Scotland – Hybrid - £60,000 - £68,000 Our client is a highly respected, global firm looking to bring on a Senior Cyber Security Analyst to serve as the technical Subject Matter Expert (SME) for their security operations team. Reporting directly … Strong experience in cyber security and IT, ideally with prior experience acting as an SME or technical team mentor. Practical, hands‐on knowledge of SIEM, EDR, DLP, and firewalls. Experience working in global, fast‐paced environments across multiple time zones. Familiarity with Agile ways of working and tools like Jira ...

Made Tech helps UK public sector organisations build and run better digital services. Our Cyber practice sits at the heart of that mission—working alongside government departments, agencies, and critical national infrastructure owners to improve ...