1 to 25 of 325 SIEM Jobs in the UK excluding London

highly regulated IT environments. Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable. Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews ...

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

cyber security testing, penetration testing, attack simulation or adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting ...

Assistwith secure remote access/VPN configurations whererequiredand ensure changes follow change control. Enable and review network security logging/alerting (e.g., syslog/SIEM integrations where applicable). Monitoring, Detection & Incident Response (Sophos MDR) Act as the internal technical point of contact for Sophos MDR and ensure smooth collaboration ...

Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST ...

and continuous improvement programmes. What we're looking for Security Engineering Expertise Strong hands-on experience in Security Operations and Security Engineering. Experience managing SIEM, EDR/XDR and cloud security technologies, ideally within Microsoft environments. Technical Knowledge Understanding of incident response, threat detection, vulnerability management and network security. Experience ...

and security monitoring functions. Strong knowledge of cyber incident response, digital investigations, and security event management. Experience operating and managing security technologies such as SIEM, EDR, firewalls, IDS/IPS, web security gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents ...

exposure to macOS and Linux is a plus. Solid understanding of network fundamentals, including TCP/IP, routing, switching, and traffic analysis. Experience with SIEM platforms and enterprise security data management; database querying skills are advantageous. Working knowledge of PowerShell and Python for automation and investigation support. Strong analytical, troubleshooting ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

assurance, including evidence gathering and remediation planning. Experience leading incident response, including major cyber events and multi-agency or cross-organisational coordination. Experience managing SIEM platforms, security monitoring or SOC environments. Experience developing and delivering cyber strategies, programmes and roadmaps. Strong track record of supplier assurance, contract cyber compliance and ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end‐to‐end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills Strong hands‐on experience with Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR). Strong hands‐on experience with Threat Intelligence platforms (e.g. Recorded ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem‐solving skills; comfortable driving outcomes across business and ...

similar) Nice to have BGP, FlowSpec, and traffic engineering knowledge NetFlow/sFlow analysis IDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump) SIEM experience (Splunk) Linux proficiency Virtualisation (KVM, ESXi) Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIH Bright Purple is an equal opportunities employer ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and ...

Virtualisation: Hyper-V, VMware; cloud platforms (Azure, AWS, GCP). Communication Systems: VoIP, IP CCTV. Backup & DR: Veeam, replication, failover. Security: Firewalls, endpoint protection, SIEM tools (Splunk, Sentinel); ISO 27001, GDPR compliance. OS & Tools: Linux, PowerShell/Bash/Python scripting, ITSM platforms (ServiceNow, Fresh Service). A great opportunity ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24/7 detection, response, threat hunting), DFIR ...

function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple ...

protecting organisations from modern cyber threats. You'll ideally have experience with: Microsoft Defender or similar endpoint protection solutions Security Operations and Incident Response SIEM monitoring and security investigations Email security platforms such as Mimecast or Proofpoint Secure Web Gateway technologies such as Zscaler Vulnerability Management Cyber Essentials and ISO27001 ...