1 to 25 of 345 SIEM Jobs in the UK excluding London

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

development teams to promote secure development practices.Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation.Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response.Understanding of cyber incident response, including triage, investigation, containment and recovery.Knowledge of Cyber Essentials, Cyber Essentials Plus and ...

gapped, or highly regulated IT environments.Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable.Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutionsDemonstrable experience applying Secure by Design principles in complex IT systems and programmes.Experience conducting security architecture reviews, threat modelling ...

Google Cloud, alongside a strong understanding of identity and access management, MFA, SSO and privileged access controls. Experience with security technologies including SIEM, EDR and vulnerability management tools is highly desirable, as is hands-on Linux administration, system hardening, patch management and security incident response. A solid technical background ...

Azure, AWS or Google Cloud. Strong knowledge of identity and access management, MFA, SSO and privileged access controls. Experience with security tools including SIEM, EDR and vulnerability management platforms. Linux administration, system hardening and patch management experience. Experience investigating and responding to security incidents. Technical Skills Strong understanding of networking ...

Google Cloud. Experience with identity and access management, including SSO, MFA, RBAC and privileged-access controls. Experience deploying and maintaining security technologies including SIEM, EDR, vulnerability-management, secrets-management and intrusion-detection tools. Experience with Linux administration, system hardening, patch management and configuration management. Experience investigating security incidents, reviewing logs ...

supporting Microsoft Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms.Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure.Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions.Experience with Bash scripting, automation tools, and infrastructure operations.Experience supporting government, defence, aerospace, critical infrastructure, energy ...

Defender for Endpoint, Microsoft 365 Security, and integrated Microsoft security platforms. Knowledge of Microsoft Azure administration, cloud networking, and hybrid cloud infrastructure. Experience with SIEM integrations, log analytics, reporting platforms, dashboarding, and security monitoring solutions. Experience with Bash scripting, automation tools, and infrastructure operations. Experience supporting government, defence, aerospace, critical ...

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

Azure, or Google Cloud.· Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls.· Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools.· Experience with Linux administration, system hardening, patch management, and configuration management.· Experience investigating security incidents, reviewing ...

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of Scripting/automation using PowerShell or Python is desirable. Key Competencies Strong analytical and troubleshooting ...

DKIM, DMARC, and email fraud prevention. • Experience in security incident investigation and remediation. • Strong understanding of malware analysis and advanced email threats. • Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. • Knowledge of scripting/automation using PowerShell or Python is desirable. Key Competencies • Strong analytical and troubleshooting ...

your application to our client in conjunction with this vacancy only. Key Skills SOC Analyst, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk, SIEM, Incident Response, Threat Detection, Cyber Security, MITRE ATT and CK, Blue Team ...

Strong knowledge of network security, identity & access management, endpoint protection, and cloud security (Azure preferred but will also consider AWS) Hands-on experience with SIEM technologies (e.g. Microsoft Sentinel and/or Defender) Azure security posture management, including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

enterprise environments Proven capability in security incident investigation and remediation, with strong understanding of malware analysis and advanced email threats, and familiarity with SIEM platforms such as Splunk, Sentinel, or QRadar Strong analytical, troubleshooting, and stakeholder communication skills - desirable: PowerShell or Python Scripting experience, and SC clearance or SC eligibility ...

regulated environment. Essential Experience Cyber Security Operations and Cyber Defence. Vulnerability Management and remediation. Security Incident Response and Major Incident Management. Security Monitoring and SIEM platforms. Threat Intelligence. Cloud Security, ideally Azure. Data Loss Prevention (DLP). Network Security. Security Governance and Risk Management. Working within regulated environments. Technical Knowledge ...

security operations teams within hybrid or outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid understanding of enterprise, network, cloud and SaaS ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and ...

lifecycle, including security incidents and data breaches, from containment and eradication through to post-incident analysis.• Manage and optimise security technologies including Next-Gen SIEM, SOAR, EDR/MDR/XDR and cloud security solutions such as CASB, ZTNA and SASE.• Take a leading role in Bulk's upcoming Cyber ...

learning.Minimum qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...

learning.Minimum qualifications8+ years of professional IT experience, including a minimum of 5 years of dedicated information security experience.Experience using or administering one or more SIEM or security log management systems (such as Splunk, ArcSight, LogRhythm, ELK, Q-Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience ...