1 to 25 of 152 Remote/Hybrid SIEM Jobs in the UK excluding London

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar. Knowledge of Scripting/automation using PowerShell or Python is desirable. Key Competencies Strong analytical and troubleshooting ...

Strong knowledge of network security, identity & access management, endpoint protection, and cloud security (Azure preferred but will also consider AWS) Hands-on experience with SIEM technologies (e.g. Microsoft Sentinel and/or Defender) Azure security posture management, including Defender for Cloud, Secure Score, and Azure Policy. Risk assessment, threat modelling ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

enterprise environments Proven capability in security incident investigation and remediation, with strong understanding of malware analysis and advanced email threats, and familiarity with SIEM platforms such as Splunk, Sentinel, or QRadar Strong analytical, troubleshooting, and stakeholder communication skills - desirable: PowerShell or Python Scripting experience, and SC clearance or SC eligibility ...

regulated environment. Essential Experience Cyber Security Operations and Cyber Defence. Vulnerability Management and remediation. Security Incident Response and Major Incident Management. Security Monitoring and SIEM platforms. Threat Intelligence. Cloud Security, ideally Azure. Data Loss Prevention (DLP). Network Security. Security Governance and Risk Management. Working within regulated environments. Technical Knowledge ...

security operations teams within hybrid or outsourced environments.Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.Experience leading technical incident response, problem management and security investigations.A solid understanding of enterprise, network, cloud and SaaS ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.Expertise ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and ...

lifecycle, including security incidents and data breaches, from containment and eradication through to post-incident analysis.• Manage and optimise security technologies including Next-Gen SIEM, SOAR, EDR/MDR/XDR and cloud security solutions such as CASB, ZTNA and SASE.• Take a leading role in Bulk's upcoming Cyber ...

Privileged Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

technical stakeholdersDesirable ExperienceExperience in any of the following would be advantageous:Microsoft Entra ID, Conditional Access, MFA, and SSOMicrosoft Sentinel, Defender, Splunk, or SIEM platformsZscaler Digital Experience (ZDX)Cloud security and Zero Trust architecturesPowerShell, Python, Terraform, or automation toolingPalo Alto, Cisco, F5, or similar enterprise networking technologiesMicrosoft Intune and endpoint ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell, bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

secure environments (e.g. defence, air-gapped)Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, identity, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesHardware Security Modules (HSMs) (e.g. Thales)Cross-domain/secure communications environmentsAutomation of certificate management ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...