1 to 25 of 167 Remote/Hybrid SIEM Jobs in the UK excluding London

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

patch management expertise. Knowledge of security frameworks and hardening standards such as CIS Benchmarks. Experience securing Azure and/or AWS environments. Familiarity with SIEM technologies and Microsoft security tooling. Strong understanding of Identity and Access Management (IAM), privileged access, and authentication controls. Excellent communication skills with the ability ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls ...

services and wider enterprise integrations. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Security monitoring, SIEM and integration with SOC tooling. ITIL or service-management practices. Relevant technical, engineering or leadership certifications. Candidates are not expected to be specialists in every ...

Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

ISO9001. Implement and maintain security controls aligned with recognised frameworks (e.g. ISO27001, Cyber Essentials Plus, NIST). Lead vulnerability management, patching, endpoint protection, SIEM, and threat monitoring activities. Manage identity and access controls, MFA, privileged access, and conditional access policies. Lead incident response activities and coordinate remediation efforts. Conduct risk ...

operation with four shift teams working in a standard rotation. They are responsible for utilising the SOC’s Security Incident and Event Management (SIEM) toolsets to detect and investigate potential Security and Service Incidents occurring within the monitored networks. These roles require a minimum of SC clearance and be prepared ...

framework Experience with SQL query construction Experience with OSQuery Programming and scripting skills - proficient knowledge of PowerShell Experience with enterprise information security data management - SIEM Advanced Cyber Security certifications Ready to Join Us? At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident ...

DevSecOps, CI/CD pipelines and Infrastructure as Code. Ansible, Terraform and platform automation. Active Directory, identity services and wider enterprise integrations. Security monitoring, SIEM, endpoint security and integration with SOC tooling. Cloud platforms such as Microsoft Azure or Amazon Web Services. Containerisation platforms such as Kubernetes or Docker. Relevant ...

work effectively with both technical and non‐technical stakeholders Desirable Experience Microsoft Entra ID, Conditional Access, MFA, and SSO Microsoft Sentinel, Defender, Splunk, or SIEM platforms Zscaler Digital Experience (ZDX) Cloud security and Zero Trust architectures PowerShell, Python, Terraform, or automation tooling Palo Alto, Cisco, F5, or similar enterprise networking ...

equivalent demonstrable experience. Technology Skills Strong understanding of enterprise security architectures and controls, including network security, secure boundaries, endpoint protection, IDS/IPS, SIEM, identity and access management, PKI, LDAP, Active Directory, SAML, encryption, and key management. Experience interpreting outputs from vulnerability assessments, penetration testing, IT Health Checks (ITHCs), and ...

platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities: This role has no supervisory responsibilities Posting date: Monday 19th October 2026 [11.59pm ...

maintain cybersecurity tools across both on-premises and cloud environments, with cloud being a key focus Implement, configure and update security solutions including EDR, SIEM, vulnerability management, IAM and cloud security tools Collaborate with internal IT, development and third-party teams to embed security across the organisation Conduct risk assessments ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

methodologies and tools, enabling the seamless integration of security into the development process.* Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.* In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

information exchange and trusted data transfer mechanisms. Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure. Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments. Infrastructure & Engineering Advanced PowerShell scripting ...