151 to 175 of 402 SIEM Jobs in the UK excluding London

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

other Public Cloud Solutions) Analysis and Incident Response experience with Cloud systems such as AWS or GCP Experience working and supporting analytics/SIEM platforms. Experience working in CSIRT/SOC functions. Experience supporting and conducting Incident Response engagements. Experience in endpoint based investigations. Experience in cloud based investigations. Experience ...

Cyber Security Manager, Security Lead or Information Security role Strong background in security operations and incident response Experience with Microsoft security technologies Knowledge of SIEM, endpoint security and threat management Understanding of frameworks such as ISO27001 and Cyber Essentials Excellent communication and stakeholder management skills What's on Offer? Opportunity ...

frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication, stakeholder management, and report-writing skills. Professional certifications such as CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or ITIL are desirable. ...

Istio), API Security, IaC security (e.g. Terraform, ARM templates). Network Security: Zero Trust, firewalls, segmentation, DDoS Protection. Security Logging and Monitoring: Security logging, SIEM integration, event correlation. And any of these would be great: CISSP, CCSP, or equivalent certifications. Azure Security Engineer Associate, Google Professional Cloud Security Engineer. Microsoft ...

issues as required. Ensure appropriate monitoring, alerting, triage and escalation arrangements are in place for cyber security events, and that security tools such as SIEM, endpoint protection, email security and privileged access controls are configured and used effectively to support detection, response and assurance. Lead on cyber assurance activity, including ...

such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks.* Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement.* Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and ...

agents, either internally or customer facing. Experience implementing engineering solutions that meet internal control frameworks and regulatory expectations. Experience with security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks andregulations, such asMitreATT&CK, NIST, TSA. Any relevantstudy or certifications, either formal ...

response, and managed security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement ...

management tools such as PRTG or Nagios. Experience analysing network traffic, investigating security alerts and working with SOC teams would be beneficial. Familiarity with SIEM platforms such as Splunk Enterprise Security or LogRhythm, and tools such as Darktrace, would also be advantageous. This position offers a lucrative benefits package, which ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

build and tune detection logic in a live SOC, and own the pipelines that feed it. You'll work hands-on across SIEM/detection and log ingestion/normalisation, and translate technical risk into decisions for government stakeholders and system owners. This is a delivery role: security assurance should ...

environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such ...

such as NIST, ISO 27001, OWASP, and CIS. Experience designing and implementing secure, compliant PCI‐DSS solutions. Solid grounding in tools and technologies like SIEM, IDS/IPS, DLP, endpoint protection, IAM, and encryption. Ability to communicate complex concepts clearly and influence at all levels. Certifications such as CISSP, CCSP ...

vendor/third-party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

capabilities at scale. Serve as the Windows platform product owner for cross‐portfolio teams, including Sophos XDR, EDR, MDR, Workspace Protection, X‐Ops, NG‐SIEM, and Endpoint Management. Use endpoint telemetry, customer feedback, field input, support trends, competitive analysis, and platform data to prioritize work and make clear product decisions. ...

customer-facing technical role, such as implementation, sales engineering, product support, or technical account management. Demonstrate working knowledge of cybersecurity technologies (e.g., SIEM, ASM, Vulnerability Management, or SOAR) and SaaS solutions. Apply project management principles to establish ownership, set clear timelines, and hold internal and external stakeholders accountable for driving ...

engineering experience. Advanced Python development skills including REST APIs, JSON processing, testing and debugging. Experience developing and maintaining production Splunk SOAR playbooks. Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows. Experience using Git and software development best practices. Strong understanding of SOC operations and incident ...

high-pressure, time-sensitive incident environments Willingness to work some weekends and holidays as part of a rotation Desired: Hands-on experience with EDR, SIEM, and forensic collection tools Familiarity with OSQuery, SQL, or KQL Knowledge of MITRE ATT&CK and incident response frameworks Industry certifications such as GCIH, GCED ...

systems. ✔️ Manage and configure firewalls, IDS/IPS, and endpoint security. ✔️ Investigate security alerts and coordinate incident responses. ✔️ Maintain and analyze logs using SIEM tools. ✔️ Conduct digital forensics and root‐cause analysis of incidents. ✔️ Implement data encryption, MFA, and secure access controls. ✔️ Develop, update, and enforce cybersecurity policies. ✔️ Collaborate with ...

Detection Engineer (SOC/SIEM/Splunk) £450 per day | Outside IR35 | 9-Month Contract Active SC Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. Not sure what … Analyst, Security Analyst, Detection Engineer, or Security Operations role. Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident ...

Operations: Act as the technical lead for major cyber security incidents and critical vulnerabilities impacting West Midlands Police. Establish operational frameworks, playbooks, security monitoring (SIEM/XDR), and simulated wargaming exercises. Governance, Policy & Compliance: Own and update Information Assurance policies aligned with national frameworks (NCSC, NIST CSF, ISO 27001). ...