26 to 50 of 325 SIEM Jobs in the UK excluding London

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience of responding to security DDQs and maintaining security evidence. * Experience supporting ISO 27001, Cyber Essentials and Cyber Essentials Plus. ...

platform experience (e.g. Microsoft Fabric, Databricks) - Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) - Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 - Resource must be able to qualify for a UK clearance. ...

compute, storage and networking into enterprise platforms Desirable VMware VCP certification AWS or other cloud platform experience Infrastructure as Code Active Directory, PKI, PAM, SIEM integration VxRail/Hyper-Converged Infrastructure VCF life cycle management (deployment, patching and upgrades) Kubernetes and Docker DevSecOps and CI/CD pipelines Requirements Active ...

common cyber threats, attack vectors and malware types A good understanding of networks, operating systems and core security concepts Exposure to any recognised SIEM or security monitoring technology, such as Microsoft Sentinel, Splunk, Microsoft Defender or IBM QRadar Ability to remain calm and perform effectively under pressure Strong communication and ...

engineering lifecycle Design and assurance of secure data flows across trust boundaries Data diode/one-way transfer architectures Integration with security tooling (SOC, SIEM, monitoring platforms) Performance and throughput optimisation for secure data transfer systems Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Security Clearance We offer ...

enterprise/defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with ...

Role Title: Splunk SIEM Engineer Duration: contract to run until 30/11/2026 Location: Knutsford. Hybrid, 3 days per week onsite Rate: up to £587.33 p/d Umbrella inside IR35 Role purpose/summary Join us as Splunk SIEM Engineer where you must design, develop and improve … software, utilizing various engineering methodologies, that provides business, platform, and technology capabilities for our customers and colleagues. Looking for a successful Splunk SIEM Engineer, where one should have experience with: Minimum Qualification - bachelor's degree Multi-Platform SIEM Expertise: Proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture ...

this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus, intrusion detection/prevention systems (IDS/IPS), vulnerability management tools and Firewall, DLP, Web and Email Security Gateways.This … and help coordinate, routine security event monitoring and investigations using available toolsUse, configure and develop the use of a security information and event management (SIEM) and EDR toolMonitor and configure network intrusion detection and prevention systemsAnalyse and create reports for security incidents, to determine root cause and lessons learntCreate and ...

organisation. • Identify opportunities to improve and automate security processes, reporting, and operational controls. Skills & Experience: • Experience using security monitoring tools such as Microsoft Defender, SIEM platforms, or similar technologies. • Strong analytical and investigative skills. • Understanding of vulnerability management and incident response processes. • Familiarity with security standards and frameworks such ...

from colleagues and service delivery teams Support and coordinate patch management activities, validating effectiveness through vulnerability scanning Oversee and operate key security technologies, including SIEM, email and web gateways, and endpoint protection tools Monitor external threat intelligence sources and assess relevance to the organisation Produce and report on security metrics … operational performance Technical expertise Good understanding of information security principles, risk management and the threat landscape Experience of operating and monitoring security tooling, including SIEM, endpoint protection, and email/web security solutions Ability to proactively conduct threat hunting activities and develop or enhance detection analytics to improve identification ...

obtain SC Clearance. Desirable Experience Experience delivering Security Operations Centre (SOC) projects. Familiarity with cyber security technologies and services, including: Microsoft Sentinel, SentinelOne, SIEM platforms, EDR solutions Professional certifications such as: PRINCE2 Practitioner, PMP, Certified Scrum Master ...

also identify gaps in capability and define enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that ...

Databricks ITSM : ServiceNow EUC : Intune, SCCM Applications : CRM, ERP, HCM, Finance Infrastructure : servers (cloud/on prem), networking, storage, backup Cloud : Azure Cyber Security : SIEM, XDR, IPS/IDS, NIST, ISO27001 ...

methods. We're looking for someone with: Experience in Cyber Security Operations, Incident Response or Threat Detection Strong hands-on experience with Microsoft Sentinel (SIEM) Experience with Microsoft Security Copilot or similar AI-assisted security tools Azure cloud security experience Experience working with an outsourced SOC/MDR provider Knowledge ...

multi-cloud environments. Architect application security, API security and secure SDLC integration. Design security operations centre (SOC) capabilities and security information and event management (SIEM). Lead security technology evaluation and implementation programmes. Technical Leadership & Governance Lead security technical teams and provide architectural mentoring. Establish security design standards, architecture patterns … understanding of threat models, attack vectors and defence-in-depth strategies. Proficiency in cloud security (AWS, Azure security, or equivalent). Knowledge of security tools (SIEM, DLP, EDR, WAF, firewalls, etc.). Understanding of cryptography, encryption and security protocols. Familiarity with MOD security requirements, Classification Guides and defence standards. Knowledge ...

technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and ...

scripting for operational tasks (PowerShell, Bash, Python, or similar) Knowledge of cyber security controls and accreditation requirements Use of monitoring and alerting tools (e.g. SIEM, infrastructure monitoring platforms) ITIL-aligned service management practices (incident, problem, change) Security Clearance We offer a comprehensive, company-funded benefits package that supports your wellbeing ...

SaaS and IaaS environments. Device and mobility management. Windows Server and Windows operating systems. VMware and enterprise storage. VPN, SASE and cloud security technologies. SIEM and security monitoring platforms. Experience with technologies such as Mimecast, Varonis and Cisco Umbrella would be highly beneficial. You should also have experience with scripting ...

data platforms (e.g. Microsoft Fabric, Databricks) Broad enterprise technology background (e.g. ServiceNow, CRM, ERP, cloud, infrastructure) Solid knowledge of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001) Additional Information Location: Remote, with ~2 days onsite travel Requirement: Must be a sole UK national ...

platform experience (e.g. Microsoft Fabric, Databricks) Broad enterprise technology exposure (ServiceNow, CRM, ERP, EUC, infrastructure, cloud) Solid understanding of Azure and cyber security frameworks (SIEM, XDR, NIST, ISO27001 ...

Code (IaC) and DevSecOps practices VxRail and hyper-converged infrastructure VMware Cloud Foundation life cycle management, patching and upgrades Active Directory, PKI, PAM, SIEM and enterprise monitoring integrations Kubernetes and container platforms Security Clearance Due to the nature of the work, DV Clearance is strongly preferred. However, candidates holding active ...

and network layers into a unified platform Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Automation of VCF lifecycle (patching, upgrades, deployment) Security Clearance We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work ...

Agile methods such as SCRUM; Enterprise security packages, security enforcing software and devices, such as identity management and federation, cryptography, public key infrastructure, firewalls, SIEM, vulnerability scanning, etc. Must be eligible and willing to obtain UK Government Security Clearance. Find out more information about the Security Clearance (SC) process and ...

monitoring and cyber incident response, including internal SOC and third-party services Overseeing detection, triage, investigation and response to threats using security tooling (e.g. SIEM, SOAR, EDR/XDR) and acting as the senior escalation point and cyber incident commander where required Ensuring incident response plans, playbooks, testing, and post ...