251 to 275 of 326 SIEM Jobs in the UK excluding London

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

incident lifecycle, from investigation through to resolution. Monitor, investigate and respond to security events across cloud, identity and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive … root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing ...

operations and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting … common exploits. Understanding of threat vectors against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding ...

security automation workflows to improve efficiency and response times. Develop scripts and integrations using Python, PowerShell and APIs. Manage and optimise security tooling including SIEM, EDR/XDR and monitoring platforms. Support the secure configuration and governance of Azure, AWS and Microsoft 365 environments. Collaborate with IT, Development and Security … Microsoft 365. Experience with scripting and automation using Python, PowerShell or similar technologies. Hands-on experience managing and configuring security tooling such as SIEM, EDR/XDR, Microsoft Sentinel, Defender, Splunk or CrowdStrike. Experience integrating systems and workflows through APIs and automation frameworks. Strong communication and stakeholder management skills. Desirable ...

align with Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior … assurance discussions. Skills/Qualifications Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments ...

peer-review detection content - treat detections as code (version-controlled, reviewed), translate threat intelligence into new rules, and contribute to iterative improvement of the SIEM ruleset; Own sub-cycles of the intelligence lifecycle - run structured collection against defined requirements, track actor TTPs, manage indicator lifecycles, and produce situational-awareness products … actual outcomes, raising concerns or opportunities proactively, and contributing subject-matter expertise to proposals or bids. Hands-on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel, or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling, or indicator lifecycle ...

peer-review detection content - treat detections as code (version-controlled, reviewed), translate threat intelligence into new rules, and contribute to iterative improvement of the SIEM ruleset; onboard new log sources, including cloud and application feeds, to close coverage gaps. Own sub-cycles of the intelligence lifecycle - run structured collection against … opportunities proactively, and contributing subject-matter expertise to proposals or bids. Tools and practice familiarity: Hands-on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel, or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling, or indicator lifecycle management ...

closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and … policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with ...

events Drive proactive threat hunting campaigns to identify emerging threats, vulnerabilities, and anomalous behaviour Develop and improve detection logic, alerting, and monitoring content within SIEM platforms including Elastic Stack Analyse threat intelligence, indicators of compromise (IOCs), and attacker TTPs to strengthen detection capability Produce detailed post-incident reports with clear … leadership, curiosity, and a proactive mindset. You should have experience in areas such as: Security Operations Centre (SOC) environments Threat hunting and incident response SIEM technologies, ideally Elastic Stack Threat intelligence and attacker methodologies Windows and Linux operating systems Networking fundamentals including protocols, IP addressing, and traffic analysis Understanding ...

Cyber Security Engineer, Cloud Security, SIEM, Incident Response, COR7555 An exciting opportunity has arisen for a Cyber Security Engineer to join a growing technology company based in Oxfordshire, working on a hybrid basis.This is a hands-on role focused on strengthening cyber security across cloud platforms, applications and business systems. … Security Engineer? Proven hands-on experience within Cyber Security Engineering or Security Operations Experience with cloud security across AWS, Azure or GCP Experience with SIEM, EDR/XDR and security monitoring technologies Strong knowledge of vulnerability management and remediation Experience responding to and investigating security incidents Good understanding of network ...

with hands‐on delivery. You will shape reference architectures and operating models while aligning to Zero Trust and regulatory requirements. The role covers SOC, SIEM, SOAR, XDR/EDR, identity and cloud security across complex enterprise estates. Collaboration with sales, pre‐sales, and delivery teams is essential to ensure scalable ...

cloud security processes, remediation activities, and operational workflows. * Ensure cloud environments align with security, governance, compliance, and software lifecycle standards. * Monitor cloud platforms using SIEM, cloud security, and observability tools. * Support incident, problem, and change management processes. * Work with containerised environments and infrastructure-as-code technologies. Essential Skills & Experience * Strong … Chef. * Strong understanding of IAM, RBAC, encryption, cloud governance, and access management. * Experience working with Windows Server and Red Hat Linux environments. * Knowledge of SIEM platforms, incident response, and operational support processes. Desirable Skills * Experience working within regulated or financial services environments. * Relevant cloud certifications (AWS, Microsoft Azure, or Google ...

design and implementation. Certificate life cycle management. Cryptographic principles and secure communications. Enterprise Integration Active Directory. Identity and access management solutions. Monitoring and SIEM platforms. Enterprise security service integration. Networking & Automation TCP/IP, DNS, DHCP, and Firewall technologies. Automation and Scripting using: PowerShell Bash Python Ansible Terraform Infrastructure … VCAP). AWS and Azure cloud platforms. DevSecOps and CI/CD pipelines. VxRail and hyper-converged infrastructure. VMware Cloud Foundation life cycle automation. SIEM/SOC integration. Hardware Security Modules (HSMs), including Thales. Cross-domain and secure communications environments. Kubernetes and Docker container platforms. What We're Looking ...

Barclays is seeking a Cyber Defence Engineering Lead to develop, implement and maintain security solutions protecting banking systems and data. The role is based in Glasgow, Knutsford, or Northampton and requires senior leadership in security ...

memory management Bash scripting Containers Cache Understanding of IP networking and RADIUS Use of SQL for Database queries Hazelcast Caches Apache Kafka Streaming Architectures SIEM event management tools Cassandra Database Replication If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website. ...

Security-focused approach to platform management Desirable Skills Bash scripting SQL Kafka, Cassandra or Hazelcast Monitoring tools (e.g. CheckMK, Selenium) IP Networking and RADIUS SIEM tools If you have a strong Linux infrastructure background and experience supporting enterprise-scale platforms, we'd like to hear from you. ...

services Design and implement enterprise grade logging and monitoring solutions using OCI Logging, OCI Monitoring, Events and Alarms. Integrate OCI monitoring with third party SIEM, ITSM and APM tools (e.g. Splunk, BMC etc.) Demonstrable experience with Oracle Cloud Infrastructure (OCI), including proficiency in the design and build of services such ...

Cyber Defence Engineering Lead to develop, implement and maintain security solutions for safeguarding bank systems and sensitive information. The role requires hands-on SIEM and analytics expertise, strong Python and DevSecOps skills, and experience with IaC/CaC, GitLab, and CI/CD pipelines. The position involves leading security platform ...

Cyber Defence Engineering Lead to develop, implement and maintain security solutions for safeguarding bank systems and sensitive information. The role requires hands-on SIEM and analytics expertise, strong Python and DevSecOps skills, and experience with IaC/CaC, GitLab, and CI/CD pipelines. The position involves leading security platform ...

Cyber Defence Engineering Lead to develop, implement and maintain security solutions for safeguarding bank systems and sensitive information. The role requires hands-on SIEM and analytics expertise, strong Python and DevSecOps skills, and experience with IaC/CaC, GitLab, and CI/CD pipelines. The position involves leading security platform ...

Experience with OPA (Open Policy Agent) policy authoring in Rego and sidecar deployment patterns Hands‐on with OpenTelemetry (traces, metrics, logs), Dynatrace, and Splunk SIEM integration Working knowledge of CDN/WAF platforms (Akamai Ion, Kona, Cloudflare) and WAF‐as‐code automation Experience with PostgreSQL (HA, connection pooling, PITR) and ...

Cyber Security, with the following skills and experience: Experience in SOC operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform ...