276 to 300 of 403 SIEM Jobs in the UK excluding London

Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme. You will provide end-to-end Splunk admin, ensure health and security, deploy ...

Nettitude Group in Birmingham is seeking a vigilant SOC Monitoring Analyst to join our 24x7 team, using SIEM, EDR, and threat intelligence to triage events and advise on risk. You will produce detailed incident reports, tune alerts, and collaborate on advancing monitoring capabilities, including malware analysis and cross‐team projects. ...

Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling. You will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and ...

hands-on engineering role focused on the implementation, maintenance, optimisation and integration of security technologies across complex enterprise environments. Key Responsibilities Administer and maintain SIEM and security monitoring platforms Configure and optimise log ingestion, correlation rules and alerting Develop and maintain automation using PowerShell, Python and Regex Integrate security technologies … analysts to improve detection capabilities and reduce false positives Support change management, CAB activities and technical implementation planning Essential Technical Skills Security Platforms SIEM administration and support Security tooling implementation and maintenance Log onboarding and data source integration Detection engineering and alert tuning Scripting & Automation PowerShell Python Regex Integration Technologies ...

Senior Microsoft Security Engineer Azure Security | Microsoft Sentinel | Defender XDR | Purview | SIEM Engineering We are currently supporting a leading organisation looking to hire an experienced Senior Microsoft Security Engineer to join their security engineering function. This is an excellent opportunity for a security professional with strong Microsoft security expertise … and implementation plans Required Experience Strong commercial experience within Microsoft security engineering roles Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation Strong knowledge of Microsoft Defender XDR security capabilities Experience with Microsoft Purview DLP, sensitivity labels and information protection Strong understanding of Azure security principles ...

align with Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end-to-end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior … discussions. What You'll Bring: Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

actively shaping the security posture of organizations that matter. This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment. If you are successfully offered this position, you will go through a series … with incident, problem, or change management. Understanding of security principles and best practices. Strong communication and multitasking skills. Nice-to-Have Skills: Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel). Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS). Certifications like CompTIA Security+, Splunk ...

E‐Resourcing Ltd in Manchester is seeking a Security Engineer to assess and enhance the effectiveness of existing security controls, with a focus on AWS and SIEM. You will design and implement security solutions to ...

Menzies LLP in Manchester is seeking an IT Security Analyst to join the IT & Innovation team. You will monitor security alerts from the SoC, investigate incidents, and help improve configurations to strengthen security across the ...

TRIA in the United Kingdom is seeking a skilled SOC Analyst to join a market-leading energy-sector organisation undergoing an IT security transformation. You will secure IT and OT networks and act as the ...

bring You’ll have experience in several of the following areas: Security Operations, Security Incident Response or Security Engineering. Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) technologies. Identity and Access Management, including MFA, Conditional Access and Privileged Access. Data Loss Prevention (DLP) technologies and policy management. ...

Advert Job Title: SIEM Security Engineer Location: Birmingham- Hybrid 3 days on site a week Contract Type: 5-Month Contract About the Role: We are looking for a skilled SIEM Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and … threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and ...

works with Technology teams, third‐party providers, and business stakeholders to reduce cyber risk and maintain policy compliance. You will help monitor SOC/SIEM outputs, participate in risk assessments, and assist with audit responses. Strong communication and a security‐minded mindset are essential for protecting information assets. #J ...

controls across cloud infrastructure, data platforms, and application services. You will own CSPM, DLP capabilities, and integrate controls with CI/CD pipelines and SIEM tools. The role emphasizes hands-on security engineering, cloud-native architectures, and collaboration with platform engineers, product teams, and security partners to deliver scalable, reliable ...

with a focus on safeguarding client IT infrastructure across hybrid environments. This role requires strong knowledge of security tooling (MS Defender, Sentinel, Email Gateway, SIEM, IDPS, GVM) and practical experience in DLP deployment, security policy tuning, and client engagement in an IT outsourcing context. #J-18808-Ljbffr ...

handle escalated incidents, perform threat hunting, and help implement secure configurations with a focus on privacy and availability. Role requires familiarity with SIEM, cloud security, and hands-on security tooling. A UK Clearance pathway is noted, with potential benefits and a modern remote-friendly environment. #J-18808-Ljbffr ...

seeking a Senior Security Operations Engineer (SOC Engineer L3) to join its security function. The role is highly technical, focusing on SOC engineering, detection, SIEM/SOAR, automation and AI-driven operations. You will design and improve monitoring across a large enterprise with emphasis on AI agents and agentic workflows ...

experience. Preferred Qualifications Experience in B2B or enterprise software, ideally within security, law enforcement, defence, or intelligence-related markets. Familiarity with digital forensics, OSINT, SIEM, or related technologies. Experience with product analytics, CRM, or customer feedback platforms such as HubSpot, Salesforce, Pendo, or UserVoice. Perks and Benefits Hybrid working arrangement ...

leaders · Experienced at working on bids and large or complex changes · Excellent understanding of a variety of networks and routing protocols · Network management or SIEM designs, tooling or support This contract is based on-site in Baskingstoke, some travel may be required. This is a great opportunity for an experienced ...

vulnerability exposure and progress.Support penetration testing, security assessments and the remediation of identified findings.Security PlatformsSupport the operation, maintenance, development and governance of security platforms, including SIEM, Network Access Control, firewalls, endpoint security, email security, vulnerability management and identity security.Support the secure operation of cloud and SaaS services, ensuring risks … this profile.To be successful in the role you will have:Strong experience with security vulnerability management.Good experience and knowledge of using Security Information and Event Management tools.Good experience and knowledge of implementing and supporting Network Access Control.Good experience and knowledge of advanced detection and response systems.Good understanding of exploits, malware ...

work with ownership, influence and responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical … cyber security role, ideally within security operations, incident response, threat detection or a similar technical security environment. ** Practical knowledge of security technologies including SIEM, firewalls, endpoint detection and response (EDR), DLP and vulnerability management tools. ** Experience investigating security incidents, analysing logs and identifying threats across complex IT environments. ** A good ...

peer backup. Each Security Engineer also owns formal responsibility for Vulnerability & Compliance and Identity & Access Management as defined disciplines. Responsibilities Security Operations Monitor the SIEM platform and security tooling daily - triaging alerts, investigating anomalies, and escalating confirmed threats. Act as the named internal interface to the external SOC - receiving escalations … and recovery. Own and manage Defender for Endpoint/XDR and Defender for Cloud Apps - maintaining configuration, reviewing alerts, and tuning detection policies. Manage SIEM rule sets - adding new detection use cases, tuning existing rules, and reviewing rule coverage. Vulnerability & Compliance Own and operate the vulnerability management programme - running regular ...

Cloud Apps, Intune, Conditional Access Policies, Identity Protection, ANY.RUN, Purview, Zscaler, Mimecast, Thinkst Canary Devices, Nessus, Secret Server, Cisco Firepower Awareness of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, EDR, AV, ATP, Threat & Vulnerability Management, Threat Intelligence, Sandboxing … Solutions, Attack Surface Reduction Rules, Web Control/Category Based URL Blocking, Controlled Folder Access, API's, SIEM Connectors Awareness of security approaches: ISMS, risk analysis and assessments, the CIA triad, attack vectors including social engineering, cryptography, confidentiality issues and the law relating to them, such as PACE ...

reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering … and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder ...