51 to 75 of 345 SIEM Jobs in the UK excluding London

cyber security management within defence, aerospace, or government environments. Strong knowledge of classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence‐specific compliance frameworks (MOD JSPs, NIST ...

cyber security management within defence, aerospace, or government environments. Strong knowledge of classified information handling and secure communication protocols. Expertise in intrusion detection, SIEM tools, and advanced threat intelligence systems. Proven track record of leading incident response in high-security environments. Familiarity with defence-specific compliance frameworks (MOD JSPs, NIST ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

technical detail. You’ll ideally bring experience across: AWS, Azure or GCP security Linux administration and hardening IAM, SSO, MFA, RBAC and privileged access SIEM, EDR and vulnerability management TCP/IP, DNS, firewalls, VPNs and proxies Terraform, Ansible, Python or Bash Docker and Kubernetes NIST, CIS Benchmarks and/ ...

security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure and GCP environments Evaluate and recommend security technologies including IAM, SIEM, CASB and container security solutions Produce architecture diagrams, design artefacts and security documentation Collaborate with development, infrastructure and security teams across the SDLC Support security ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

programming language (Python, Go, or similar) for building security automation and tooling. Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise. Experience setting up segregated and secured hypervisor environments ...

environment, with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. ...

Terraform or PowerShell. Familiarity with industry-standard frameworks including PRINCE2 and TOGAF. Experience with Cisco Unified Communications and Asterisk PABX. Familiarity with Security Information and Event Management platforms and network security technologies. Knowledge of endpoint management and cloud platforms including Microsoft Azure, Microsoft 365 and Amazon Web Services. TPBN1_UKTJ ...

OWASP (ASVS/Testing Guides).Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security ...

environments (e.g. defence, air-gapped) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, identity, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Hardware Security Modules (HSMs) (e.g. Thales) Cross-domain/secure communications environments Automation ...

secure environments (e.g. defence, air-gapped)Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as CodeExperience integrating enterprise services (Active Directory, identity, monitoring, SIEM)Hands-on use of DevSecOps tools and CI/CD pipelinesHardware Security Modules (HSMs) (e.g. Thales)Cross-domain/secure communications environmentsAutomation of certificate management ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

role in building and optimising detection and response strategies, ensuring robust protection against evolving threats.Key ResponsibilitiesSIEM Engineering & ManagementDeploy, configure, and maintain the QRadar SIEM platform.Onboard and normalise log sources across on-premises and cloud environments.Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis.Playbook Development & AutomationDesign and … DevelopmentLead threat modelling exercises using frameworks such as MITRE ATT&CK, STRIDE, and Cyber Kill Chain.Translate threat models into actionable detection use cases and SIEM rules.Prioritise detection engineering based on business risk and impact.Reporting & CollaborationProduce reports and dashboards to communicate security posture and incident trends.Partner with IT, DevOps, and compliance ...

fundamentals of IT Infrastructure Desirable Experience Experience working within financial services or regulated environments Experience with cloud security (e.g. Azure, AWS) Familiarity with SIEM, vulnerability management, and endpoint security tools Understanding of data protection and GDPR requirements Essential Qualifications Degree or equivalent professional experience in a relevant field Industry certifications ...

solutions and partnering with infrastructure and engineering teams to implement them.Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms.Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities.Experience leading or materially contributing to incident response ...

and partnering with infrastructure and engineering teams to implement them. Deep familiarity with enterprise security tools, including endpoint protection, vulnerability management, and logging or SIEM platforms. Experience with AI security and governance, including policy, risk, and enablement of cyber monitoring, detection, and response capabilities. Experience leading or materially contributing ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

checks.Designing and building a range of security tooling, across endpoint protection, vulnerability scanning, network security, cloud security posture management, and security information event management (SIEM).Operating Secure by Design (SbD) procedures and producing required artefacts such as security impact assessments.Inputting into security architectures and solution designs.Designing security controls and suggesting ...

practical approach to problem solving. Technical: Strong experience in cyber security operations, incident response or threat detection roles Proven experience working with Microsoft Sentinel (SIEM) in a production environment Good working knowledge of Microsoft Security Copilot or similar AI-assisted security tooling experience managing or working closely with an outsourced ...

and occasional travel to Europe and Asia. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment ...

firewall concepts; experience collaborating with network teams to design resilient architectures. Familiarity with cybersecurity practices, vulnerability management, identity/access governance, and logging/SIEM integrations; ability to partner effectively with Cyber and Risk/Compliance. Excellent communication, stakeholder management, and problem-solving skills; comfortable driving outcomes across business and ...

essential things required to be successful in the role 4+ years’ experience in a security or technical operations role Hands-on experience working with SIEM and EDR tools (essential) Experience investigating and responding to security alerts or incidents Familiarity with securing systems through patching, endpoint protection, or similar controls Working ...