76 to 100 of 402 SIEM Jobs in the UK excluding London

Defender for Endpoint, Defender for Servers, Defender for Cloud Apps, Intune, Conditional Access, Identity Protection and Purview. Knowledge of security tools and technologies including SIEM, EDR, firewalls, IDS/IPS, anti-virus, authentication, log management, threat intelligence, vulnerability management, sandboxing and MDM. Awareness of infrastructure technologies including Windows Server, VMware ...

application technologies including Windows Server, VMware, Exchange, IIS, SQL Server, Linux, Citrix, Cisco networking and backup technologies. An excellent understanding of security technologies including SIEM, firewalls, IDS/IPS, anti-virus, authentication, log management and content filtering. Good knowledge of ISMS, risk analysis, the CIA triad, attack vectors, cryptography and ...

/Azure/GCP. Experience in secure design of: IAM Zero Trust Network segmentation Data protection and encryption Application and API security Knowledge of SIEM, IAM, CASB, container/Kubernetes security. Experience in Vibe coding, as well as technologies experience similar to Openclaw and Ollama Certifications One or more ...

more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands-on experience creating security use cases, analytics, and playbooks. Experience conducting security ...

cloud landing zones using automation frameworks. Implement advanced networking (VPC, VPN, hybrid connectivity, load balancing, DNS, CDN) and security controls (IAM, RBAC, KMS, firewalls, SIEM integration). Automation & Infrastructure as Code (IaC): Develop, test, and maintain IaC templates using Terraform, CloudFormation, and Ansible for repeatable, auditable deployments. Integrate IaC pipelines ...

ability to investigate suspicious or unauthorised account activity. Experience working with Endpoint Detection and Response (EDR) technologies and analysing endpoint telemetry. Understanding of SIEM platforms, security monitoring, IDS/IPS, firewalls, and network traffic analysis. Experience collecting and analysing evidence from Windows, Linux, and macOS systems, as well as mobile ...

Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards. Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems. Develop entity extraction ...

development-support services. IT security, vulnerability management, patching, monitoring, backups and disaster recovery. Incident management, root-cause analysis and security incident response, ideally involving SIEM tools. IT service management covering incidents, problems, changes and assets. Strong troubleshooting, risk assessment, prioritisation and communication skills. Experience guiding colleagues, maintaining technical documentation and ...

Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar. Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection. Excellent communication and stakeholder management skills, with the ability to work effectively across technical and ...

and continuous improvement across the business. About You: Experience in a Cyber Security or Security Engineering role. Knowledge of enterprise security technologies, including firewalls, SIEM, EDR, Microsoft Defender, and vulnerability management tools. Experience securing Microsoft Azure environments. Strong analytical, problem-solving, and stakeholder management skills. Experience with security incident response ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

equivalent) Secure gateway and proxy technologies Cross Domain Solutions (CDS) and secure information exchange technologies Network segmentation and Zero Trust Architecture Security monitoring, SIEM, logging, and threat detection capabilities TCP/IP networking, routing, switching, DNS, and network security principles Secure architecture and defence-in-depth design patterns Experience operating ...

producing high standards of work on schedule in a pressured environment and whilst dealing with competing priorities Demonstrable experience with at least one major SIEM and EDR platform, additional hands‐on KQL/SPL, PowerShell/Python experience preferred Demonstrable experience with Security Orchestration and Automation Strong understanding of ITSM ...

methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

systems remain at the required security posture against baseline requirements Work with the Security Monitoring engineering team to ensure logs are forward to the SIEM capability Work with the customer and appropriate agencies to develop new policies, design processes, and procedures, and develop technical designs Assess system vulnerabilities, implement risk ...

methodologies and tools, enabling the seamless integration of security into the development process.* Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.* In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. ...

information exchange and trusted data transfer mechanisms. Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure. Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments. Infrastructure & Engineering Advanced PowerShell scripting ...

environments, and Windows, Linux, and macOS operating systems. Strong understanding of cybersecurity technologies and strategies, including Security Operations, Incident Response, Security Frameworks, Vulnerability Management, SIEM, XDR, EDR/EPP, IPS/IDS/NDR, endpoint security, and cloud security. Hands‐on experience delivering technical demonstrations, workshops, evaluations, and Proof ...

Monitorbackup systems, conduct regular restore testing, and support annual external audits and DR testing initiatives. Proactive Monitoring: Manage system uptime, antivirus/EDR, and SIEM tools to quicklyidentifyand resolve performance anomalies. Network Admin: Support Azure VPN connectivity and applied IP routing and subnetting fundamentals to resolve complex connectivity issues. User ...

NIST SP 800‐82, NIST CSF, CIS Controls, or NCSC OT security guidance. Familiarity with OT‐specific technologies, protocols, or vendors. Experience with SIEM, EDR, PAM, patch‐management, or asset‐discovery platforms. Scripting skills using PowerShell, Python, or Bash. Experience supporting regulated, defence, energy, utilities, manufacturing, transport, or critical national ...

operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical ...

Security 1+ years of experience with either programming, networking, system administration, or DevOps Experience performing firewall reviews - Palo Alto, Cisco, Checkpoint, pfSense. Experience with SIEM’s such as LogRhythm, Splunk, Azure Sentinel, Alien Vault or Rapid 7 Strong experience using Microsoft 365 suite of products such as Endpoint Manager (InTune ...

Technical expertise Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core ...

environments such as Microsoft 365, Azure, AWS or Google Cloud . Understanding of security technologies and controls such as firewalls, endpoint security, vulnerability management, SIEM and identity security. Strong stakeholder management skills, including experience dealing with senior business stakeholders, customers, suppliers and auditors. A recognised security qualification such as CISSP ...

Entra ID and other identity providers (IdPs). Strong understanding of attacker tactics, techniques and procedures, and the incident response lifecycle. Experience using EDR, SIEM and cloud security tooling to support investigations and response activities. Ability to communicate technical findings and recommendations to senior stakeholders. Why Join ...