6 of 6 Remote/Hybrid SIEM Jobs in Watford

ensure endpoint configurations meet organisational standards. You'll also enhance threat-hunting capabilities by integrating threat intelligence and correlating EDR data with SIEM and XDR platforms for deeper insights. Data Loss Prevention (DLP) In this part of the role, you'll administer DLP solutions, define classification policies, and monitor ...

migrating firewall rules, designing segmentation at multiple layers (macro/meso/micro), and integrating identity‐based controls. Strong background in logging/monitoring, SIEM/SOAR integration, and building operational metrics. Proficiency with capacity planning, performance tuning, and platform visibility tooling. Excellent documentation skills; able to produce architecture artefacts ...

policies, and standards Own vulnerability management, security monitoring, and incident response Ensure compliance with NCSC, PSN, PCI-DSS, GDPR and other national frameworks Manage SIEM, Microsoft security tooling (Sentinel/Defender/E5), identity & access, firewalls, and endpoint protection Advise on secure design for projects and change governance Prepare annual ...

with customers and other internal stakeholders. Confidence in effectively communicating technical incidents or security threats to non-technical stakeholders. Previous experience of working with SIEM and log monitoring tools. SC-200, SC-900 or equivalent certification would be beneficial but not essential. To be considered for this role, you must ...

progression pathways into Threat Intelligence, SOC Engineering, Professional Services, Senior SOC roles, and Incident Response. Key Responsibilities Detect & Investigate Monitor and triage alerts across SIEM, EDR/XDR, email, and web security platforms. Investigate suspicious activity and assess escalation requirements. Follow SOC runbooks and structured investigation workflows. Build clear timelines … and common attack chains. Ability to recognise indicators of compromise (processes, network activity, logons, file changes). Hands-on experience with at least one SIEM, EDR, or XDR platform. Familiarity with ticketing tools such as ServiceNow, JIRA, or Salesforce. Experience reviewing Windows authentication/event logs and basic process trees. ...

experience within an MSP environment. Strong Microsoft Azure expertise (IaaS/PaaS, governance, identity, networking, landing zones). Security experience across MDR, threat detection, SIEM/SOAR or security monitoring. Solid understanding of hybrid cloud, integrations, networking and resilient design. Ability to articulate complex technical concepts to technical and … architectural documentation and NFRs (security, performance, compliance). Desirable MSP service design/service offering experience. Hands-on knowledge of Microsoft Sentinel or other SIEM/SOAR platforms. Familiarity with security frameworks (NIST, ISO 27001). Relevant Azure certifications (AZ-305, AZ-500, etc.). Please apply now if this ...