126 to 150 of 299 Remote/Hybrid SIEM Jobs

provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect … Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk ...

continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network environments. Analyse security events to determine impact, severity, and appropriate … experience working within a Security Operations Centre (SOC) environment. Strong experience in security monitoring, alert triage, and incident investigation. Hands-on experience with: Splunk SIEM technologies Endpoint security tools Security monitoring platforms Experience developing and improving detection content and alert logic. Strong understanding of incident response processes and cyber security ...

with global IT teams to protect Medpace’s systems; Own the administration and reliability of key security platforms, including privileged access management, EDR, and SIEM; Coordinate platform upgrades and fixes proactively; Lead cross-functional security projects from planning through execution; Coordinate with stakeholders across departments to deliver security project results … Analysts and IT teams as needed; Improve and automate security operations by developing scripts, integrations, and workflows; Build security automation in cloud or SIEM environments; Integrate security into enterprise systems and processes; Work with Network, Cloud, and DevOps teams to embed security controls and best practices into infrastructure and software ...

ensure secure delivery across the programme. Experience Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and ...

understanding of; Networking (TCP/IP, firewalls, segmentation), Operating systems (Windows/Linux), Identity and access management concepts, Cloud Fundamentals. Exposure to security tooling (SIEM, IDS/IPS, EDR) Strong understanding of core security principles such as: Defence in depth, Least privilege, Zero trust concepts An understanding of designing and ...

and OT, with on-going threat detection, rapid response, and risk reduction. You will collaborate with IT/OT teams, maintain security platforms (SIEM, SOAR, EDR, and email security), and support audits and continuous improvement. A CTC clearance is required for eligibility. #J-18808-Ljbffr ...

modern attack techniques, including identity compromise, credential theft, lateral movement, cloud compromise, data exfiltration and ransomware/extortion. Experience with technologies such as SIEM, EDR/XDR, threat intelligence, forensic and incident response platforms. Excellent analytical and investigative capabilities. The ability to lead and influence highly technical teams without relying ...

networking integration (vSphere,vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

and developing net-new strategic partners. Proven experience carrying and exceeding revenue quotas. Strong understanding of MSSP business models, managed security services, MDR, XDR, SIEM, SOC, SASE, Endpoint, and broader cybersecurity solutions. Experience developing executive relationships and influencing senior decision-makers. Demonstrated ability to create and execute strategic business plans. ...

oConfiguration Manager oSystem Center Service Manager oSystem Center Operations Manager Trelix Endpoint Protect Trend Micro Apex One Security Nextcloud Cireson Asset Management ManageEngine Log360 SIEM IRIS CACADE Veeam Backup and Restore Solutions Factory Symphony Desirable Qualifications: Bachelor’s or Master’s degree in: Computer Science, Engineering, or a related field ...

will lead threat detection, incident response, and tooling automation while mentoring other analysts and driving improvements across our security posture. You will work with SIEM, EDR, and cloud security tools, analyze threats, and produce dashboards and executive-level reporting for stakeholders in a fast-moving, agile environment. #J-18808-Ljbffr ...

Engineer, etc.) ideally in cybersecurity or enterprise software. Strong understanding of the Security Operations Center (SOC) environment, tools, and workflows. Comfortable explaining and troubleshooting: SIEM and SOAR integrations Security alert workflows and incident investigation processes Technical proficiency in: Writing SQL queries to extract and analyze data Experience working with APIs ...

professional services experience Understanding of SOC operations and incident response (essential) Knowledge of Microsoft Defender and/or Microsoft Sentinel (essential) Experience with SIEM, XDR, EDR, SOAR or Threat Intelligence platforms Strong technical presentation skills Ability to engage both technical and business stakeholders What’s On Offer ...

hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with: Cyber security incident investigation and response Threat hunting and detection SIEM, security monitoring and log analysis Cloud or hybrid environments Modern attack techniques and adversary behaviour Security automation or scripting Threat modelling or adversary simulation Working ...

support a defence/aerospace client on a 3-month contract in the UK. The role focuses on monitoring security events with IBM QRadar SIEM, incident response, and threat detection, with remote work and occasional site visits. You will investigate incidents across platforms, manage the incident lifecycle, perform log analysis ...

Defender XDR. Experience with Defender for Endpoint, Defender for Identity, Defender for Office 365 and/or Defender for Cloud Apps. Strong understanding of SIEM, XDR, SOAR, detection engineering and threat hunting. Experience designing solutions across hybrid and multi-cloud environments. Proven ability to lead complex client engagements and solutioning ...

controls, native utilities and investigative artefacts. Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next‐Gen SIEM, Splunk, Google SecOps and draw accurate, evidence‐based conclusions. Experience using endpoint detection and response (EDR) platforms ...

detection to help our members stay secure and resilient. Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct … doing As part of our Security Operations Centre, you'll Monitor customer and internal environments for suspicious or malicious activity using SIEM, EDR, DDoS and network security technologies. Investigate security alerts, triage incidents and support the delivery of effective incident response services. Identify, analyse and respond to cyber threats across ...

detection to help our members stay secure and resilient. Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct … doing As part of our Security Operations Centre, you'll Monitor customer and internal environments for suspicious or malicious activity using SIEM, EDR, DDoS and network security technologies. Investigate security alerts, triage incidents and support the delivery of effective incident response services. Identify, analyse and respond to cyber threats across ...

detection to help our members stay secure and resilient. Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct … doing As part of our Security Operations Centre, you'll Monitor customer and internal environments for suspicious or malicious activity using SIEM, EDR, DDoS and network security technologies. Investigate security alerts, triage incidents and support the delivery of effective incident response services. Identify, analyse and respond to cyber threats across ...

controls, native utilities and investigative artefacts. Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms ...

controls, native utilities and investigative artefacts. Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms ...

Minimum 1 years proven experience in a Tier 1 Cyber Security SOC Support Analyst role Working knowledge of Microsoft Defender XDR and Microsoft Sentinel SIEM technologies Working knowledge of Microsoft Defender suite including Endpoint Detection and Response Understanding of key Microsoft 365 Cloud Technologies from a threat landscape perspective Cyber ...

Minimum 1 years proven experience in a Tier 1 Cyber Security SOC Support Analyst role Working knowledge of Microsoft Defender XDR and Microsoft Sentinel SIEM technologies Working knowledge of Microsoft Defender suite including Endpoint Detection and Response Understanding of key Microsoft 365 Cloud Technologies from a threat landscape perspective Cyber ...

delivery What I'm looking for: * Knowledge of Security Operations Centre processes and day-to-day cyber monitoring * Working knowledge of typical SOC toolsets - SIEM, EDR, Vulnerability Management and Email Security gateway tools * Good technical knowledge of fundamental cyber security concepts * Strong troubleshooting and analytical skills * The ability to interpret ...