151 to 175 of 299 Remote/Hybrid SIEM Jobs

Senior SOC Analyst to lead threat detection, incident response and security monitoring in a fast-paced security operations center. You will analyse alerts from SIEM/EDR, mentor junior staff, drive automation, and improve SOC tooling; requires 5+ years in information security, strong scripting, knowledge of MITRE/ ...

and escalation of security incidents outside of business hours, ensuring appropriate handover, documentation, and continuity of incident management.* Tune and optimize security tools, including SIEM and endpoint protection platforms, to improve alert fidelity and reduce false positives.* Collaborate with internal technology teams to ensure appropriate logging, monitoring, and alerting capabilities … security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, etc.).* Hands-on experience with security technologies including Microsoft Defender, Zscaler, SIEM platforms (e.g. Google SecOps), and identity platforms (e.g. Azure/Entra, Okta).Hands on experience in incident response, threat detection, and vulnerability management within an enterprise ...

made it operational, feeding hunts, detections and decisions. A track record of leading globally distributed technical teams across time zones. Hands-on experience with SIEM/Data Lakes, implementing and supporting. Experience with DDoS mitigation. Experience with threat hunting and purple teaming. OUR OFFER A collaborative environment with colleagues from ...

Proactive individual, able to handle multiple topics/incidents in parallel Essential Skills Good knowledge of multiple SOC tooling including IDPS/Firewalls/SIEM/Splunk/Email & Web Protection etc. Experience of implementing and fault finding Firewall technologies including Cisco ASR/Palo Alto/Fortinet Excellent understanding ...

Proactive individual, able to handle multiple topics/incidents in parallel. Essential Skills: Good knowledge of multiple SOC tooling including IDPS/Firewalls/SIEM/Splunk/Email & Web Protection etc. Experience of implementing and fault finding Firewall technologies including Cisco ASR/Palo Alto/Fortinet Excellent understanding ...

more of the following areas would be highly advantageous: Software Defined Networking (SDN) Network automation Virtualisation technologies Data centre networking Next-generation firewalls SIEM and cyber security platforms Threat intelligence solutions Identity and Access Management (IAM) Operational technology and industrial control systems Experience working within rail, transportation, utilities, defence ...

CompTIA Security+, Microsoft SC-200, or equivalent. Experience with ITSM or PSA ticketing platforms, such as ConnectWise, Autotask or Halo. Familiarity with DLP, SIEM or endpoint telemetry tooling. Exposure to compliance frameworks such as ISO 27001 or Cyber Essentials Plus. My client is not able to offer sponsorship ...

and tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background will ...

ability to investigate unfamiliar problems, learn quickly and manage your own workload without needing constant direction. Experience with AWS, VMware or Hyper-V, automation, SIEM tooling, MDM/EDR platforms or security and compliance environments would all be useful additions. There is a light out-of-hours requirement, typically ...

ability to investigate unfamiliar problems, learn quickly and manage your own workload without needing constant direction. Experience with AWS, VMware or Hyper-V, automation, SIEM tooling, MDM/EDR platforms or security and compliance environments would all be useful additions. There is a light out-of-hours requirement, typically ...

help our members stay secure and resilient. Our Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct threat … incidents. Leading and coordinating responses to major cyber incidents, ensuring swift containment, investigation and recovery. Monitoring customer and internal environments for suspicious activity using SIEM, EDR, DDoS and network security technologies. Conducting threat hunting activities to identify previously undetected threats. Supporting the continuous improvement of incident response processes, playbooks, metrics ...

help our members stay secure and resilient. Our Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct threat … incidents. Leading and coordinating responses to major cyber incidents, ensuring swift containment, investigation and recovery. Monitoring customer and internal environments for suspicious activity using SIEM, EDR, DDoS and network security technologies. Conducting threat hunting activities to identify previously undetected threats. Supporting the continuous improvement of incident response processes, playbooks, metrics ...

help our members stay secure and resilient. Our Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct threat … incidents. Leading and coordinating responses to major cyber incidents, ensuring swift containment, investigation and recovery. Monitoring customer and internal environments for suspicious activity using SIEM, EDR, DDoS and network security technologies. Conducting threat hunting activities to identify previously undetected threats. Supporting the continuous improvement of incident response processes, playbooks, metrics ...

that automate alert triage, enrichment, containment and response. Identify repetitive analyst workflows and automate them using APIs, scripting and orchestration platforms. Build integrations across SIEM, EDR, CNAPP, vulnerability management and ticketing systems. Help introduce AI-assisted workflows that improve investigation quality and analyst productivity. Security Operations & Incident ResponseMonitor and investigate … improve the detection stackWhat You'll Bring: Required3+ years of experience in Security Operations, Detection Engineering or Security Engineering. Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or QRadar. Experience building and tuning detection rules. Experience developing SOAR playbooks or security automation. Strong scripting ...

offers hybrid work in Greater Manchester and the opportunity to influence security strategy and automation. The ideal candidate will have hands-on experience with SIEM, EDR, IAM, WAF, and cloud security controls, plus scripting skills in PowerShell, #J-18808-Ljbffr ...

Researcher's threat models and failure mode library. Maintain awareness of how enterprises currently secure coding agents (or don't), what tools they use (SIEM, DLP, CSPM), and how Watcher fits into their existing stack. Understand which failure modes are the biggest problems for security buyers, and prioritize systematically what ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

digital forensics, crisis management, SOC operations and supporting tools Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

analysis, digital forensics, crisis management, SOC operations and supporting toolsStrong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous. Also, during your professional experience you will have gained experience in an OT/ ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

infrastructure, networks and cloud architecture AWS and hybrid/on-premise environments Microsoft Entra ID, Active Directory and Microsoft Intune Cybersecurity, EDR and SIEM platforms Information security, UK GDPR and regulatory compliance Business continuity and disaster recovery planning IT strategy, systems optimisation and application rationalisation Supplier management, contracts and technology ...

tailored response to a major incident. Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms."Nice To Have" Skills and Experience: BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer science), applicable ...

and protect critical business operations. This senior role requires extensive experience in cyber security operations, incident response and threat detection, with strong knowledge of SIEM/EDR and MITRE #J-18808-Ljbffr ...

iboss platform and multi-tenant console, so partners can support their own end customers directly. Support partners' technical integration questions — RMM/PSA tooling, SIEM, ticketing systems, and existing network stack. Build partner-facing enablement materials: technical FAQs, architecture reference diagrams, onboarding guides, and training/certification content, distinct from ...