176 to 200 of 299 Remote/Hybrid SIEM Jobs

framework in a hybrid, England-based setup. The role requires a degree in Cyber Security/IT/CS or equivalent experience, familiarity with SIEM tools, and strong communication skills to collaborate with technical and non-technical #J-18808-Ljbffr ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

meet business, compliance, and risk mitigation requirements, ensuring controls are effective, measurable, and operationally sustainable. Implement and maintain detection and response capabilities through SIEM integration with security controls and IT systems, with a focus on reducing time-to-detect and time-to-remediate through improved pre-incident engineering. Participation … 24x7 on-call support rota, responding to SIEM health alerts and restoring log ingestion where required. Manage use cases, perform data enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

cloud security best practices, including identity, monitoring, threat detection and data protection. Understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk. Strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls. Knowledge … security and compliance requirements. Building and maintaining security monitoring, alerting and automated response capabilities across cloud environments. Integrating cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk. Leveraging AWS security services and promoting security best practices across engineering and development teams. Supporting incident response investigations ...

client environments. CyberArk will be your deepest area of expertise, complemented by hands-on experience across the wider modern security stack, including Zscaler, EDR, SIEM and vulnerability management. The Opportunity As Senior Cyber Security Engineer, you’ll take ownership of CyberArk and privileged access management solutions throughout their lifecycle—from … access models. Establishing privileged-access standards and providing evidence for client audits, including ISO 27001 and Cyber Essentials Plus. Deploying, configuring and maintaining EDR, SIEM integrations, vulnerability-scanning and email-security solutions. Supporting Zscaler ZIA and ZPA deployments, configuration and policy development. Monitoring the health of the security-tooling estate ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

organisation. This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities … SLAs/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme ...

Good knowledge and awareness of global Information Security Standards including ISO27002, CIS, NCSE CAF, NIST CSF Advisor in advanced cybersecurity services including SSE, SASE, SIEM, MDR/EDR Experience working with security frameworks and/or market leading solutions (preferred) Experience in recommending and designing solutions to meet compliance guidelines ...

Security Operations Centre and advance our managed security services. This hands-on role designs, develops and maintains security automation workflows, builds integrations with SIEM, SOAR, EDR and cloud platforms, and collaborates with SOC Analysts and service owners to automate investigations and improve customer outcomes. Hybrid working is supported. #J ...

workshops, design outcomes-based solutions, deliver technical demos, and support proposals. The role requires strong incident response knowledge and experience with Defender/Sentinel, SIEM/XDR/EDR, and effective #J-18808-Ljbffr ...

role focuses on incident response, tool health, and triaging requests, with on-call coverage as needed. You will handle ITSM incidents, maintain security tooling (SIEM, IDPS, GVM, malware protection), and learn to tune policies while delivering reliable security operations in a dynamic environment. #J-18808-Ljbffr ...

and improve a dedicated SOC protecting client networks in Azure and AWS. You will work in a 24/7 shift-based environment, leveraging SIEM tools to detect and investigate security incidents, and collaborate with multiple teams. The role requires flexibility for DV/SC readiness and hybrid working where ...

with Azure infrastructure (AWS experience highly desirable).Expertise in cloud architecture, IAM, networking, security, and monitoring. Solid PowerShell scripting and automation skills. Experience with SIEM, SCOM, and enterprise troubleshooting tools. Knowledge of hybrid infrastructure and hyperconverged environments is advantageous. Cloud certifications are desirable but not essential. ...

contract management & commercially astute Strong relationship builder and stakeholder management ITIL & ISO27001 and governance such as NIS2 Azure Hybrid environments, Firewalls, Antivirus, BitLocker and SIEM solutions, MFA solutions and configurations plus Zero Trust Network Architectures. Salary: To £110,000 + Car allowance + bonus 20% + excellent benefits Location : Bristol ...

and critically evaluate them. Fluency across the enterprise stack the telemetry describes: cloud (Azure especially), infrastructure, networking, identity, and application architectures Experience integrating with SIEM and ITSM ecosystems - ideally Microsoft Sentinel and ServiceNow - including CMDB-driven service modelling. Infrastructure-as-code and pipeline automation (Terraform, CI/CD) for platform ...

enjoys building new business. Ability to thrive in a fast-growing, high-velocity startup environment. Nice to have Experience selling AI, SecOps, SOAR, SIEM, XDR, or security operations platforms. Experience working with enterprise customers across the UK market. Experience partnering with MSSPs, channel partners, or strategic alliances. At Torq ...

. Integrate CyberArk with Active Directory, LDAP, SSO, and MFA . Troubleshoot CyberArk authentication, access, password, and connectivity issues. Support integration of CyberArk with SIEM and security monitoring tools . Help identify and resolve privileged-access security issues. Support CyberArk upgrades, patches, and configuration changes. Automate CyberArk tasks using PowerShell … Sentry certification . Experience with CyberArk Conjur/Secrets Management . Experience with Azure or AWS . Experience with Splunk, Microsoft Sentinel, or other SIEM tools . Experience with PowerShell, Python, or REST APIs . Experience with CyberArk upgrades and migrations. Knowledge of security standards and compliance requirements. ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. … Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage ...

incident reviews and ensure improvements are implemented and follow-upscompleted. Support incident metrics (MTTD, MTTR, recurrence, etc.)SOC Tooling & Platform Operations Operate and improve SIEM, EDR, email security, case management, and vulnerabilitytools. Monitor health, coverage, data quality, and integrations. Troubleshoot ingestion, parsing, API, and configuration issues. Build and maintain integrations … 7+ years in SOC, incident response, detection engineering, or security engineering. Experience leading complex security incidents end-to-end. Strong hands-on experience with SIEM, EDR, and security tooling. Experience building and tuning detections and queries. Experience with log onboarding, telemetry pipelines, and data quality issues. Strong vulnerability management and ...

Vodafone Group Plc is seeking a Level 3 Security Analyst in Newbury to join its Cyber Defence Operations Center of Excellence. This role is pivotal in protecting millions of customers from cyber threats through advanced ...

Viasat is seeking a RTO Security Analyst to join the frontline 24x7 team monitoring networks for suspicious activity and triaging security alerts. You will handle incidents across online and on-prem infrastructures, determine attack use ...