201 to 225 of 439 Remote/Hybrid SIEM Jobs

define remediation strategies. Collaborate with cross-functional teams to strengthen security systems and share knowledge. Implement vulnerability scans, onboard log sources to SOC/SIEM, and validate alerts. Ensure adherence to CIS Benchmarks, ISO27001, and NCSC Cyber Essentials. Required Skills & Qualifications: 5-6 years of current hands-on experience ...

network security, encryption, authentication, and access control mechanisms.Experience with security technologies such as firewalls, intrusion detection/prevention systems, security information and event management (SIEM) systems, and vulnerability assessment tools, and their configuration options.Familiarity with cloud security principles and best practices, including securing cloud-based infrastructure and services (AWS, Azure ...

vendor/third-party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

Service Manager System Center Operations Manager Trelix Endpoint Protect/Trend Micro Apex One Security/Nextcloud/Cireson Asset Management/ManageEngine Log360 SIEM/IRIS CACADE/Veeam Backup and Restore/Solutions Factory Symphony Desirable Qualifications: TOGAF - The Open Group Architecture Framework CISSP - Certified Information Systems Security ...

Experience communicating technical findings and recommendations to senior stakeholders. Strong knowledge of incident response lifecycle and cyber investigation methodologies. Experience analysing logs, EDR telemetry, SIEM data and forensic artefacts to evaluate root cause and impact. For a full list of responsibilities and criteria, please refer to the Candidate Pack. ...

Experience communicating technical findings and recommendations to senior stakeholders. Strong knowledge of incident response lifecycle and cyber investigation methodologies. Experience analysing logs, EDR telemetry, SIEM data and forensic artefacts to evaluate root cause and impact. For a full list of responsibilities and criteria, please refer to the Candidate Pack. ...

contract is based in Harlow with hybrid work (1 day onsite). Key duties include monitoring, triaging and investigating security incidents using IBM QRadar SIEM and Microsoft Defender, with knowledge of MITRE ATT&CK, NIST CSF and incident response lifecycle. #J-18808-Ljbffr ...

hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity ...

mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while maintaining operational excellence. Develop Infrastructure as Code (IaC) solutions … knowledge of CI/CD pipelines and DevSecOps practices. Strong understanding of cloud security controls, security frameworks, and compliance requirements. Hands-on experience with SIEM platforms and cloud security tooling. Experience with incident, problem, and change management processes. Working knowledge of Wiz Cloud and Wiz Defend security platforms. Strong containerisation ...

and hybrid environmentsArchitect endpoint protection, DLP and advanced threat protection solutionsDesign application security, API security and secure SDLC integrationArchitect Security Operations Centre (SOC) and SIEM capabilitiesLead security technology evaluation, selection and implementation programmesTechnical Leadership & GovernanceLead security technical teams and provide architectural mentoringEstablish security design standards, architecture patterns and governance processesDrive … solutionsStrong understanding of network security, micro-segmentation and secure access technologiesProficiency in cloud security across Azure, AWS or equivalent platformsKnowledge of security technologies including SIEM, EDR/XDR, DLP, CASB, ZTNA, WAF and firewallsUnderstanding of cryptography, encryption standards and secure communication protocolsFamiliarity with MOD security requirements, defence standards and accreditation ...

provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect … Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk ...

patterns, and provide recommendations to reduce risk and improve resilience.Security Platforms & Service ImprovementOwn the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities.Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency.Work with the Technical Architect to align … Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID.Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions.Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management.Ability to translate technical findings and cyber risk into clear business ...

continuous improvement of security operations, threat detection, and incident response functions. Key Responsibilities Security Monitoring & Incident Response Monitor and triage security alerts generated through SIEM and security tooling. Investigate and respond to cyber security incidents across cloud, endpoint, and network environments. Analyse security events to determine impact, severity, and appropriate … experience working within a Security Operations Centre (SOC) environment. Strong experience in security monitoring, alert triage, and incident investigation. Hands-on experience with: Splunk SIEM technologies Endpoint security tools Security monitoring platforms Experience developing and improving detection content and alert logic. Strong understanding of incident response processes and cyber security ...

with global IT teams to protect Medpace’s systems; Own the administration and reliability of key security platforms, including privileged access management, EDR, and SIEM; Coordinate platform upgrades and fixes proactively; Lead cross-functional security projects from planning through execution; Coordinate with stakeholders across departments to deliver security project results … Analysts and IT teams as needed; Improve and automate security operations by developing scripts, integrations, and workflows; Build security automation in cloud or SIEM environments; Integrate security into enterprise systems and processes; Work with Network, Cloud, and DevOps teams to embed security controls and best practices into infrastructure and software ...

ensure secure delivery across the programme. Experience Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and ...

understanding of; Networking (TCP/IP, firewalls, segmentation), Operating systems (Windows/Linux), Identity and access management concepts, Cloud Fundamentals. Exposure to security tooling (SIEM, IDS/IPS, EDR) Strong understanding of core security principles such as: Defence in depth, Least privilege, Zero trust concepts An understanding of designing and ...

and OT, with on-going threat detection, rapid response, and risk reduction. You will collaborate with IT/OT teams, maintain security platforms (SIEM, SOAR, EDR, and email security), and support audits and continuous improvement. A CTC clearance is required for eligibility. #J-18808-Ljbffr ...

modern attack techniques, including identity compromise, credential theft, lateral movement, cloud compromise, data exfiltration and ransomware/extortion. Experience with technologies such as SIEM, EDR/XDR, threat intelligence, forensic and incident response platforms. Excellent analytical and investigative capabilities. The ability to lead and influence highly technical teams without relying ...

networking integration (vSphere,vSAN, Aria Suite) Overlay/underlay network design concepts Automation of network configuration (Ansible, Terraform, APIs) Integration with security tooling (SIEM, SOC platforms) Cloud networking (AWS, Azure) and hybrid connectivity Experience working in secure or regulated environments This is not an exhaustive list, and we are keen ...

and developing net-new strategic partners. Proven experience carrying and exceeding revenue quotas. Strong understanding of MSSP business models, managed security services, MDR, XDR, SIEM, SOC, SASE, Endpoint, and broader cybersecurity solutions. Experience developing executive relationships and influencing senior decision-makers. Demonstrated ability to create and execute strategic business plans. ...

oConfiguration Manager oSystem Center Service Manager oSystem Center Operations Manager Trelix Endpoint Protect Trend Micro Apex One Security Nextcloud Cireson Asset Management ManageEngine Log360 SIEM IRIS CACADE Veeam Backup and Restore Solutions Factory Symphony Desirable Qualifications: Bachelor’s or Master’s degree in: Computer Science, Engineering, or a related field ...

will lead threat detection, incident response, and tooling automation while mentoring other analysts and driving improvements across our security posture. You will work with SIEM, EDR, and cloud security tools, analyze threats, and produce dashboards and executive-level reporting for stakeholders in a fast-moving, agile environment. #J-18808-Ljbffr ...

Engineer, etc.) ideally in cybersecurity or enterprise software. Strong understanding of the Security Operations Center (SOC) environment, tools, and workflows. Comfortable explaining and troubleshooting: SIEM and SOAR integrations Security alert workflows and incident investigation processes Technical proficiency in: Writing SQL queries to extract and analyze data Experience working with APIs ...

professional services experience Understanding of SOC operations and incident response (essential) Knowledge of Microsoft Defender and/or Microsoft Sentinel (essential) Experience with SIEM, XDR, EDR, SOAR or Threat Intelligence platforms Strong technical presentation skills Ability to engage both technical and business stakeholders What’s On Offer ...

hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with: Cyber security incident investigation and response Threat hunting and detection SIEM, security monitoring and log analysis Cloud or hybrid environments Modern attack techniques and adversary behaviour Security automation or scripting Threat modelling or adversary simulation Working ...