26 to 50 of 107 Remote/Hybrid SIEM Jobs

leading and managing cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem ...

solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication skills with the ability to adapt information delivery based on the target audience. Ability to work ...

ability to lead investigations, co-ordinate containment and recovery activities, and remain effective under pressure. Broad technical expertise across Microsoft Azure and Entra ID, SIEM and detection engineering, endpoint and email security, identity and access management, vulnerability management, network security and SASE technologies. Experience improving operational security, including developing detection ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human ...

processes, malware identification and analysisBe familiar with a basic understanding of legalities surrounding electronic discovery and analysisUnderstanding of regulatory stipulations regarding security incidentsExperience with SIEM technologies (i.e. Splunk, Sentinel)Understanding of both Windows and Unix/Linux based operating systemsIdeally, you'll also Candidates must hold or be willing ...

across a broad range of enterprise and defence networking technologies, including : Cisco routing, switching, and Unified Communications. Network security, firewalls, IDS/IPS technologies. SIEM and security monitoring platforms. Endpoint management and data protection solutions. Microsoft Exchange and Windows Server environments. Active Directory, SCCM. Linux administration. WAN technologies and secure ...

across a broad range of enterprise and defence networking technologies, including : Cisco routing, switching, and Unified Communications. Network security, firewalls, IDS/IPS technologies. SIEM and security monitoring platforms. Endpoint management and data protection solutions. Microsoft Exchange and Windows Server environments. Active Directory, SCCM. Linux administration. WAN technologies and secure ...

across a broad range of enterprise and defence networking technologies, including : Cisco routing, switching, and Unified Communications. Network security, firewalls, IDS/IPS technologies. SIEM and security monitoring platforms. Endpoint management and data protection solutions. Microsoft Exchange and Windows Server environments. Active Directory, SCCM. Linux administration. WAN technologies and secure ...

capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics rules, workbooks, and playbooks. Develop and refine custom queries … advanced threat hunting, incident investigation, and reporting. Optimize SIEM performance, cost, and data retention policies Identify new log sources work closely with infrastructure teams Identify, onboard, and configure critical security log sources with a focus on critical infrastructure services such as Active Directory (Domain Controllers, ADFS), network devices, firewalls, servers ...

escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. Work closely with SOC, Threat Hunting, CTI, Insider Threat, and ...

and/or CyberArk - identity and privileged access management would be highly desirable skills. * Experience with Rapid7, InsightVM or InsightIDR for vulnerability management and SIEM would also be highly desirable. * Experience of responding to security DDQs and maintaining security evidence. * Experience supporting ISO 27001, Cyber Essentials and Cyber Essentials Plus. ...

Code, automation, scripting and CI/CD practices desirable with experience of Terraform preferred Security tooling and practices including patch management, vulnerability management, SIEM, EDR, PAM and micro-segmentation desirable. ITIL service management and PRINCE2, Agile, Scrum or equivalent project delivery experience beneficial. How you'll work Technical expertise ...

need a candidate with: Proven experience leading complex cyber security projects and programmes, with delivery experience in areas such as security monitoring/SIEM, identity and access management, or security platform implementation and migration. Sufficient technical understanding to translate cyber security requirements into delivery activities, challenge assumptions and assess delivery ...

identity, network or cloud environments. Practical digital forensics knowledge, particularly Windows forensics, evidence collection and analysis. Experience investigating incidents using EDR/XDR and SIEM platforms. Understanding of incident containment, eradication and recovery. Strong communication skills and confidence working with customers. Eligibility for UK SC clearance. Technologies: Velociraptor, KAPE, Timesketch ...

including: Zscaler Digital Experience (ZDX) Zscaler Deception ZPA Privileged Remote Access (PRA) Experience with AWS cloud platform Experience integrating cloud security with SOC/SIEM platforms Understanding of Telecoms Security Act (TSA) requirements and implementation patterns Experience working in regulated environments such as telecommunications or critical infrastructure Exposure to DevSecOps ...

and technical audiences. Technical & Industry Knowledge: Understanding of cybersecurity frameworks and compliance (ISO 27001, NIST, GDPR). Familiarity with threat detection, EDR/XDR, SIEM, email security, and identity management solutions. Awareness of current threat landscape and MSSP service models (SOC, vulnerability management, incident response). ...

responsible AI standards, guardrails or governance, including Generative AI or Agentic AI, within a regulated environment Hands-on experience with security tooling such as SIEM, firewalls and IAM solutions Experience with regulatory compliance such as GDPR or PCI-DSS within financial services Familiarity with programming languages such as Python, Java ...

mode as part of the on-call crisis team, executing technical host forensic analysis and reverse-engineering. Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases. Design, implement, and coordinate robust incident response processes for SOC Level ...

crisis mode as part of the on-call crisis team, executing technical host forensic analysis and reverse-engineering.Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.Design, implement, and coordinate robust incident response processes for SOC Level 1 and ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...

and data. Work collaboratively with engineering and security teams to embed security best practices throughout technology environments. Develop automation to improve security operations, including SIEM log ingestion, routing and security tooling. Support firewall and network security management across cloud, hybrid and on-premises environments. Develop, maintain and enhance security policies …/CD pipelines, virtualisation and Infrastructure as Code (IaC). Strong Linux or WSL experience, with software development or scripting capability. Practical experience with SIEM and log management platforms, including technologies such as: Splunk Microsoft Sentinel Cribl ELK Experience with AWS, Microsoft Azure and/or Google Cloud Platform ...