Newbury, England, United Kingdom Hybrid / WFH Options
Entrust (Europe) Limited
to operate independently as well as within a team. Experience in working in secure environments. General understanding of networking principles, including TCP/IP, routing, firewalls, etc. Experience with SIEM solutions (Splunk). Basic programming experience (Java, C#). Experience with automation tools, such as Ansible or Terraform. #LI-NR1 At Entrust, we don’t just offer jobs – we offer More ❯
Gloucester, England, United Kingdom Hybrid / WFH Options
55 Exec Search
continuous learning. Client Relationship Management: Act as a point of contact, managing ongoing communications and ensuring technical needs are met Threat Detection & Analysis: Triage and analyse alerts across multiple SIEM platforms (e.g., Microsoft Sentinel, custom ELK stacks). Log & Threat Intelligence Analysis: Perform detailed log analysis and threat intelligence research to uncover root causes and bolster security defences. Technical Reporting More ❯
City of London, London, United Kingdom Hybrid / WFH Options
55 Exec Search
continuous learning. Client Relationship Management: Act as a point of contact, managing ongoing communications and ensuring technical needs are met Threat Detection & Analysis: Triage and analyse alerts across multiple SIEM platforms (e.g., Microsoft Sentinel, custom ELK stacks). Log & Threat Intelligence Analysis: Perform detailed log analysis and threat intelligence research to uncover root causes and bolster security defences. Technical Reporting More ❯
continuous learning. Client Relationship Management: Act as a point of contact, managing ongoing communications and ensuring technical needs are met Threat Detection & Analysis: Triage and analyse alerts across multiple SIEM platforms (e.g., Microsoft Sentinel, custom ELK stacks). Log & Threat Intelligence Analysis: Perform detailed log analysis and threat intelligence research to uncover root causes and bolster security defences. Technical Reporting More ❯
Coalville, England, United Kingdom Hybrid / WFH Options
ZipRecruiter
CCNA or CCNP certification RADIUS experience: Steel-Belted RADIUS, FreeRADIUS, or nuRADIUS Basic knowledge of MS SQL database management Experience with security appliances, filtering solutions, RSA authentication, and DLP SIEM solution exposure What Will Make You Shine at Mobius: Strong multitasking and workload management skills Excellent communication skills, especially in customer relations Analytical and problem-solving skills with a methodical More ❯
Burton Upon Trent, England, United Kingdom Hybrid / WFH Options
PHD Communications
the Role · A degree level education and/or Microsoft or other relevant certifications · Azure & Office 365 certifications Desirable for the Role · ISO 27001 Knowledge/Awareness · Experienced with SIEM · API usage · Scripting – PowerShell, Python etc. · Microsoft Volume Licensing · Microsoft Multifactor Authentication · SFTP Systems · SharePoint PHD Communications is a progressive growing print, mail & electronic deliverer, and archiver of Transactional Critical More ❯
Welwyn Garden City, England, United Kingdom Hybrid / WFH Options
PayPoint plc
and Storage Spaces Direct HPE Hardware Design of Highly Available Systems Experience in - Delivering projects and solutions from inception to completion Any experience with the following software products: Rubrik SIEM Solarwinds Zabbix Grafana Azure DevOp’s Jenkins What can we do for you? The majority of this role will be remote(Hybrid) but will require some travel to our bright More ❯
Coalville, England, United Kingdom Hybrid / WFH Options
Mobius Networks Limited
RADIUS: Experience with Steel-Belted RADIUS, FreeRADIUS, or nuRADIUS Database Management: Basic knowledge of MS SQL Security Appliances: Experience with filtering solutions, RSA authentication, and Data Leakage Prevention (DLP) SIEM solution exposure What Will Make You Shine at Mobius Strong multitasking with capability to manage and prioritise workloads effectively and efficiently. Excellent communication skills, especially in customer relations when designing More ❯
leading response efforts, and helping shape how we defend against the next wave of cyber threats. What You’ll Be Doing Monitor and manage a suite of security tools (SIEM, IDS/IPS, DLP, and others) to detect and respond to threats in real-time. Triage, investigate and escalate incidents with sound judgement — this isn’t checkbox security work. Dive … re not new to this. You’ve been in the trenches and know what it takes to stay ahead of threat actors. Ideally, you bring: Hands-on experience with SIEM platforms , especially Splunk. Strong familiarity with MITRE ATT&CK , intrusion detection/prevention systems, and malware behaviour. Confidence in network traffic analysis (PCAP, NetFlow) and endpoint forensics. The ability to More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Iceberg
leading response efforts, and helping shape how we defend against the next wave of cyber threats. What You’ll Be Doing Monitor and manage a suite of security tools (SIEM, IDS/IPS, DLP, and others) to detect and respond to threats in real-time. Triage, investigate and escalate incidents with sound judgement — this isn’t checkbox security work. Dive … re not new to this. You’ve been in the trenches and know what it takes to stay ahead of threat actors. Ideally, you bring: Hands-on experience with SIEM platforms , especially Splunk. Strong familiarity with MITRE ATT&CK , intrusion detection/prevention systems, and malware behaviour. Confidence in network traffic analysis (PCAP, NetFlow) and endpoint forensics. The ability to More ❯
London, England, United Kingdom Hybrid / WFH Options
Spotify
compliance teams and other collaborators to make sure our incident processes meet all compliance and regulatory requirements while staying lean and adaptable. You will use security technologies (e.g. SOAR, SIEM), communication platforms and our own automation tools to accelerate response, and ensure that other responders know how to best use these tools You will build new automation and response capabilities More ❯
London, England, United Kingdom Hybrid / WFH Options
Rockwell Automation
will report to the Global engineering Manager, Contract Capabilities, and will be fully remote, working anywhere in Poland, Spain, France, UK, Ireland and Netherlands. Your Responsibilities Design, implement, and test SIEMand SOAR solutions tailored for OT environments, considering the unique challenges and protocols involved. Integrate various OT data sources (e.g., IDS, EDR, control system logs, network traffic from industrial … protocols) into the SIEM platform. Develop and maintain custom parsers, normalizers, and correlation rules to effectively analyze OT-specific logs and events within the SIEM. Optimize and manage SIEM for OT environments – Configure, tune, and maintain the SIEM platform to ensure high-performance security monitoring with actionable insights. Enhance security detection and integration – Collaborate with OT and IT security teams … Alto Cortex XSOAR). Industrial systems & protocols – Understanding of OT protocols, industrial control systems, and logging mechanisms. Technical skills & automation – Proficiency in parsing log formats, scripting languages (Python, PowerShell), andSIEM rule development. Security frameworks & threat intelligence – Knowledge of OT security standards (NIST SP 800-82, IEC 62443) and threat intelligence platforms. Problem-solving & collaboration - troubleshooting abilities, and effective collaboration More ❯
Southampton, Hampshire, South East, United Kingdom Hybrid / WFH Options
Department For Transport
to potential threats. The SOC Analyst plays a critical role in supporting the SOC by providing essential day-to-day support. Top Responsibilities Monitoring securityinformationandeventmanagement (SIEM) systems for suspicious activity Analysing and investigating security alerts to determine their legitimacy and potential impact Documenting security incidents according to established procedures Escalating high-priority or complex incidents to … About you To be successful in this role you will need to have the following experience: Knowledge of security systems including anti-virus applications, content filtering, firewalls, authentication systems, SIEM, EDR, intrusion detection and notification systems Strong critical thinking skills and ability to solve complex problems, coupled with excellent written and verbal communication skills, and the ability to work effectively More ❯
London, England, United Kingdom Hybrid / WFH Options
State Street
with financial security regulations and standards, such as PCI DSS, FIPS 140-2/3, and NIST guidelines. Experience with IoT device securityand embedded encryption techniques. Experience with SIEM tools for key access monitoring. Security certifications such as CISM, CISSP, CCSP, and AWS Security Specialty. Experience with post-quantum cryptography (PQC) readiness and emerging cryptographic frameworks. Experience with JIRA … with financial security regulations and standards, such as PCI DSS, FIPS 140-2/3, and NIST guidelines. Experience with IoT device securityand embedded encryption techniques. Experience with SIEM tools for key access monitoring. Security certifications such as CISM, CISSP, CCSP, and AWS Security Specialty. Experience with post-quantum cryptography (PQC) readiness and emerging cryptographic frameworks. Experience with JIRA More ❯
Northampton, Northamptonshire, United Kingdom Hybrid / WFH Options
Schools Choice
the informationsecurity team and working closely with the Technology, Digital and Data management team. Ensuring the organisation is focused with adequate levels of patching, firewall configuration reviews andSIEM alerting. Hold our partners/suppliers to account for spend, performance and behaviour, including diversity within their teams. Maintain and input to the risk register in the technology service, documenting More ❯
Plymouth, Devon, United Kingdom Hybrid / WFH Options
Thales Group
security solutions tailored to project needs. Your responsibilities include: Advising on high-level security architecture and contributing to design processes, including risk assessments Consulting on security component architectures (e.g., SIEM, IAM, gateways) Evaluating architectures against policies and standards (NIST, ISO, JSP) Justifying architectural decisions Coordinating across multidisciplinary teams Presenting solutions to stakeholders and technical teams Security-related tasks involve: Producing More ❯
London, England, United Kingdom Hybrid / WFH Options
Jobgether
years of experience in security engineering, including operations, blue team, DevOps, and architecture Strong knowledge of incident response, threat patterns, and mitigation strategies Hands-on experience with security tools: SIEM, IDS, DLP, MFA, vulnerability scanners, WAFs Proficient in AWS security best practices and Infrastructure as Code (e.g., Terraform, Ansible) Deep understanding of securing Windows, macOS, Linux, and virtualized environments Experience More ❯
identifying areas for enhancement and implementing changes. Collaborate with compliance teams to ensure incident processes meet all regulatory requirements while remaining lean and adaptable. Utilize security technologies (e.g., SOAR, SIEM), communication platforms, and automation tools to accelerate response and train responders on their use. Develop automation and response capabilities to speed up investigation and response, leveraging our defender's advantage. More ❯
as you go. The Role You'll own and optimise enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and … engineering standards What's needed? Experience building and integrating complex Microsoft Sentinel at SMC and enterprise Understanding of security telemetry across identity, endpoint, cloud, and network layers Experience in SIEM content development, including KQL, analytics rules, and custom data connectors Scripting and engineering skills – Python, PowerShell, APIs, Function Apps A background in cyber threat detection, incident response or DFIR is More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
AWD online
/Network Engineer who has experience working in cyber security, system engineering, or a similar role, with hands-on knowledge of security tools such as anti-malware, content filtering, SIEMand threat detection solutions is required to join our team at a well-established charity. SALARY: £45,000 - £48,000 per annum + Excellent Benefits BENEFITS: 26 Days Holiday plus …/Network Engineer who has experience working in cyber security, system engineering, or a similar role, with hands-on knowledge of security tools such as anti-malware, content filtering, SIEMand threat detection solutions. Working as the Cyber Security Engineer/Network Engineer which the organisation calls a Security Engineer, you'll be at the frontline of the cyber defence … of working in a cyber security, system engineering or similar role Hands-on experience building, configuring and managing technical solutions, ideally security tools such as anti-malware, content filtering, SIEMand threat detection solutions In-depth understanding of Windows OS and general knowledge of Linux and MacOS Experience working with technology suppliers and outsourced services Experience collating and interpreting alerts More ❯