51 to 75 of 107 Remote/Hybrid SIEM Jobs

such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and ...

within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/ ...

within a modern cloud-first environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/ ...

experience with security tools and technologies fit for a cloud environmentExperience working across a technology stack on difficult security challenges and initiativesExperience with SIEM platforms and the ability to extend their functionalityExperience with SOAR tools and automating manual security processesExperience in either AWS, GCP, or other large cloud platformExcellent written ...

environment. * Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such ...

sites: SonicWall firewalls, switching, VLANs, Wi-Fi and secure remote access Microsoft 365, Exchange Online, Entra ID and Active Directory Patching, vulnerability management, Wazuh SIEM and Cyber Essentials Plus Backup, disaster recovery and business continuity with Veeam, including regular restore and failover tests Mitel telephony and call recording ...

What You'll Be Doing Designing, implementing, and maintaining security controls across infrastructure, applications, and platforms. Supporting security monitoring and threat detection capabilities through SIEM technologies and log management. Automating security processes and tooling using scripting and infrastructure automation techniques. Managing and securing network infrastructure, firewalls, and hybrid cloud environments. … Cyber Security Engineer, Security Operations, or Infrastructure Security role. Strong understanding of networking, cloud security, platform engineering, and security fundamentals. Experience with SIEM technologies such as Splunk, Sentinel, ELK, Cribl, or similar. Knowledge of Azure, AWS, or GCP cloud environments. Scripting or programming experience using Python, PowerShell, or Bash. Exposure ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology ...

perform effectively in high-pressure situations Desirable ITIL certification ISO 22301 and/or ISO 27001 knowledge Experience with Cisco, VMware, ServiceNow, Veeam, Fortinet, SIEM and vulnerability management tools You will play a key role in protecting critical business services, driving operational resilience and leading responses to incidents that have ...

years in Cybersecurity Operations, Insider Threat, IR, or Security Monitoring Insider Threat Program implementation & operations DLP controls & policy management Incident Response & Security Investigations UEBA, SIEM, EDR, IAM/PAM Security monitoring, threat detection & investigative workflows Project management, stakeholder engagement & compliance Strong English communication Plus: Spanish fluency ...

needs, maximising adoption and risk reduction. Key Accountabilities and Responsibilities Own the end-to-end lifecycle of security products and services (e.g., IAM, EDR, SIEM, cloud security). Define and maintain the product vision, roadmap, and backlog Ensure delivery of measurable outcomes, including risk reduction, control coverage and user adoption. ...

Alto firewalls AWS and/or Azure Windows/Linux servers VMware ESXi/vSAN Load balancing and network monitoring Defender/Sentinel/SIEM HLD/LLD documentation ITIL, incident/change/problem management About You You'll be a proactive, self-motivated Network Engineer with: Strong troubleshooting ...

and enhance cyber security controls across the IT infrastructure. Monitor, investigate and respond to security incidents and threats. Support the implementation and management of SIEM, endpoint security and monitoring solutions. Conduct vulnerability assessments and coordinate remediation activities. Implement and maintain Microsoft security technologies including Entra ID, Defender and Purview. Develop … including: Microsoft 365 Security Microsoft Entra ID Microsoft Defender Microsoft Purview Intune Azure Security Experience with incident response, threat detection and remediation. Knowledge of SIEM technologies and security monitoring. Vulnerability management experience and familiarity with related tooling. Understanding of security frameworks and standards such as NIST, ISO 27001, Cyber Essentials ...

means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Why consider joining our Digital & Data community? Join our Digital & Data team and work alongside cyber … their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures ...

minimise risk and improve security capabilities. The Role Investigate and respond to cyber security incidents across enterprise environments. Monitor and triage alerts from SIEM, EDR/XDR, cloud, identity, endpoint and network security tools. Analyse malicious activity including phishing, ransomware, account compromise, insider threats and unauthorised access. Coordinate incident containment … ideally have: Experience working within a Security Operations Centre (SOC), Cyber Defence or Incident Response function. Strong hands-on experience with SIEM, EDR/XDR and enterprise security monitoring technologies. Knowledge of Windows, Linux, networking, cloud security and identity management. Experience investigating complex cyber incidents and communicating findings to both ...

guide throughout Work closely with the CISO, understanding their position, sharing observations, performing security review, and assisting with the overall strategy Provide skills across SIEM, EDR, and Vulnerability Management tools. Vendor agnostic but SentinelOne and/or Microsoft Security experience would be advantageous Infrastructure & Cyber Security Consultant Skills Previous experience ...

improvements across security operations while ensuring robust monitoring and incident response capabilities are maintained. Key Responsibilities Manage the day-to-day operation of the SIEM platform, including monitoring, administration, and optimisation. Develop, fine-tune, and maintain detection rules and use cases to improve threat visibility. Investigate security alerts and incidents … Experience Required Strong understanding of technical and network security principles. Proven ability to identify security weaknesses, vulnerabilities, and control gaps. Hands-on experience with SIEM technologies, including engineering and administration. Experience working with Google SecOps (Chronicle) would be highly advantageous. Knowledge of firewalls, IDS/IPS solutions, and Windows Security ...

investigation and triage through to containment, eradication and recovery. Strong technical investigation skills across endpoint, network and identity-related threats. Hands-on experience using SIEM and EDR tools to analyse alerts, correlate evidence and establish incident scope. Ability to identify root causes and translate findings into practical remediation recommendations. Clear ...

solving skills. Ability to work effectively with technical and non-technical stakeholders. Desirable Skills Experience working within secure or highly regulated environments. Knowledge of SIEM integrations and security monitoring solutions. Experience with enterprise integration patterns and best practices. Exposure to Oracle Cloud technologies and wider cloud-based integration architectures. ...

high-level and low-level designs, implementation procedures, runbooks, support documentation, control evidence and technical standards. Integrate PAM with Active Directory, identity-management workflows, SIEM, ITSM, cloud services, databases and applications, including the development and support of custom web connectors and third-party application connectors. Investigate platform incidents, failed rotations … connectors. Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load-balancing fundamentals. Integration with Microsoft Sentinel or another SIEM for privileged-access monitoring, alerting and audit evidence. Knowledge of Azure and hybrid-cloud privileged-access patterns; AWS or GCP experience is desirable. Scripting and ...

Advert Job Title: SIEM Security Engineer Location: Birmingham- Hybrid 3 days on site a week Contract Type: 5-Month Contract About the Role: We are looking for a skilled SIEM Security Engineer to design, develop, and maintain our SIEM data ingestion pipelines. In this role, you will leverage Elasticsearch and … threat detection, incident response, and overall security posture. Key Responsibilities: Data Ingestion & Enrichment: Build and manage Elasticsearch/Kafka pipelines; integrate threat intelligence feeds. SIEM Development: Partner with SecOps to design SIEM solutions; optimize rules, alerts, and dashboards for precise threat detection. Performance Tuning: Write highly efficient Elasticsearch queries and ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

organisational security awareness and resilience. What I'm Looking For Experience in a Cyber Security Engineer, Security Analyst or Information Security role. Knowledge of SIEM tools and security monitoring. Experience with vulnerability management and incident response. Understanding of Microsoft security technologies and Azure. Knowledge of security frameworks, policies and best … your experience and be in touch to discuss suitable opportunities and what you're looking for next. All applications will be treated confidentially. Skills: SIEM tools Security monitoring Vulnerability management Incident response Azure Microsoft Sentinel Benefits: Work From Home TLNT1 ...

work with ownership, influence and responsibility within a global environment. What You'll Be Doing ** Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. ** Managing more complex security incidents, coordinating investigations, containment and remediation with technical … cyber security role, ideally within security operations, incident response, threat detection or a similar technical security environment. ** Practical knowledge of security technologies including SIEM, firewalls, endpoint detection and response (EDR), DLP and vulnerability management tools. ** Experience investigating security incidents, analysing logs and identifying threats across complex IT environments. ** A good ...

include: * Degree-level qualification in Information Technology, a related discipline, or equivalent professional experience * Advanced knowledge across at least three security technologies such as SIEM, EDR/XDR, CTEM, WAF/DDoS, Entra ID, IPS/IDS, PKI, SASE, AWS or Infrastructure as Code * Strong security data collection, analysis and … programming language including Python, PowerShell, SQL, Shell, Perl or Assembly * Experience analysing and resolving complex security issues * Hands-on experience with technologies such as SIEM, XDR, WAF, Windows/Linux, Firewalls, Web Proxies, Active Directory/Entra ID, Containers or Virtualisation Desirable skills for the Senior Infrastructure Specialist - Red Team ...