76 to 100 of 107 Remote/Hybrid SIEM Jobs

include: * Degree-level qualification in Information Technology, a related discipline, or equivalent professional experience * Advanced knowledge across at least three security technologies such as SIEM, EDR/XDR, CTEM, WAF/DDoS, Entra ID, IPS/IDS, PKI, SASE, AWS or Infrastructure as Code * Strong security data collection, analysis and … programming language including Python, PowerShell, SQL, Shell, Perl or Assembly * Experience analysing and resolving complex security issues * Hands-on experience with technologies such as SIEM, XDR, WAF, Windows/Linux, Firewalls, Web Proxies, Active Directory/Entra ID, Containers or Virtualisation Desirable skills for the Senior Infrastructure Specialist - Red Team ...

and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability … Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

automation, scripting and best practice. Ensure detections are clearly documented and operationally usable. What you’ll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding … SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/ ...

Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture: Architect … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

with internal teams, clients, government bodies, industry groups and intelligence-sharing communities while protecting sensitive sources and information.Operational integration and capability improvementIntegrate intelligence into SIEM, SOAR, TIP, threat hunting, detection engineering, incident response and vulnerability prioritisation workflows.Guide the use of MITRE ATT&CK, STIX/TAXII, the intelligence cycle, Diamond … threat actor analysis and intelligence reporting.Deep working knowledge of MITRE ATT&CK and platforms such as MISP, ThreatConnect, Anomali or equivalent; practical experience of SIEM, SOAR and security operations integration.Ability to analyse malicious infrastructure, IOCs, malware reporting and TTPs, and explain how intelligence should change detection, response, hunting, vulnerability ...

cyber security operations team, providing technical guidance, mentoring and support. Take ownership of security incidents, coordinating investigations, containment and recovery. Improve security monitoring, SIEM detections, threat hunting and incident response playbooks. Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management. Manage outsourced security … operations team. Strong technical expertise in security operations, incident response and detection engineering. Experience with cloud security, particularly Microsoft Azure and Entra ID, alongside SIEM and endpoint security technologies. Strong stakeholder management and communication skills, with the ability to explain technical risks to non-technical audiences. Relevant qualifications such ...

contract. People from a background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote … upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat ...

contract. People from a background working as a Cyber Security Engineer, SOC Engineer, SOC Analyst, Senior SOC Analyst, Cyber Security Analyst, Security Operations Engineer, SIEM Engineer, SIEM Analyst, Threat Detection Engineer, Security Infrastructure Engineer would be well suited to this position. Rate: £92.11 per hour Location: Stevenage Hybrid/Remote … upgrades, capability implementation, tool integration, data source on-boarding and investigation activity utilising a wide variety of security platforms including but not limited to; SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the in-scope UK networks. The SOC Threat ...

security capabilities, including: Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps) Microsoft Entra ID (P2), Conditional Access and identity protection Microsoft Sentinel (SIEM integration) Microsoft Purview Strong experience designing and implementing Microsoft Purview capabilities, including DLP, Information Protection, Insider Risk and eDiscovery Strong understanding of Zero Trust architecture principles, particularly … identity-driven security models Experience deploying and operating Defender and SIEM capabilities, integrated within a wider security ecosystem Experience conducting security design reviews and translating policy into practical controls Experience performing risk assessments aligned to recognised methodologies Strong understanding of cloud security concepts across IaaS, PaaS and SaaS, particularly within ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role … role in designing, optimising, and maintaining security telemetry pipelines while supporting SOC operations and detection engineering activities. You'll work with cloud-native technologies, SIEM platforms, and security data tooling to improve visibility, detection capability, and operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines ...

Around 2-3+ years of commercial cyber security experience Hands on experience within Microsoft security environments Experience with Microsoft Sentinel or other SIEM/SOC technologies Knowledge of XDR/EDR, vulnerability management and incident response Good understanding of Identity & Access Management, ideally including Entra … have a genuine say in how the organisation develops its cyber security capability. If you have experience across Microsoft security, Azure, Sentinel, SOC/SIEM or Identity & Access Management and are looking for the next step in your career, we would like to hear from you. Are you interested ...

automation, scripting and best practice. Ensure detections are clearly documented and operationally usable. What you’ll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding … SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/ ...

attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. ...

incident response activities from detection through to containment and remediation Conducting in-depth analysis of security alerts, events and threat intelligence Supporting and optimising SIEM use cases and detection engineering activities Performing threat hunting activities across enterprise environments Investigating suspicious activity across cloud, endpoint and network technologies Producing detailed incident … experience with Microsoft Sentinel Excellent Incident Response experience within enterprise environments Experience investigating advanced threats, malware, phishing and compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices ...

Glasgow with hybrid working. Main responsibilities include: Oversee and enhance monitoring of security alerts and events using advanced security information and event management (SIEM) tools Lead the analysis of security logs and alerts to identify potential security incidents Perform and supervise comprehensive analysis of security logs, network traffic, and data … Relevant Cyber Security and/or IT experience Experience in metric reporting and KPI/SLA management Experience with security technologies such as firewalls, SIEM, DLP and endpoint protection Experience working with Jira, Azure DevOps, ITSM tools such as Cherwell and ServiceNow and the MS Office suite Excellent communication skills ...

Assessment Papers, Risk Treatment Plans, Risk Business Cases, and Security Management Plans. Knowledge and experience with security architecture and Security Information and Event Management (SIEM) tools, such as Splunk, Defender, Sentinel, ELK, and Tenable Threat Modelling System solutions. Extensive understanding of cybersecurity threats, attack vectors, vulnerabilities, and security controls. Demonstrable ...

SIEM Security Engineer Contract - UK wide, with flexibility across multiple office sites, Hybrid Working (3 Days per week on site), Paying up to £558 Per Day, Inside IR35, Contract until March 2027 Your new role We are looking for an experienced SIEM Security Engineer to join a major long-term … security programme, supporting the continued development and maturity of an established SIEM platform. This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability. Key Responsibilities: Onboard and normalise new security log/data sources Develop ...

SIEM Security Engineer Contract - UK wide, with flexibility across multiple office sites, Hybrid Working (3 Days per week on site), Paying up to £558 Per Day, Inside IR35, Contract until March 2027 Your new role We are looking for an experienced SIEM Security Engineer to join a major long-term … security programme, supporting the continued development and maturity of an established SIEM platform. This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability. Key Responsibilities: Onboard and normalise new security log/data sources Develop ...

and identifying areas for improvement. Producing DLP reports, matrices and security metrics that provide a clear picture of controls, risks and gaps. Working with SIEM and EDR technologies to investigate threats and improve detection. Reviewing vulnerabilities, prioritising risks and working with technical teams to make sure they're addressed. Supporting … that, you'll have a solid background in information or cyber security and experience across some of the following: Security Operations/incident response SIEM and EDR Identity and Access Management MFA and Conditional Access Vulnerability management Security controls and technical assurance Security reporting and metrics NIST ...

products with demonstrated IR capability in one or more of the following: Microsoft Defender, CrowdStrike, Sentinel One, Trend Vison One. Good understanding of SIEM tools with knowledge of one of the following: Splunk, Google SecOps or Sentinel. Broad technical knowledge of networks, operating systems, applications, identity and cloud environments … activities based on incident learnings, intelligence and emerging threats. Support purple team exercises and adversary simulations to validate detection and response capabilities. Use of SIEM-less technologies to analyse data and find security incident. Understanding and experience of automation tools and using agentic capabilities to improve analysis, triage, containment and ...

Hybrid) We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection. What you'll be doing Design, build and optimise advanced SIEM detection rules and correlation logic Translate threat intelligence, TTPs and IOCs … complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling Help develop emerging AI/agentic security use cases What we're looking for Strong hands ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … remote, however clients visits and occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell ...

security, engineering, architecture, technology and client workstreams to maintain momentum, resolve delivery blockers and oversee initiatives across areas including IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust Own project governance, including RAID management, status reporting, decision tracking, change control and escalation, maintaining appropriate human review … including planning, RAID management, governance, financial tracking, resource coordination and stakeholder reporting Good understanding of security domains such as IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management, alongside working knowledge of frameworks such as NIST, ISO 27001 and OWASP Experience coordinating delivery across cloud, on-premise ...