176 to 200 of 234 SIEM Jobs

direction in all aspects of security operations. Develop and implement robust security strategies and policies to protect company assets and data. Configure and maintain SIEM tools to monitor and analyze security events across the organization. Collaborate with DEVOPS teams to ensure security best practices are integrated into the development and … improvement. Qualifications: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). Extensive hands-on experience configuring and managing SIEM tools (e.g., Splunk, ArcSight, QRadar). Proficiency in working within a DEVOPS environment, with strong knowledge of AWS services and security best practices. Proven experience more »

/7, dealing daily with over 200 million log events and providing support for over 5,000 network devices. We are specialists in SIEM, our services backed by our EDGE methodology built up through dozens of major deployments and hundreds of use cases with many of the UK’s largest … calls to support change requests and helping diagnose system issues. Key responsibilities • Monitor global IDS, Network Intruder, Firewall, DDoS detection and mitigation, availability and SIEM platforms looking for potential threats, vulnerabilities and indicators of compromise. • Provide Incident remediation and prevention documentation and recommendations to customers based on defined procedures and … Perform other duties as assigned. • Ability to work on a shift basis including weekends and evenings. Skills Theoretical knowledge of security toolsets such as SIEM, IDS, Vulnerability Management, Availability Monitoring and other threat detection technologies. · Pre-existing knowledge of common network protocols. · Pre-existing knowledge of Windows and Linux based more »

Analyst to build and work in their new Security Operations Centre function. You will be an analytical thinker with experience in implementing and maintaining SIEM solutions. This is a chance for an individual to be in ‘at the ground up’ at the start of the development of the SOC and … to-day activity. You will have hands on experience from within a Security Operations Centre and be able to advise on the best security SIEM tool to implement within the new SOC. Responsibilities: Develop, enhance and oversee security monitoring systems to detect and analyse potential security incidents. Conduct real-time … to the security infrastructure. Contribute to security awareness training programs for employees to promote a culture of cybersecurity vigilance. Required Skills: Full understanding of SIEM tools – Sentinel, IBM QRadar, FortiSIEM, Splunk, Logrhythm etc Ideally hands on experience with Sentinel and the MS Security stack Create and build Playbooks to deal more »

technical upskilling program, paid/sponsored certifications, leadership development training opportunities and tuition reimbursement programs. Leidos is looking for a Sr. SIEM (Security Information and Event Management) Engineer/Splunk Certified Admin to join a high performing agile team using the Scaled Agile Framework (SAFe) methodology to support a large … the various Splunk core components. Experience configuring and deploying data collection for a variety of operating systems and networking platforms. Experience creating Dashboards and Analytics within SIEM tools. Experience working with monitoring systems supporting auditing, incident response, and system health. Understanding of networking components and devices, ports, protocols, and basic … data solutions. Preferred Qualifications: Network Security Operations Center (SOC) experience. Experience and talent in data visualization. Experience creating workflows for Incident Response within a SIEM Tool. Security+ Certification. GIAC Certified Incident Handler Certification. GIAC Cyber Threat Intelligence Certification. Cybersecurity certifications. Formal SIEM training. Experience working on an Agile team/ more »

commercial experience with the following technologies/systems: Check Point Firewall/NIDS/DLP/Anti-Virus/Identity Awareness/URL Filtering SIEM/Splunk Enterprise Desktop and Server Anti-Virus/Malware and endpoint protection technologies Vulnerability Security Scanning e.g. Nessus Microsoft Windows Server family of products. … Good understanding of TCP/IP Identity and access management systems Active Directory, GPO Configuration Citrix/VMWare Experience of managing and developing a SIEM system, and feeding events into a SOC in order to identify and alert on security incidents Understanding of security issues and ability to allocate work more »

commercial experience with the following technologies/systems: Check Point Firewall/NIDS/DLP/Anti-Virus/Identity Awareness/URL Filtering SIEM/Splunk Enterprise Desktop and Server Anti-Virus/Malware and endpoint protection technologies Vulnerability Security Scanning e.g. Nessus Microsoft Windows Server family of products. … of TCP/IP Identity and access management systems Active Directory, GPO Configuration Citrix/VMWare Desirable Experience: Experience of managing and developing a SIEM system, and feeding events into a SOC in order to identify and alert on security incidents Understanding of security issues and ability to allocate work more »

5+ years commercial experience with the following technologies/systems: Firewall/NIDS/DLP/Anti-Virus/Identity Awareness/URL Filtering SIEM Enterprise Desktop and Server Anti-Virus/Malware and endpoint protection technologies Vulnerability Security Scanning Microsoft Windows Server family of products. Operational experience of PCI … Good understanding of TCP/IP Identity and access management systems Active Directory, GPO Configuration Citrix/VMWare Experience of managing and developing a SIEM system, and feeding events into a SOC in order to identify and alert on security incidents Understanding of security issues and ability to allocate work more »

trends, and recommend new security measures as needed. Key Requirements: 5 years background in a related IT role Experience managing security products such as SIEM, TVM and PAM platforms Must be CISSP certified Experience of working with and overseeing outsourced security functions Strong technical skills especially tools within the E5 …/Microsoft 365/Defender suite Experienced with toolsets and technologies such as SIEM, PIM, PAM, Endpoint Protection, EDR, IPS/IDS, MFA, Encryption, Next Gen Firewalls. Experience of supporting cyber security, security event triage, incident response and recovery efforts Strong knowledge of operational security management and tooling across multiple more »

and Azure resources. Experience using common vulnerability scanning tools (e.g., Nessus) to discover weaknesses. Experience configuring/managing/tuning security event monitoring tools (SIEM). Experience working with Identity and Access Management (IAM). Strong written and oral communications required. Strong understanding of cybersecurity principles, practices, and technologies. Excellent … automating management tasks with Ansible, Puppet, or Chef. Experience working among different Cloud Provider environments (Azure). Experience developing in PowerShell. Experience working with SIEM tools such as Splunk to ingest, normalize, store, and maintain data from endpoint, network, and application sourcetypes. Original Posting Date: 2024-04-10 While subject more »

experienced individual will know what the role entails, but some key points to be considered: - Demonstrable experience of managing security solutions (secure Code Scanning, SIEM, IPS, IDS, Vulnerability Scanning, Penetration Testing,) directly, or through an MSSP, in a cloud-based environment. - Knowledge of security compliance standards relevant to the SaaS … such as PCI, GDPR, ISO 27001, SOC2, NIST - Skills in leveraging application monitoring tools- AWS monitoring/alert tools (CloudTrail, GuardDuty), Qualys tools and SIEM experience, to detect and respond to security events/incidents. - Industry certifications such as CISSP, CISM, CEH, ECSA, LPT, OSCP, AWS certified security, or equivalent more »

to join our team on a contract basis. The ideal candidate will have a strong background in Cyber Analysis, with expertise in SOC environments, SIEM & Incident Management, Vulnerability Management, and Endpoints or Threat Analysis. Key Responsibilities: - Conduct thorough Cyber Analysis to identify and respond to security incidents. - Monitor and manage … Security Operations Center (SOC) environments to ensure the integrity and security of our systems. - Utilize SIEM tools for real-time event correlation and incident detection. - Effectively handle Incident Management, responding promptly to security alerts and breaches. - Implement and oversee Vulnerability Management processes to identify and mitigate potential security risks. - Conduct … and threats to enhance overall security posture. Qualifications: - Proven experience in Cyber Analysis and Security Operations. - Proficiency in working with SOC environments and utilizing SIEM tools. - Strong knowledge of Incident Management processes and procedures. - Experience in Vulnerability Management to address potential security vulnerabilities. - Expertise in Endpoints or Threat Analysis to more »

related products and services to ensure that CLS is equipped with appropriate industry best tools and solutions Operational Operate and maintain controls related to SIEM, DLP, Vulnerability Management, DLP, Cyber Threat Intelligence, Endpoint Protection, etc with an emphasis on cloud deployments and implementations. Conduct IT Security risk assessments for all … team to help design, implement and maintain security Prepare for, identify (hunt) and remediate cyber threats Operate and maintain IT Security controls related to SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, DLP, Endpoint Protection, etc. Participate in an on-call rotation to act as an escalation point for events requiring … business audiences) Excellent time management and organizational skills combined with technical IT Security acumen Expert knowledge of Firewalls, TCP/IP, IPS, DLP, proxies, SIEM, & Endpoint Protection software Financial and/or Banking industry experience preferred What we offer Holiday - UK/Asia: 25 holiday days and 3 ‘life days more »

our client, you will play a crucial role in implementing and managing their cybersecurity infrastructure. Your responsibilities will include: - Implementing and managing Azure Sentinel SIEM for threat detection, incident response, and security monitoring. - Configuring and maintaining Microsoft Defender for endpoint protection and threat detection. - Developing and maintaining KQL (Kusto Query … junior members of the security team. Requirements: - Proven experience working as a Cyber Security Engineer or similar role. - In-depth knowledge of Azure Sentinel SIEM, Microsoft Defender, and KQL scripting. - One of the following certifications: AZ-500 (Microsoft Azure Security Technologies) or SC-200 (Microsoft Security Operations Analyst) or SC more »

Lead Cyber Security Engineer (Windows Azure SIEM) WFH/Epsom to £85k Are you an experienced Cyber Security Engineer with a strong knowledge of Windows and Azure security? You could be progressing your career in a hands-on Lead Cyber Security Engineer role at an Independent Building Society that specialise … and finish times too. Requirements: You have experience in a similar Senior Cyber Security Engineer role You have experience using security tools (such as SIEM, FIM, EDR, or NDR) and security framework and standards implementation (NiST, ISO27001, PCI-DSS, etc) You have experience of a Windows and Azure environment You … contribution) Private Healthcare Life Assurance Company bonus Professional study support Apply now to find out more about this Lead Cyber Security Engineer (Windows Azure SIEM) role. At Client Server we believe in a diverse workplace that allows people to play to their strengths and continually learn. We're an equal more »

an event are documented and remediated; Monitoring and analysing security relevant logs, events, and alerts including, but not limited to, logs from systems, applications, SIEM, AV, Firewalls, and IPS; document relevant incidents and suggest/co-ordinate appropriate remedial actions; Design and manage security logging and SIEM programs for the more »

Collaborate with Information Security Risk functions and colleagues to produce Risk Landscape documentation. About You: Experience with technologies/systems including Check Point Firewall, SIEM/Splunk, enterprise-level antivirus and malware protection, vulnerability scanning tools (e.g., Nessus), Microsoft Windows Server, PCI DSS operations, Citrix XenApp, LAN & WAN networking using … Cisco products, and more. Proficiency in managing and developing a SIEM system, along with feeding events into a SOC to identify and alert on security incidents. Solid understanding of security issues, with the ability to allocate work effectively and manage escalations efficiently. Don't miss this opportunity to be a more »

to act as the incident manager. • Must have experience working with cyber security tools and technologies including endpoint security, email security, network security tools, SIEM and SOAR etc, and be able to optimise such tools. • Must have a have experience in Vulnerability/Threat management including threat intelligence and threat more »

Description Leidos is looking for a Sr. S IE M (Security Information and Event Management) Engineer/Splunk Certified Admin to join a high performing agile team using the Scaled Agile Framework (SAFe) methodology to support a large, complex, and fast-paced program. Program execution follows DEVOPS best practices and … the various Splunk core components. Experience configuring and deploying data collection for a variety of operating systems and networking platforms. Experience creating Dashboards and Analytics within SIEM tools. Experience working with monitoring systems supporting auditing, incident response, and system health. Understanding of networking components and devices, ports, protocols, and basic … data solutions. Preferred Qualifications: Network Security Operations Center (SOC) experience. Experience and talent in data visualization. Experience creating workflows for Incident Response within a SIEM Tool. Security+ Certification. GIAC Certified Incident Handler Certification. GIAC Cyber Threat Intelligence Certification. Cybersecurity certifications. Formal SIEM training. Experience working on an Agile team/ more »

four day operational rota including both day shifts (7am - 7pm) and nights shifts (7pm - 7am). Duties include: Monitor security information and event management (SIEM) tools and other security monitoring systems to identify potential security incidents and anomalies. Analyse alerts and log data to assess the severity and impact of … accurate records of incidents, investigations, and security-related activities. Configure, update, and maintain security tools, including firewalls, intrusion detection/prevention systems, endpoint protection, and SIEM solutions. Who? I would be interested in speaking with both candidates with experience in cyber secruity in a similar role or who have other more »

will play a pivotal role in safeguarding our organization's critical infrastructure and data against cyber threats. Your expertise in designing, implementing, and maintaining SIEM solutions will help us proactively identify and mitigate security incidents, ensuring the confidentiality, integrity, and availability of our systems. Responsibilities: - Work with the technical lead …/SME for the CSOC and SIEM service offering by managing and improving the platforms to meet the requirements of the business and/or client - Assist in establishing and maintaining processes, tooling and metrics that help provide a high level of productivity, supportability, and operational readiness - Actively participate in … implemented through onboarding or continuous improvement activities Qualifications & Experience: Professional experience of working in an Incident Response Team or a similar environment Knowledge of SIEM platforms such as Azure Sentinel, Microsoft Defender, Splunk, ArcSight, QRadar, or LogRhythm. Strong analytical and problem-solving skills with the ability to handle complex security more »

experienced individual will know what the role entails, but some key points to be considered: - Demonstrable experience of managing security solutions (secure Code Scanning, SIEM, IPS, IDS, Vulnerability Scanning, Penetration Testing,) directly, or through an MSSP, in a cloud-based environment. - Knowledge of security compliance standards relevant to the SaaS … such as PCI, GDPR, ISO 27001, SOC2, NIST - Skills in leveraging application monitoring tools- AWS monitoring/alert tools (CloudTrail, GuardDuty), Qualys tools and SIEM experience, to detect and respond to security events/incidents. - Industry certifications such as CISSP, CISM, CEH, ECSA, LPT, OSCP, AWS certified security, or equivalent more »

annum + Remote working London, Central What will you be doing? Primarily the role will be concerned with selecting and standing up an appropriate SIEM platform to service our client's needs. Once the tool is Embedded and processes are in place to ensure Business as Usual running, the role … diverse teams. Leadership qualities to guide Junior Analysts and drive security initiatives. Up-to-date knowledge of cybersecurity trends and threats. Full understanding of SIEM systems - IBM QRadar, FortiSIEM, Splunk, Sentinel etc IT Security Management, Policies, Procedures, Standards and Guidelines Risk Assessment Privacy and Compliance Conversant with security best practices more »

Cyber Security Manager (Windows Azure SIEM) *Epsom/Hybrid* to £85k Are you an experienced Cyber Security Engineer with a strong knowledge of Windows and Azure security? You could be progressing your career in a hands-on Cyber Security Manager role at an Independent Building Society that specialise in savings … times too. Requirements: You have experience in a similar Cyber Security Manager/Senior Engineer role You have experience using security tools (such as SIEM, FIM, EDR, or NDR) and security framework and standards implementation (NiST, ISO27001, PCI-DSS, etc) You have experience of a Windows and Azure environment You … contribution) Private Healthcare Life Assurance Company bonus Professional study support Apply now to find out more about this Cyber Security Manager (Windows Azure SIEM) role. At Client Server we believe in a diverse workplace that allows people to play to their strengths and continually learn. We're an equal opportunities more »

for a secured and optimised technology and data landscape. Subject matter expert in application and network security, with operational experience of managing security operations, SIEM solutions, incident, and response management. Collaborate to develop the Infosec strategy and associated operating model. Conduct an in-depth security risk assessment across the technology … analysis/frameworks. Solid exposure to cloud based applications security and provisioning. Experience in writing policy, process, and standard playbooks. Experience in SOC and SIEM platforms Excellent communications skills in framing and messaging issues of highly technical nature, into meaningful and relevant information for a varied audience. Excellent analytical skills more »

AWTG, a leader in 5G systems integration and application development, is looking for an IT and Network Security Engineer. As a Network Security Engineer, you’ll work across various domains including RAN, Mobile Core, IP Routers, Ethernet switches, Data center more »