25 of 25 SIEM Jobs in Northern Ireland

networking and routing protocols (e.g. TCP/IP) and core services (e.g. DNS, SMTP). Familiarity with cyber defence technologies and tooling, including SIEM solutions, Intrusion Detection & Prevention Systems (ID/PS), Threat and vulnerability management platforms, Endpoint protection, and Firewalls. Highly analytical mindset with the ability to interpret data ...

depth understanding of Networking and routing protocols (e.g. TCP/IP) and services (e.g. DNS, SMTP). Cyber defence technologies and tooling, including: SIEM solutions Intrusion Detection/Prevention Systems (ID/PS) Threat and vulnerability management platforms Endpoint protection Firewalls Highly analytical mindset with strong problem-solving skills. Ability ...

depth understanding of Networking and routing protocols (e.g. TCP/IP) and services (e.g. DNS, SMTP). Cyber defence technologies and tooling, including: SIEM solutions Intrusion Detection/Prevention Systems (ID/PS) Threat and vulnerability management platforms Endpoint protection Firewalls Highly analytical mindset with strong problem-solving skills. Ability ...

depth understanding of Networking and routing protocols (e.g. TCP/IP) and services (e.g. DNS, SMTP). Cyber defence technologies and tooling, including: SIEM solutions Intrusion Detection/Prevention Systems (ID/PS) Threat and vulnerability management platforms Endpoint protection Firewalls Highly analytical mindset with strong problem-solving skills. Ability ...

essential things required to be successful in the role 4+ years’ experience in a security or technical operations role Hands-on experience working with SIEM and EDR tools (essential) Experience investigating and responding to security alerts or incidents Familiarity with securing systems through patching, endpoint protection, or similar controls Working ...

vendor/third‐party risk management programs and DDQ response processes Exposure to cloud environments (AWS, Azure, or GCP) and common security tooling (IAM, SIEM, ticketing systems) Scripting ability (Python, or similar) for light automation of GRC workflows Relevant certifications: CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor ...

will lead threat detection, incident response, and tooling automation while mentoring other analysts and driving improvements across our security posture. You will work with SIEM, EDR, and cloud security tools, analyze threats, and produce dashboards and executive-level reporting for stakeholders in a fast-moving, agile environment. #J-18808-Ljbffr ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues. You will support the initial implementation … type and severity. Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Stakeholder and Client Reporting, and engagement Assist in architectural design to facilitate the onboarding ...

Senior SOC Analyst to lead threat detection, incident response and security monitoring in a fast-paced security operations center. You will analyse alerts from SIEM/EDR, mentor junior staff, drive automation, and improve SOC tooling; requires 5+ years in information security, strong scripting, knowledge of MITRE/ ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into cyber security. Course ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues.You will support the initial implementation and … type and severity.• Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. • Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization.• Stakeholder and Client Reporting, and engagement• Assist in architectural design to facilitate the onboarding ...

RESPONSIBILIES Responsible for working in Security Operation Center (SOC) team environment. Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR. Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate …/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/ ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

real-world project work that doubles as hands-on experience. 100+ hours of live training Practical skills in troubleshooting, networking (Cisco), Azure cloud, Splunk SIEM & Tenable vulnerability management Job guarantee with our hiring partners Get certified, get experience, get hired. Apply today and start your journey into networking. Course cost ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Extensive technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures ...

ESO in Belfast is building a leading security operations team. We are seeking a Senior Security Ops Engineer to monitor and respond to incidents, work across security, IT, development, and platform teams, and help enforce ...

identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and delivered compelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation … Falcon platform (endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacity Experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure management Experience with enterprise security architectures ...

Software Engineer II, SecurityLocation: Belfast, NI/Hybrid(This role requires working in-office 3 days per week.)About us:EverQuote is a leading AI-powered growth solutions partner for regulated property and casualty insurance ...