1 to 25 of 28 SIEM Jobs in Northern Ireland

response, security engineering, detection/rule writing, DFIR, threat intelligence, vulnerability management or security control testing. Working knowledge of key Cyber Defence technologies, including SIEM, IDS/IPS, endpoint protection/EDR, firewalls and threat or vulnerability management tooling. Strong networking fundamentals, particularly TCP/IP, DNS and SMTP. ...

response, security engineering, detection/rule writing, DFIR, threat intelligence, vulnerability management or security control testing. Working knowledge of key Cyber Defence technologies, including SIEM, IDS/IPS, endpoint protection/EDR, firewalls and threat or vulnerability management tooling. Strong networking fundamentals, particularly TCP/IP, DNS and SMTP. ...

response, security engineering, detection/rule writing, DFIR, threat intelligence, vulnerability management or security control testing. Working knowledge of key Cyber Defence technologies, including SIEM, IDS/IPS, endpoint protection/EDR, firewalls and threat or vulnerability management tooling. Strong networking fundamentals, particularly TCP/IP, DNS and SMTP. ...

including investigation, containment, eradication, recovery and post-incident analysis. Investigate suspicious activity across endpoints, networks, identities, applications and cloud environments to identify potential security compromises. Utilise SIEM technologies such as Microsoft Sentinel, Splunk or QRadar to correlate security events, investigate threats and identify indicators of compromise. Analyse security logs, authentication … potential security risks. Work closely with Security Engineering, Infrastructure and wider IT teams to coordinate effective incident response and remediation activities. Develop, refine and optimise SIEM detection rules, alerting logic and security monitoring use cases to improve detection capabilities and reduce false positives. Contribute to the development and continuous improvement ...

Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams ...

organisational security awareness and resilience. What I'm Looking For Experience in a Cyber Security Engineer, Security Analyst or Information Security role. Knowledge of SIEM tools and security monitoring. Experience with vulnerability management and incident response. Understanding of Microsoft security technologies and Azure. Knowledge of security frameworks, policies and best ...

platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities: This role has no supervisory responsibilities Posting date: Monday 19th October 2026 [11.59pm ...

incidents and strengthen security across the organisation's systems and networks. Your responsibilities will include: Monitoring security alerts and investigating suspicious activity using SIEM and endpoint protection tools. Supporting incident response, from initial investigation through to containment and recovery. Investigating phishing attempts, unusual account activity and potential security breaches. Reviewing ...

such as policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and ...

other enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance. Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures. Proven ability to influence technical decisions and drive adoption of secure patterns and ...

customer-facing technical role, such as implementation, sales engineering, product support, or technical account management. Demonstrate working knowledge of cybersecurity technologies (e.g., SIEM, ASM, Vulnerability Management, or SOAR) and SaaS solutions. Apply project management principles to establish ownership, set clear timelines, and hold internal and external stakeholders accountable for driving ...

Hold a foundational understanding of network technologies and protocols, including DHCP, TCP/IP, DNS, and HTTP. Demonstrate working knowledge of cybersecurity technologies (e.g., SIEM, ASM, Vulnerability Management, or SOAR) and SaaS solutions. Possess hands‐on experience with basic software configuration, system environments, and standard report or dashboard creation. Apply ...

Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues. You will support the initial implementation … type and severity. Identify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. Stakeholder and Client Reporting, and engagement Assist in architectural design to facilitate the onboarding ...

Loss Prevention and Insider Threat Management Identity, SSO, authentication, and directory services Cloud, hybrid, and on-premises architectures APIs, integrations, JSON, and authentication mechanisms SIEM/SOAR and wider security ecosystem integrations HTTP, TLS, proxies, networking, and certificates Logging, telemetry, and diagnostic analysis Automation, scripting, and modern AI tooling Strong ...

means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Join our Digital & Data team and work alongside cyber security, product, design and technology specialists … their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures ...

impact, and recommend the response and escalation path. You'll triage threat intelligence (IOCs and TTPs) from multiple sources, run threat hunts across the SIEM, and help organisations identify, isolate and contain security issues. You'll also guide and mentor two analysts, without direct line management, and support the rollout … advanced event and incident analysis, including baselining and trend analysis Conduct intelligence-led threat hunting using IOCs and TTPs, investigating suspicious activity through the SIEM Support Major Incident Response from a protective monitoring perspective, helping teams identify, contain and remediate threats Give timely advice on response plans based on incident ...

Digital Trust & Cyber Security practice. You will manage live incidents, guide day-to-day SOC operations, and help clients modernise their security operations, improving SIEM, SOAR and EDR capabilities. You will work with cross-disciplinary teams across sectors, mentor colleagues, and shape modern Security Operations services. #J-18808-Ljbffr ...

Group is seeking a Senior Security Analyst to join its global Security Operations Centre. You will monitor, investigate and respond to security alerts across SIEM, EDR and cloud environments, helping to detect threats and coordinate containment. You will develop detection rules, conduct threat hunting, and produce incident reports while collaborating ...

processes, with a focus on security risks and mitigations. Deep knowledge of technical details, integration, and functions of security tools and platforms (e.g., IAM, SIEM, vulnerability management, cloud security). Evaluating potential system enhancements and upgrades, influencing the security product roadmap. Identifying and implementing process improvements and product simplification opportunities ...

Practical experience with network segmentation, firewalls, and secure remote access in OT environments Hands‐on experience with security tools across both domains: SIEM, IDS/IPS, vulnerability scanners, and OT‐specific platforms, such as Claroty, Dragos, Nozomi, or similar platforms Familiarity with relevant security frameworks and standards, like … Azure, GCP) Knowledge of safety systems (SIS) and safety-security integration challenges Prior experience in control systems engineering, automation, or industrial operations Experience with SIEM integration for OT environments and security log analysis Master’s or a PhD degree in a relevant technical field The Company At ANGOKA, our mission ...

with JSONB; in-process caching with invalidation Security telemetry: Windows event logs, Active Directory, M365/Graph API, NetFlow Insider threat/UEBA/SIEM product experience Porting or re-platforming an existing system against a live reference implementation Comfortable reading C# well enough to port from it Agile, cross ...

group as our customers, and their friction is product signal. Maintain a clear view of the competitive and vendor landscape across MDR, SOC automation, SIEM and adjacent Microsoft security tooling, and know precisely howCloudGuarddifferentiates. Track market direction, regulatorymovementand shifting buyer expectations, and translate them into product implications rather than observations. ...

involves handling security incidents escalated from Tier 1/2, triaging threat intelligence, and guiding response actions based on business impact. You will manage SIEM platforms (IBM QRadar, Microsoft Sentinel, MDE/MDI, Defender for Cloud) and mentor junior analysts, while contributing to Major Incident Response and architectural onboarding ...

controls across cloud infrastructure, data platforms, and application services. You will own CSPM, DLP capabilities, and integrate controls with CI/CD pipelines and SIEM tools. The role emphasizes hands-on security engineering, cloud-native architectures, and collaboration with platform engineers, product teams, and security partners to deliver scalable, reliable ...

classification, handling, retention, and destruction policies across the organization. Define corporate backup, recovery, and compromise response procedures. Establish centralized security logging, monitoring, and alerting (SIEM) capabilities, with clear ownership. Implement corporate vulnerability management and security testing practices. Govern the secure use of AI tools and AI‐integrated systems across … Controls, and SOC 2. Hands‐on experience securing Microsoft Azure and Microsoft 365 environments. Experience with endpoint detection and response (Microsoft Defender preferred), SIEM, and identity platforms (e.g. JumpCloud, Entra ID). Experience writing and running incident response, BC/DR, and tabletop exercise programs. Familiarity with secure SDLC practices ...