1 to 25 of 188 SIEM Jobs in the UK

and incident management. Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirusantimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. Experience with identity access management solutions, such as SAMLOATH Experience with HIDS and NIDS The more »

household Onsite perks including free parking, tea and coffee stations, and a subsidized café with free breakfast toast Responsibilities Security Monitoring & Incident Response Use SIEM tools like Exabeam/LogRhythm/Splunk/Arcsight to monitor security events, detect threats, and analyze data to address incidents swiftly. Vulnerability Management Tools more »

projects, including threat detection systems, vulnerability assessments, and incident response plans. Proficiency in project management tools (e.g., Microsoft Project, JIRA) and cybersecurity tools (e.g., SIEM, endpoint protection). Skills and Competencies Strong understanding of cybersecurity principles, including risk management and threat analysis. Exceptional organizational and multitasking abilities. Proven leadership skills more »

with cloud security architecture and managing security in cloud environments. Technical Skills: Knowledge of security tools and technologies for monitoring, detection, and response (e.g., SIEM solutions, endpoint protection). Familiarity with secure software development practices and DevSecOps principles. QUALITIES AND BEHAVIOURS: Hold and articulate clear values Demonstrate optimistic personal behaviours more »

cybersecurity community to exchange knowledge and stay on top of emerging trends. What youll bring: Experience in Security Operations Centres (SOC) and proficiency with SIEM tools. Strong understanding of networking, security tech, and system applications (TCP/IP, VPNs, firewalls, etc.). Confirmed problem-solving skills, with the ability to more »

artifacts in support of incident investigations Experience with vulnerability scanning solutions In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. Sentinel, Nitro/McAfee Enterprise Security Manager, ArcSight, QRadar, LogLogic, Splunk) Understanding of mobile technology and OS (i.e. Android, iOS, Windows), Experienced in more »

Computer Science , Information Technology , or a related field. Strong understanding of network security , endpoint protection , and cloud security concepts. Proficiency in using and managing SIEM tools and other security platforms. Experience in creating security procedures , run books , and reports . Proven ability to conduct threat hunting and root cause analysis more »

It will cover analysis, monitoring, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best more »

It will cover analysis, monitoring, reporting, alerting and investigation activity utilising a wide variety of security platforms including AI/ML and behavioural analytics, SIEM (Security Information Event Management), Network Packet Capture platform, Anti Malicious Code, Threat Detection technologies and platforms across the UK Network Perimeter working with the best more »

a Security Operations Centre or Security Monitoring Team. Experience with managed security services and security consulting would be a plus Essential Skills and Experience Hands on SIEM and EDR tooling knowledge and experience including technologies such as Microsoft Sentinel, Microsoft Defender Suite etc. Experience in end-to-end information security … Detection Systems (IDS), Intrusion Prevention Systems (IPS), Web Application, Firewalls, Firewall logs, systems logs, web logs, application logs and Security Information and Event Management (SIEM) systems Experience with technologies, tools, and process controls to minimise risk and data exposure. Experience in search query languages such as KQL, OSquery or SPL more »

cybersecurity and operational resilience domain, ability to develop risk mitigation plan and onboarding new technologies, services and applications Experience in security applications and tools (SIEM products), sound knowledge of security frameworks e.g. NIST, CIS controls, ISO/IEC 27001, Cyber Assessment Framework (desirable) Experience with managing suppliers and 3 rd more »

under pressure. You really must have: Experience in cyber security including protective monitoring and incident response, e.g. GIAC GMON, GCIA, GCIH or equivalent experience. SIEM (LogRhythm, Splunk, etc) and IDS (Snort) experience. Network and Host security experience. Threat intelligence. Threat Hunting. Excellent communications skills. Mentoring and coaching. Current DV clearance. more »

access management, Threat hunting, malware reverse engineering, exchange security, SAST/DAST, MDR, etc. Design and deployment of solutions such as - Azure Sentinel, Splunk SIEM, CyberArc PAM, Sailpoint IAM, exchange security, AV/AM, Spam filters. Technical expertise on Mcafee, Duo/Ping, Crowdstrike, Deepwatch, Darktrace. Exposure to infrastructure security more »

Science, or related field Additional Requirements Strong hands-on network and security background Cisco networking Cisco firewalls (Firepower/Threat Detection) Palo Alto firewalls SIEM experience (Logarithm desirable) Web proxy (Forcepoint desirable) Governance skills Policy writing/reviewing Reporting KPI monitoring Certifications like CCNP/CISM would be desirable but more »

/li li Desire and ability to learn, understand and apply new technologies./li li Experience with Firewall log/event configuration and SIEM/li li Ability to work independently and as part of a team, to multitask, and prioritize tasks, and to take initiative in a fast more »

At least three years' experience in information security or a related field. Expertise in network penetration testing and vulnerability mitigation. Proficiency in firewalls, proxies, SIEM, antivirus, and IDPS technologies. Technical Skills: Understanding of patch management, with the ability to deploy patches promptly while considering business impacts. Knowledge of cloud infrastructure more »

managing security services, preferably within an organisation providing payment processing services. • Provide pastoral care to direct reports and talent within their department. • Expertise with SIEM tools (e.g., Azure Sentinel, Rapid7), vulnerability management platforms, and endpoint detection and response (EDR) solutions. • Experience in developing and maintaining Information Security strategies, roadmaps, guidance more »

in vulnerability management and Tenable tooling. A deep understanding of security technologies, such as firewalls, intrusion detection and prevention systems, anti-virus software, encryption, SIEM and authentication mechanisms with experience in implementing, configuring, and troubleshooting most of these technologies. A broad knowledge of industry standards and best practices for security more »

of security principles, concepts, and best practices Expertise in cloud security architectures (AWS, Azure, GCP) Experience with key security technologies (firewalls, IDS/IPS, SIEM, EDR) Relevant industry certifications (e.g., CISSP, CISA, CISM) are highly valued Benefits: £50 a month personal benefits allowance 33 days holiday (Including Bank holidays) Excellent more »

knowledge of security frameworks, standards, and best practices. Excellent knowledge of penetration testing tools and practices for ethical hacking. Excellent knowledge of Security Information and Event Management technologies. Strong knowledge of security engineering practices and procedures. Familiar with financial services security standards and regulatory requirements. Previous experience leading a Security more »

skills and professional demeanour Proficient in Microsoft Office Applications Capacity to use analytical thinking to draw reasonable conclusions from various data sources, such as SIEM platform, Threat Intelligence and a spectrum of data logs, in support of a cyber incident. Desirable Experience Experience working in a fast-paced operational environment more »

Level Agreement (SLA) are met. Skills: Good Analytical skills with the ability to manipulate, interrogate and analyses large data sets. Experience of working with SIEM and IPS within a SOC environment. Knowledge of Cyber Security Operations Understanding of Cyber Threats Advanced IT skills. Relevant Cyber Security Analyst experience and certification. more »

POP, LDAP. I t would be great if you had: Understanding of static malware analysis and reverse engineering. CREST Practitioner Intrusion Analyst. Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar appreciated. If you are interested in this role but not sure if your skills and more »

Experience of working with Firewall audit Desire and ability to learn, understand and apply new technologies. Experience with Firewall log/event configuration and SIEM Ability to work independently and as part of a team, to multitask, and prioritize tasks, and to take initiative in a fast-paced environment. Willingness more »

Experience of working with Firewall audit Desire and ability to learn, understand and apply new technologies. Experience with Firewall log/event configuration and SIEM Ability to work independently and as part of a team, to multitask, and prioritize tasks, and to take initiative in a fast-paced environment. Willingness more »