Information & network security engineers & analysts Work, Jobs in Lower Earley, Brk (with Salaries)

SIEM Content Development Specialist
Vodafone —Newbury
- Full-time
- Azure
- Oracle
- Windows
- Annual leave
Network Security Engineer
NSC Global —Reading
- Temporary
- Presentation skills
- Computer networking
- Communication skills
SOC Analyst L3
iomart —Marlow
- Full-time
- Hybrid work
- Azure
- Microsoft Office
- Mentoring
8d
IT Security Specialist
Montu UK —Winnersh
- £55,000 - £60,000 a year
- Full-time
- Hybrid work
- Python
Quick apply
3d
Red Team Operator
Interrupt Labs —Basingstoke
- Azure
- AWS
- Linux
- Annual leave
- Employee assistance programme
Security Technician
Fujitsu —Bracknell
- Communication skills
2d
Security Cyber Risk & Compliance Specialist
DXC Technology —Farnborough
- Full-time
- Bachelor's degree
- No degree
8d
Senior Security Operations Centre Analyst
Sopra Steria —Farnborough
- Up to £58,000 a year
- C++
- Scripting
- IT
- Annual leave
Security Consultant
BCN Group —Reading
- Full-time
- Hybrid work
- Communication skills
- Annual leave
- Employee assistance programme
Quick apply
1d
Security Assurance Analyst
DXC Technology —Farnborough
- Full-time
- Analysis skills
- Team management
- Computer networking
Analyst (Remediation)
Centrica —Windsor
- Hybrid work
- Azure
- AWS
- Travel
3d
Senior Security Engineering Consultant
Nomios —Basingstoke
- £70,000 - £80,000 a year
- Full-time
- Hybrid work
- Azure
- APIs
- Communication skills
Quick apply
Cyber Technical Lead
Maersk —Maidenhead
- Full-time
- Azure
- AWS
- Analysis skills
8d
Senior Security Automation Developer
Skye Business Solutions —Maidenhead
- £75,000 a year
- Full-time
- Remote
- Azure
- Computer Science
- AWS
Quick apply
Cyber Threat Lead
British Airways —Heathrow
- Full-time
- Bachelor's degree
- Business
11d
Senior SOC Engineer
Nomios —Basingstoke
- £55,000 - £65,000 a year
- Full-time
- Hybrid work
- Azure
- English
- AWS
Quick apply
11d
Senior CRM Campaign Executive
Allwyn UK —Rickmansworth
- Full-time
- Windows
- Java
- AWS
- Annual leave
- Employee assistance programme

Related jobs to explore

Based on your search for information & network security engineers & analysts

Support Engineer I - UK
ExtraHop —London
Communicate with customers in a highly professional manner via various channels including phone, ticketing system, and video conferencing.
£30,000 - £35,000 a year
1d
IT Operations Graduate Programme - London
FDM Group —London
Degree level qualification (2:2 or higher). Commitment to at least two years of employment with FDM. Initial upskilling pre-assignment that has been accredited…

I want to receive the latest job alerts for information & network security engineers & analysts in lower earley, brk

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

SIEM Content Development Specialist

Vodafone -
Newbury

Apply Now

Job details

Full-time

Benefits

Cycle to work scheme
Season ticket loan
Annual leave
Company pension
Discounted gym membership

Qualifications

TCP
Azure
Oracle
Software deployment
Git
Google Cloud Platform
Windows
SQL
Firewall
AWS
IDS
Splunk
Scripting
SIEM
Linux
Cybersecurity
Leadership
Communication skills

Full job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What you’ll do

The SIEM Content Development Specialist plays a critical role in advancing the Cyber Security Operations Center’s ability to detect and respond to cybersecurity incidents. This role focuses on designing and developing cutting-edge detection content leveraging a wide array of security technologies and telemetry to identify malicious activity and guide security analysts through effective response playbooks.
Working within a threat-led framework, the specialist collaborates across teams to translate threat intelligence into actionable detection logic and response workflows. The position demands strong technical acumen, analytical thinking, and problem-solving capabilities, along with the ability to communicate clearly with peers, leadership, and cross-functional stakeholders.

Key accountabilities and decision ownership:

Contribute to continuous improvement initiatives across multiple technologies by developing and refining content that enhanced threat detection and response capabilities.
Contribute to the development and optimisation of threat detection content, including the tuning of threat and vulnerability management technologies and the continual refinement of SIEM rules and logic to enhance detection accuracy and operational performance.
Lead and contribute to the optimisation and modernisation of SIEM content, supporting the adoption of next-generation SIEM technologies and cloud-native security tools.
Manage the lifecycle of detection content, including development, testing, release, and retirement, using version control and documentation best practices.
Collaborate with DevOps/SecOps teams to integrate security content into broader CI/CD workflows
Collaborate with the CSOC Manager to support improvements in security operations through effective content contributions.
Support security event analysis by participating in and may drive security event analysis activities to address current cyber threats.
Assist in threat response activities, providing analytical input from a blue team perspective to help identify potential threat group behaviours.
Contribute to the creation of cyber security reports and advisories, ensuring timely and accurate dissemination to key stakeholders.
Participate in residual risk assessments, supporting post-incident analysis and the documentation of operational and technical lessons learned.
Collaborating with data owners and customers on understanding data sources and use cases and successfully translating requirements to actionable content.

Who you are

Core competencies, knowledge and experience:

Minimum of 2-5 years’ experience in SIEM content (rule logic and code) development role
Minimum of 2 years of SOC analyst experience (Level2 or above) required.
In depth and extensive hands-on experience in security event analysis, create and refine SIEM/EDR rules and deliver efficiency within the SIEM and all other technologies used within the team.
Deep knowledge of IPv4/IPv6, TCP networking protocols
Deep knowledge of Windows/Linux operating systems
Exceptional working knowledge of security technologies such as SIEM (ArcSight, Sentinel, QRadar, LogRhythm, Splunk), EDR (Microsoft Defender, FireEye, Tanium), IDS/IPS, firewalls, proxies, web application firewalls, anti-virus, etc.
Comprehensive understanding of Window Security Event logs and Syslog
Excellent familiarity with endpoint/perimeter security attack vectors and detection (blue/purple teaming)
Excellent familiarity with standard security frameworks such as MITRE, cyber kill chain and APT campaign strategies
Outstanding knowledge of cloud platforms such as Azure, O365, Google cloud, AWS, Oracle
Experience with modern SIEM platforms, including cloud-native or hybrid solutions
Hands-on experience with CI/CD pipelines and automation tools for security content deployment.
Proficiency in version control systems (e.g., Git) for managing SIEM content.
Excellent working knowledge of regular expression development
Scripting and programming experience is highly desirable
Kusto or SQL knowledge, including rule/query optimisation
Proven ability to prioritise workload, meet deadlines and utilise time effectively
Good interpersonal and communication skills, works effectively as a team leader and the ability.
Experience in security event analytics, for example Elastic, Azure Sentinel or Splunk.

Preferred:

Demonstrable experience in critical thinking and data or logical analysis.
Knowledge of: typical security devices such as firewalls, Intrusion detection system, anti-virus, anti-spam,
Cyber threat concepts e.g. cyber kill chain, attack methods, threat actors.
Cloud systems and Windows and Linux OS.
Experience with investigating intrusions in Linux and cloud environments

Must have technical and professional qualifications:

3 years or above related experience
Excellent verbal and written communication skills
Highly disciplined and motivated, able to work independently or under direction
Deep understanding of threat actor techniques and tools

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What's in it for you

Yearly bonus: 10%
Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
Charity days: 5 days/year
Maternity leave: 52 weeks: the first 13 weeks are fully paid, followed by 26 weeks of half pay
Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%.
Access to: private medical, private dental, free health assessments, share save scheme
Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.

Apply Now

Refine Your Search

information & network security engineers & analysts jobs in lower earley, brk

SIEM Content Development Specialist

Network Security Engineer

SOC Analyst L3

IT Security Specialist

Red Team Operator

Security Technician

Security Cyber Risk & Compliance Specialist

Senior Security Operations Centre Analyst

Security Consultant

Security Assurance Analyst

Analyst (Remediation)

Senior Security Engineering Consultant

Cyber Technical Lead

Senior Security Automation Developer

Cyber Threat Lead

Senior SOC Engineer

Senior CRM Campaign Executive

Related jobs to explore

I want to receive the latest job alerts for information & network security engineers & analysts in lower earley, brk

Explore jobs in more locations

Join Us

What you’ll do

Who you are

Not a perfect fit?

What's in it for you

Who we are

Jobseeker tools

Employer Tools

Browse

Stay Connected