18 of 18 SOAR Jobs in the North of England

routing, transformation, parsing, and data normalisation. Experience working in enterprise Security Operations environments, including threat detection, incident response, and security event analysis. Experience with SOAR platforms, playbook development, and security automation. Good understanding of network security, including Firewalls, proxies, network architecture, and common attack vectors. Excellent technical documentation and communication ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response (Cortex XDR or an equivalent EDR/XDR platform). Experience with email ...

incidents, trends and operational risks, escalating issues where required. Technical Skills Strong hands‐on experience with Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR). Strong hands‐on experience with Threat Intelligence platforms (e.g. Recorded Future ...

and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting for decision ...

Processing Infrastructure & Platforms Linux (Red Hat preferred) Apache/Nginx Elasticsearch Grafana Prometheus Cosmos DB Kafka or Azure Event Hubs Desirable Experience SIEM or SOAR platforms Cybersecurity Analytics Azure Security Financial Services or other highly regulated environments Knowledge of cybersecurity frameworks such as NIST, ISO 27001, CIS or OWASP About ...

hybrid environments Oversee patching, upgrades, and platform performance Drive platform improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards ...

CrowdStrike technologies. Design secure architectures for hybrid and multi-cloud environments following Zero Trust principles. Deliver complex security projects across SOC, SIEM/SOAR, XDR/EDR, Identity, Cloud Security, and Vulnerability Management . Provide technical leadership, create architecture documentation, and improve delivery standards. Work with clients, pre-sales, and ...

part of a collaborative and committed team, safeguarding BAE Systems enterprise IT Infrastructure * Installation, maintenance and configuration of Cyber Security Toolsets, including SIEM, SOAR, Cloud and other protection and monitoring technologies * Continuous commitment towards organisational, departmental and individual objectives and uphold security standards and principles * Collaborating within project teams ...

security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation and SOAR AI-driven Security Operations or Agentic AI Threat Intelligence integration Telemetry Engineering About You You'll likely be an experienced Detection Engineer, Security Platform Engineer ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagements You will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements … similar languages for investigative and detection use cases Practical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgment Experience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud security Working knowledge ...

looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform. What … and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost optimisation Producing platform health reports and identifying ...