1 to 25 of 26 SOAR Jobs in the North of England

governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response (Cortex XDR or an equivalent EDR/XDR platform). Experience with email ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

security monitoring capabilities. Manage log ingestion, routing, parsing, normalization, and transformation using Splunk Enterprise and Cribl Stream. Develop automation workflows and security playbooks using SOAR technologies. Analyze security events and support threat detection and incident response activities. Troubleshoot security monitoring, network, and infrastructure issues. Create technical documentation, operational procedures, and ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting for decision ...

designing reusable pipeline templates and secure engineering guardrailsDrive automation across build, test, release, and security validation processesIntegrate DevSecOps tooling with enterprise platforms (SIEM, SOAR, CMDB, vulnerability management)Security Integration and Risk Management:Ensure alignment with Avnet security policies, including logging, monitoring, and incident response requirementsIntegrate telemetry from pipelines into centralized ...

within or alongside Security Operations Centre(s).Experience working in all hyperscaler environments, preferably holding Professional Cloud Architect or equivalent Certification.Experience with multiple SIEM & SOAR Tooling, preferably Google SecOps (formerly Chronicle/Simplify).Strong written, verbal and presentation skills.Excellent communication and interpersonal skills, with the ability to build strong relationships ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

hybrid environments Oversee patching, upgrades, and platform performance Drive platform improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards ...

CrowdStrike technologies. Design secure architectures for hybrid and multi-cloud environments following Zero Trust principles. Deliver complex security projects across SOC, SIEM/SOAR, XDR/EDR, Identity, Cloud Security, and Vulnerability Management . Provide technical leadership, create architecture documentation, and improve delivery standards. Work with clients, pre-sales, and ...

with Zero Trust Client configuration and rollout, including secure network and data access.Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories.Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting secure ...

security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation and SOAR AI-driven Security Operations or Agentic AI Threat Intelligence integration Telemetry Engineering About You You'll likely be an experienced Detection Engineer, Security Platform Engineer ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

Qodea in Manchester is seeking a Senior Security Engineer to lead client engagements focused on Google Cloud Security solutions. This hands-on role requires deep experience with Google SecOps and SIEM delivery, guiding clients towards ...

and RBAC. Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments. Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation. Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts. Preferred QualificationsRelevant industry …/Azure/GCP Security. HPE SASE & Security certifications or technical accreditations. Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies. Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA and Cyber Essentials (or equivalent ...

with occasional travel to customer sites as required Salary: Up to £100,000 + excellent benefits About the Role We are seeking a Principal SOAR Engineer to lead the design, architecture and delivery of advanced security automation solutions across enterprise environments. As the technical authority for SOAR engineering, you will … position with occasional travel to customer sites for workshops, technical engagements and project delivery. Key Responsibilities Lead the design and architecture of enterprise-scale SOAR solutions using the Splunk platform. Define automation strategy and identify opportunities to improve detection, investigation and response capabilities. Design, develop and optimise advanced SOAR playbooks ...

Bynd Limited is searching for a Senior Security Engineer in Manchester to lead security deployments for regulated clients, primarily in Google Cloud environments. This role involves hands-on technical work, mentoring junior team members, and ...

apply and refine threat-informed detection engineering practices, standards and quality controls, strengthening the organisation’s ability to identify and respond to cyber threats.Senior SOAR & Detection-as-Code (DaC) AnalystThis role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code practices. … will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologiesYou will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute to relevant ...

apply and refine threat-informed detection engineering practices, standards and quality controls, strengthening the organisation’s ability to identify and respond to cyber threats.Senior SOAR & Detection-as-Code (DaC) AnalystThis role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code practices. … will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologiesYou will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute to relevant ...

looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform click apply ...

Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build and maintain workflows across SIEM, EDR, and SOAR platforms Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate … cloud security, identity, and event-driven automation Strong communication and analytical skills Security clearance (NPPV and/or SC) may be required. Technical Knowledge Security orchestration and automation principles Scripting and integration patterns (APIs, webhooks) SOC detection and response workflows Threat intelligence integration and use case design Cloud and identity ...

Google Cloud Estates. As a Premier Google Cloud Partner, we deliver Google Unified Security (GUS) engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/… rule packs, playbooks, and points of view that make the next engagement faster than the last. What you'll do Google SecOps (SIEM/SOAR) Lead end‐to‐end SecOps deployments — tenant setup, multi‐tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings ...

event response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagementsYou will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements … using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking ...