15 of 15 SOAR Jobs in the North of England

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

experience with Git/version control, code reviews and automation . Strong communication and stakeholder management skills. Desirable Skills Purple teaming or adversary emulation. SOAR integration and automation. Python Scripting. Data modelling and log normalisation. Machine Learning-based anomaly detection. Relevant security certifications such as GIAC or cloud security certifications ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

feedback to enhance detection logic and coverage Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency Identify gaps in telemetry, monitoring, or processes and escalation improvement opportunities to support continuous enhancement of detection ...

Microsoft Defender Microsoft Entra ID/Microsoft 365 SIEM and SOC environments Cloud security remediation Azure tenant rationalisation Security data ingestion and detection engineering SOAR/Logic Apps and security automation Service transition and operational handover Hands-on Microsoft Sentinel or Defender engineering experience is not required. ...

security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement plans, and customer ...

evidential equivalent experience of Security Information & Event Management (SIEM) tools covering; Data Management, Searching & Reporting, Dashboard Development. Certificates or evidential equivalent experience of Security Orchestration, Automation, and Response (SOAR) solutions, Intrusion Detection Systems (IDS)/Intrusion Prevention Systems (IPS) solutions and Endpoint Detection & Response (EDR) solutions. Behaviours We'll assess ...

and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. Work with Cyber … Cloud, Entra security capabilities. Experience with Security Copilot and other AI defence capabilities highly desirable. Experience implementing and maintaining security telemetry, integrations, automation and response workflows. Knowledge of cloud security controls and Azure security concepts, while working effectively with separate cloud platform and operations teams. Understanding of identity security, workload ...

design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation and ...

SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python … across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination ...

and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

wider cyber domains – Identity Security, Sec‐Ops, Data Security and AI Security – to show how Network & Edge controls integrate with identity providers, SIEM/SOAR/MDR (e.g. FortiSIEM, FortiSOAR), data loss prevention and AI usage controls. Utilise vendor‐specific tools and resources to support solution design and validation. Maintain ...

intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats … patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across two or more ...