19 of 19 SOAR Jobs in the North of England

M365 security) Knowledge of cloud security, email security, and vulnerability management Experience with KQL or other query languages Scripting skills (PowerShell, Python) Familiarity with SOAR and threat intelligence platforms Understanding of compliance frameworks (ISO 27001, NIST, Cyber Essentials) Future opportunities SOC Manager/Head of Security Operations Cyber Security Technical ...

e.g., Python, Go, Bash) for security automation or analysis. Experience with container security monitoring (Docker, Kubernetes). Experience with Detection-as-Code. Experience with SOAR platforms. Knowledge of digital forensics and incident response procedures. Understanding of malware analysis techniques. It would be great if you have one or more ...

risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers ...

governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response (Cortex XDR or an equivalent EDR/XDR platform). Experience with email ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting for decision ...

controlvalidationand security acceptance awareness of recognised frameworks and good practice, including NCSC guidance, Cyber Essentials, ISO 27001, Zero Trust, cloud security and SIEM/SOAR concepts. We recognise the value of lived experience.If you have experienceofcomplainingaboutany public body, we strongly encourage you to apply. Civil Service Pension scheme 32.5days annual ...

feedback to enhance detection logic and coverage Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency Identify gaps in telemetry, monitoring, or processes and escalation improvement opportunities to support continuous enhancement of detection ...

providing feedback to enhance detection logic and coverageContribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiencyIdentify gaps in telemetry, monitoring, or processes and escalate improvement opportunities to support continuous enhancement of detection and ...

teams, external forensic specialists, law enforcement, and third‐party partners where required. Partner with Security Operations Centre (SOC) teams to enhance detection, monitoring, automation, and response capabilities through effective use of SIEM, EDR/XDR, and SOAR technologies. Contribute to security operations projects, ensuring seamless integration of new technologies, processes … people leadership role. Experience managing and reporting through strong regulation systems like NIS2 Strong hands‐on expertise with SIEM, EDR/XDR, SOAR, threat detection, monitoring, and incident response technologies. Practical experience in malware analysis, digital forensics, threat hunting, and network security investigations. Proven ability to lead and coordinate major ...

Beyond is hiring a Senior Security Engineer to protect Google Cloud estates for regulated enterprise clients. You will lead hands-on SecOps work across GCP, SIEM/SOC deployments, and threat-focused projects, while building ...

SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python … across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination ...

Bynd Limited is searching for a Senior Security Engineer in Manchester to lead security deployments for regulated clients, primarily in Google Cloud environments. This role involves hands-on technical work, mentoring junior team members, and ...

Google Cloud Estates. As a Premier Google Cloud Partner, we deliver Google Unified Security (GUS) engagements across the full stack — from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/… rule packs, playbooks, and points of view that make the next engagement faster than the last. What you'll do Google SecOps (SIEM/SOAR) Lead end‐to‐end SecOps deployments — tenant setup, multi‐tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings ...

Google Cloud Estates. As a Premier Google Cloud Partner, we deliver Google Unified Security (GUS) engagements across the full stack - from greenfield SIEM/SOAR deployments and SOC modernisation programmes to detection engineering, posture management, threat hunting, and incident response uplift. Secure GCP estates with the adoption of CI/… rule packs, playbooks, and points of view that make the next engagement faster than the last. What you’ll do Google SecOps (SIEM/SOAR) Lead end-to-end SecOps deployments — tenant setup, multi-tenant architecture, data ingestion, retention design, RBAC, and feed onboarding. Build and maintain parsers, UDM mappings ...

strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success criteria ...

enable collaboration while remaining secure.You will:Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil.Own Tooling & Platform: Develop and improve the tooling the global SIRT/… and production environments, taking ownership from identification to resolution.Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ...

plans before taking responsibility for successful delivery. There’s also an increasing focus on modern security operations, so exposure to areas such as SIEM, SOAR and XDR would be useful. Beyond project delivery, you’ll act as a senior technical escalation point, carry out customer security audits and health checks … remaining involved through implementation and ongoing support. Experience around security compliance frameworks and public-sector environments would be useful, as would exposure to SIEM, SOAR, XDR and infrastructure automation. More than anything, they want somebody who can take technical ownership. Someone who can get into the detail when needed, communicate ...