14 of 14 SOAR Jobs in the North of England

desire to keep developing technical and professional security skills. Desirable Technical Knowledge Microsoft365 security technologies and the wider Microsoft E5 security ecosystem. SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies. Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts. ...

security monitoring, and cyber risk reduction within complex enterprise environments. Proven experience in implementing, configuring, maintaining, and optimising security technologies including SIEM, EDR, XDR, SOAR, vulnerability management platforms, cloud security solutions, identity and access management controls, endpoint protection, and threat intelligence capabilities. Skilled in cyber incident investigation, threat hunting, security ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

feedback to enhance detection logic and coverage Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency Identify gaps in telemetry, monitoring, or processes and escalation improvement opportunities to support continuous enhancement of detection ...

ensure security is embedded into the SDLC (DevSecOps). Drive Security Engineering & Automation: Establish best practices for operational readiness, leveraging AI, security automation (SOAR), and threat analytics to streamline delivery, reduce risk, and optimize capacity across technical squads. Executive Security Risk & Delivery Reporting: Present delivery updates, threat/risk assessments ...

design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation and ...

SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python … across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination ...

and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

event response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagementsYou will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements … using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking ...

strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success criteria ...

intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats … patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across two or more ...