22 of 22 SOAR Jobs in the North of England

risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

and access management platforms and cloud security posture management tools. Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows. Familiarity with SOAR platforms or orchestration tools for automated response and enrichment. Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

feedback to enhance detection logic and coverage Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency Identify gaps in telemetry, monitoring, or processes and escalation improvement opportunities to support continuous enhancement of detection ...

ensure security is embedded into the SDLC (DevSecOps). Drive Security Engineering & Automation: Establish best practices for operational readiness, leveraging AI, security automation (SOAR), and threat analytics to streamline delivery, reduce risk, and optimize capacity across technical squads. Executive Security Risk & Delivery Reporting: Present delivery updates, threat/risk assessments ...

security services delivery . Ability to understand and advise on end-to-end customer environments Experience with security technologies such as SIEM, EDR and SOAR Ability to drive customer retention, customer satisfaction, and long-term strategic partnerships . Proven experience building and governing technical roadmaps, strategic improvement plans, and customer ...

Skills Azure Databricks, Data Factory, or Data Lake Kafka, Event Hubs, or Spark Kubernetes Azure Monitor, Grafana, or Prometheus Cybersecurity experience, including SIEM/SOAR technologies Financial Services experience Ideal Candidate You will be a Software/Data Engineer first , with strong Azure expertise and the ability to work across ...

and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. Implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. Work with Cyber … Cloud, Entra security capabilities. Experience with Security Copilot and other AI defence capabilities highly desirable. Experience implementing and maintaining security telemetry, integrations, automation and response workflows. Knowledge of cloud security controls and Azure security concepts, while working effectively with separate cloud platform and operations teams. Understanding of identity security, workload ...

design, implementation, project delivery, and technical ownership, rather than focusing purely on BAU support. Responsibilities: FortiGate firewalls SD-WAN and SASE VPN technologies SIEM, SOAR and XDR environments Network and security architecture Customer security projects Technical design and implementation Security audits and improvements LAN, WAN, routing and switching Automation and ...

temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with the ability to build strong professional relationships. Strong team player with ...

SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python … across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination ...

and technical ownership, rather than focusing purely on BAU support. You will work on FortiGate firewalls, SD-WAN/SASE, VPN technologies, SIEM/SOAR and XDR environments, and security audits across complex environments, delivering secure, resilient infrastructure for public sector #J-18808-Ljbffr ...

bent de drijvende kracht achter de (versnelde) implementatie van een Security Operations Center (SOC). Ontwikkelen en onderhouden van detectieregels en playbooks (met SOAR/SIEM-tools); Samenwerken met collega’s om incidenten snel en effectief te mitigeren; Continu verbeteren van onze monitoring- en responsprocessen; Rapporteren van bevindingen en adviseren … Diepgaande, specialistische kennis van de Azure security-stack; Hands-on ervaring met Microsoft Sentinel voor het opzetten van detectieregels, incident response (SOAR) en threat hunting; Ervaring met Microsoft Defender for Cloud voor Cloud Security Posture Management (CSPM) en vulnerabilitymanagement; Sterke kennis van EntraID (AzureAD), met name rondom Identity Protection ...

strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success criteria ...

intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats … patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across two or more ...