126 to 150 of 152 SOAR Jobs in England

risk-based vulnerability management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident … specifically utilizing EPSS (Exploit Prediction Scoring System) alongside CVSS to determine patching prioritisation. Ability to design and influence automated response playbooks using SOAR platforms Practical experience creating reference architectures and patterns for engineering teams. Proven ability to design and deploy automated preventive and detective guardrails at scale. Ability to solve ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage improvement Cloud security engineering and scalable security architecture design Automation, SOAR, playbooks, enrichment workflows and response improvement Scripting/programming skills such as Python and PowerShell Infrastructure-as-code, CI/CD pipelines, version control and ...

researchers; Security Engineering & Orchestration: Design, implement, and optimize core security infrastructure (e.g. EDR,, Zero Trust, IAM, and DLP). Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment; Incident Response Leadership: Lead the technical response … security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...

authoring and maintaining playbooks for the most significant incident types and owning clear, calm communication up to and including the CISO. Response automation – build SOAR-style automation to accelerate and standardise response, targeting automated first-actions for high-priority incidents and reducing manual triage so the team scales without proportional … Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across security tooling and ticketing. Proficiency in Python or an equivalent language for detection development, log parsing and automation, producing readable ...

/YAML; Git (or comparable Source-Control Platforms; Infrastructure-as-Code (Terraform or equivalent); CI/CD Tooling; Automated Configuration Management; Configuration Testing & Validation; Security Orchestration & Workflow Automation. You Do Not Need to be Full-Time Software Developer , but you should approach Security Technology as an Engineering Problem rather than … Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore be both ...

and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius … solid understanding of MITRE ATT&CK and KQL (or equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity ...

Sentinel; build custom parsers and data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections … source onboarding, custom parsers and data normalisation Advanced KQL development and optimisation Analytic rule/detection logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause ...

accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate … Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability management. ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps ...

Lead solution architecture across the full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure on-premise …/Security Architect in complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise security ...

This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps Solutions Architect … operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills for proposals and technical documentation Full ...

and knowledge retrieval Developing AI solutions using Python and modern AI frameworks Working with vector databases and retrieval technologies Integrating AI capabilities with SIEM, SOAR and wider cyber platforms Designing prompts and optimising LLM performance Building proofs-of-concept and technical prototypes Developing evaluation frameworks to test model performance, accuracy … development Vector databases and knowledge retrieval AI evaluation and model testing API integration and secure software engineering Cyber Security/SOC environments SIEM/SOAR technologies Rapid prototyping and PoC development You don't need to have done everything above. Strong practical GenAI engineering experience combined with an interest ...

Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response. ...

and ensure the organisation is prepared to respond Improve detection coverage, security tooling, telemetry, automation and operational processes Manage key security platforms including SIEM, SOAR, EDR and NDR Provide risk based decision making around cyber incidents, containment, recovery and remediation Manage external security partners and ensure effective delivery and service … incident response within a complex enterprise environment Hands-on experience across security monitoring, incident response, threat intelligence and detection engineering Strong understanding of SIEM, SOAR, EDR, NDR, logging, telemetry and security tooling Proven experience managing major cyber incidents, including containment, recovery and executive communication Strong understanding of emerging cyber threats ...

workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/CD pipelines to multiple environments. Strong familiarity with SOAR and Logic Apps is essential. #J-18808-Ljbffr ...

workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/CD pipelines to multiple environments. Strong familiarity with SOAR and Logic Apps is essential. #J-18808-Ljbffr ...

Sanderson Government and Defence seeks a SOAR/SIEM Security Engineer for a critical national infrastructure project. You will design and automate detection workflows, tune Splunk dashboards and support live incident response in OT/IT environments, while maintaining high availability and safety standards. This 18-month FTC role requires ...

Implement, and Optimize (PDIO) methodologies. Product Influence: Synthesize customer feedback to prioritize and advocate for Splunk product and service improvements. Innovation: Apply expertise in security orchestration, automation, and AI Ops to deliver innovative, scalable customer outcomes. Intellectual Capital: Lead the creation of digital assets, procedures, and standardized methodologies for Splunk … security space. Deep technical expertise in the Splunk platform, with a demonstrated ability to drive security adoption and customer outcomes. Advanced skills in automation, SOAR orchestration, and AI-driven security operations. Demonstrated ability to mentor and develop talent across technical consulting teams. Superb communication, collaborator management, and presentation skills, with ...

detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

Engineer to join its Security Operations Centre at the Head Office in Lutterworth. You will develop and maintain SOC tooling, including SIEM/SOAR, to define a use case-driven logging, monitoring and response capability across the organisation. The role reports to the Director of Security Operations and involves ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...