51 to 75 of 96 SOAR Jobs in England

proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture Produce evidential-standard reporting fit for auditors, regulators and law enforcement Mentor the analyst team and ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats … and career progression opportunities Candidates must be eligible to obtain SC clearance What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

with common attack vectors and defence techniques. Proven ability to build and deploy automation using code, APIs, and orchestration tools (e.g., Python, workflow engines, SOAR platforms). Practical experience with AI/LLM systems and automation, including prompt engineering, retrieval augmented generation (RAG), function‐calling, or agent‐based tools. Skilled ...

monitoring for FinOps‐specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped ...

decision-making, streamline workflows, and drive business outcomes. Bonus points: Currently developing Go-based microservices for scalable, high-throughput architectures; experience in cybersecurity, SIEM, SOAR, or adjacent security domains; hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks. Benefits Market-leading compensation and equity awards ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization #J-18808-Ljbffr ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength and ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

small founding team where architecture, code, debugging, customer context and hiring input all overlap. Desirable experience: Cybersecurity product experience in EDR, XDR, SIEM, SOAR, Zero Trust, identity security, network security or deception technology. Experience implementing cryptographic data structures, signed records, PKI integrations or tamper-evident audit systems. Experience with Microsoft ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

hybrid role, primarily at the Basingstoke office. You will lead the design, deployment and continuous improvement of our SOC technologies, including SIEM, XDR, SOAR, and custom automation. You’ll mentor SOC engineers, develop automation, and own customer onboarding with our SOC Operations. Expect a fast-paced environment with labs ...

Rule Tuning, Log Ingestion Maintenance of Platform Architecture Detection Engineering Skills/Must have: Strong Defender Suite knowledge: Defender XDR, Endpoint, Identity Sentinel One (SOAR Automation, Playbook operations, Logic Apps) Purview (DLP) Vulnerability Management Tooling i.e. Qualys Salary: £82,500 Basic Salary Per Annum #J-18808-Ljbffr ...

technical complexity into clear business outcomes Confidence presenting to both technical and non-technical stakeholders A solid understanding of modern security architectures, including SIEM, SOAR, and managed security services Exposure to advanced security domains such as DDoS protection, WAF, IAM, EDR, MDM, and vulnerability management Continuous learning is a core ...

and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability … management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication ...

Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority … Skills/Qualifications Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS ...

Splunk SOAR Engineer - Splunk SOAR Phantom - FTC 12 Months £110k plus bens - UK REMOTE Senior SOAR Engineer | Splunk SOAR | Splunk Enterprise Security | Cyber Security | Security Automation | Python | MITRE ATT&CK | NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team ...

Splunk SOAR Engineer - Splunk SOAR Phantom - FTC 12 Months £110k plus bens - UK REMOTE Senior SOAR Engineer Splunk SOAR Splunk Enterprise Security Cyber Security Security Automation Python MITRE ATT&CK NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team ...

Qodea in Manchester is seeking a Senior Security Engineer to lead client engagements focused on Google Cloud Security solutions. This hands-on role requires deep experience with Google SecOps and SIEM delivery, guiding clients towards ...

full project lifecycle, from architecture and implementation through to automation, threat detection, and stakeholder engagement. Strong experience with Microsoft Sentinel & Defender SIEM, XDR & SOAR expertise Security architecture and deployment experience Scripting and automation skills SC-200, SC-100 or AZ-500 certifications desirable You'll act as a trusted advisor ...

architecture reviews to ensure products are secure by design. You will design and scale enterprise SIEM, develop detection logic, manage SBOM, prioritize vulnerabilities, build SOAR playbooks, and support audit and regulatory activities while fostering a security-first culture. #J-18808-Ljbffr ...

and RBAC.* Hands-on experience with AWS, Microsoft Azure, Google Cloud, virtualization, and hybrid cloud environments.* Familiarity with AI-driven security, XDR, SIEM, SOAR, APIs, MCP and security automation.* Excellent customer-facing presentation, communication, and solution design skills, with experience delivering workshops, demonstrations and proof-of-concepts.**Preferred Qualifications*** Relevant …/Azure/GCP Security.* HPE SASE & Security certifications or technical accreditations.* Experience with AI-powered security operations, XDR, SIEM/SOAR, and security automation technologies.* Understanding of security and compliance frameworks, such as Zero Trust, NIST CSF, ISO 27001, CIS Controls, GDPR, NIS2, DORA and Cyber Essentials (or equivalent ...

Senior SOC Engineer at Nomios, you’ll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and … response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection and response capabilities. You’ll play a central role in security orchestration and automation, helping reduce time to detect and respond by refining playbooks and building intelligent workflows. You’ll also lead customer onboarding in collaboration ...