76 to 100 of 152 SOAR Jobs in England

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

experience Understanding of SOC operations and incident response (essential) Knowledge of Microsoft Defender and/or Microsoft Sentinel (essential) Experience with SIEM, XDR, EDR, SOAR or Threat Intelligence platforms Strong technical presentation skills Ability to engage both technical and business stakeholders What's On Offer Up to £75,000 basic ...

. Experience with CI/CD tooling (GitLab CI, GitHub Actions) and GitOps practices. Exposure to automated or AI-assisted SIEM detection engineering and SOAR concepts. Incident and Capacity Management understanding. What we offer you: Private pension plan - 10% of base salary contribution by Berenberg Private Health Insurance Enhanced parental ...

threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging threats and business requirements. Develop Logic Apps and SOAR workflows to automate security response. Implement CI/CD pipelines using Azure DevOps/Git for controlled SIEM content deployment. Automate SIEM configuration and deployments across ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

engineering, SOC deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest ...

identity and access management concepts such as Okta, Azure AD, SSO, and SAML, along with how email security integrates into SOC and SIEM/SOAR workflows.Experience engaging technical administrators, CISOs, C-level executives, and legal and compliance teams, with the ability to translate complex security architecture into clear, value-focused ...

Engineer's primary role will be to develop and maintain Security Operations Centre (SOC) tools, including Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR), to define and continuously develop a use case-driven logging, monitoring and response capability to ensure responsiveness and resilience to cyber … management of security incidents from detection to resolution. Degree-level qualification; preferably in a technical, engineering or computing subject Strong understanding of Splunk SIEM and SOAR solutions. Part of the Loxam Group, Nationwide Platforms are the UK's leading specialist provider of Powered Access rental equipment, with the largest and ...

and OT, with on-going threat detection, rapid response, and risk reduction. You will collaborate with IT/OT teams, maintain security platforms (SIEM, SOAR, EDR, and email security), and support audits and continuous improvement. A CTC clearance is required for eligibility. #J-18808-Ljbffr ...

Harvey Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop ...

technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. Ability to analyze and interpret logs from various sources. Familiarity with SIEM and SOAR solutions. Ability to perform threat research and analyze current threats. Understanding of business email compromise (BEC) cases and investigation techniques. Business Responsibilities Fluent in English. ...

team in London. The role emphasizes building and refining security tooling, SIEM/EDR configurations, and SOC collaboration. You will develop threat models, implement SOAR capabilities, manage SIEM/EDR and cloud/infrastructure logs across Azure, AWS, and on-prem environments. #J-18808-Ljbffr ...

monitoring for FinOps‐specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real‐time response. Support secrets and key‐management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped ...

Experience with Defender for Endpoint, Defender for Identity, Defender for Office 365 and/or Defender for Cloud Apps. Strong understanding of SIEM, XDR, SOAR, detection engineering and threat hunting. Experience designing solutions across hybrid and multi-cloud environments. Proven ability to lead complex client engagements and solutioning opportunities. Strong ...

teams, external forensic specialists, law enforcement, and third‐party partners where required. Partner with Security Operations Centre (SOC) teams to enhance detection, monitoring, automation, and response capabilities through effective use of SIEM, EDR/XDR, and SOAR technologies. Contribute to security operations projects, ensuring seamless integration of new technologies, processes … people leadership role. Experience managing and reporting through strong regulation systems like NIS2 Strong hands‐on expertise with SIEM, EDR/XDR, SOAR, threat detection, monitoring, and incident response technologies. Practical experience in malware analysis, digital forensics, threat hunting, and network security investigations. Proven ability to lead and coordinate major ...

and advance the Security Operations Centre. You will manage investigations, drive threat detection enhancements, and lead a team across SIEM, EDR, and SOAR platforms in a hybrid UK-based role. The role emphasizes incident response, forensics, automation, and CI/CD security, with collaboration across DevOps, IT, and development teams ...

contribution within a small team environment Desirable Skills Experience with platforms such as CrowdStrike or similar ecosystems Experience building automation for enrichment and response (SOAR, scripting) Experience working with managed security providers or specialist partners Benefits 100% renewable energy powering the riverside factory On-site gym and exercise studio Subsidised ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength and ...

customer engagement models. + Technical Expertise - Deep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software. - Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools. + Sales Acumen - Strong consultative selling skills. - Ability to translate technical features into business benefits. + Leadership & Communication - Proven ability ...

strategy, resource planning, and customer engagement models.Technical ExpertiseDeep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software.Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools.Sales AcumenStrong consultative selling skills.Ability to translate technical features into business benefits.Leadership & CommunicationProven ability to lead cross-functional teams.Excellent presentation, negotiation, and ...

and real-world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations … developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar Scripting and automation capability using Python, PowerShell or similar, including working with APIs Experience ...

Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout the solution … and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable Adjustments: Respect ...

recording, credential rotation, least privilege, EPM/PRA) across on-prem and cloud workloads.* Lead complex integrations with AD/EntraID, IdPs, SIEM/SOAR, CSPM, ITSM, DevOps tooling (CI/CD), and secrets management.* Be responsible for the operational model: backup/recovery, DR, platform upgrades, policy hardening, performance … OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional desired capabilities* Experience with ...

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks ...