24 of 24 SOAR Jobs in London

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

assessing, designing and delivering AI, machine learning or generative AI use cases that improve security operations across platforms such as SIEM, EDR/XDR, SOAR, threat intelligence and vulnerability management, from prioritisation and proof of concept through to production integration.Ability to evaluate and tune AI-enabled security workflows for effectiveness ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating within ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security ...

automationWorking knowledge of infrastructure-as-codeThe ability to communicate technical risk clearly and concisely to non-technical stakeholdersDesirableExperience with detection-as-code practicesExperience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooksExperience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) toolingFamiliarity with ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

Engineering & OptimisationEnhance and optimise SIEM performance, coverage, and detection fidelityAssess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logicImplement automation and orchestration (SOAR) to streamline response activitiesLog Source Onboarding & IntegrationIdentify and onboard new log sources across cloud, network, endpoint, and application environmentsDevelop custom parsers, connectors, and ingestion playbooksCollaborate … Event Hubs, agents)Experience in detection engineering, threat modelling, and attacker behaviour analysisProven ability to build and tune correlation rules, dashboards, and alertsFamiliarity with SOAR tools and automation workflowsSecurity KnowledgeSolid understanding of networking, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security toolsKnowledge of MITRE ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

coordinating incident response and making decisions under pressureA track record of improving operational quality and consistency within a teamPractical experience with SIEM, XDR or SOAR toolsClear communication with both technical teams and senior stakeholdersScripting or automation experience in languages such as Python, PowerShell or Bash is desirable, as is exposure ...

environments and IT infrastructure.Familiarity with frameworks such as MITRE ATT&CK.Ability to analyse threats and translate them into detection capability.Nice to have:Experience with SOAR (Logic Apps/Splunk SOAR).Detection-as-code or CI/CD pipeline experience.Scripting in PowerShell, Python or similar.Experience with Git-based workflows.Relevant certifications (Microsoft ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security , while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and maintain cyber … Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring . Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation's security posture. ...

and Compliance teams. Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI-assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying … root causes and potential impact. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. ...

security space. These include (but are not limited to): E nd-to-end management of EDR solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication ...

emerging technologies, identifying high-value use cases and defining a secure target architecture and implementation roadmap. The Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate … Architecture and technical design. Knowledge of Generative AI, LLMs, RAG and agentic AI. Understanding of cyber security operations and SOC environments. Experience with SIEM, SOAR, EDR/XDR and security tooling integrations. Knowledge of data architecture, APIs, cloud platforms and integration patterns. Understanding of AI security, assurance and responsible AI. ...

with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization: Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. Leverage BigQuery … and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script for building ...