26 to 50 of 73 SOAR Jobs in London

managing and operating FortiGate firewalls Proven experience with Active Directory/Azure AD, including patch and group policy management Cloud native SIEM, SOCs and SOAR Windows Server, Windows 11, and Microsoft Application Suite Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and Ansible. Mobile Device ...

understanding of attack methods, layered security controls, patching and vulnerability management Familiarity with SIEM tooling such as Splunk Knowledge of threat intelligence platforms or SOAR tooling is a plus Analytical, detail focused and composed when priorities shift Initial 9-month contract Competitive Salary Hybrid working model #J-18808-Ljbffr ...

mail flow.Familiarity with identity and access management concepts (Okta, Azure AD, SSO/SAML) and how email security integrates into SOC and SIEM/SOAR workflows.Experience working with multiple levels of customer stakeholders – technical admins, CISOs, C-level executives, legal and compliance teams.Demonstrated ability to translate complex security architecture into ...

and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security Monitoring Design, implement, and maintain SIEM workspaces, data connectors, analytics … Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell and/or Python scripting. Good understanding of networking concepts including ...

technologies. Demonstrable experience troubleshooting complex network and security incidents in large-scale enterprise environments, including supporting live operational incidents, security transformation initiatives, SIEM/SOAR platforms, cloud networking and security (AWS, Azure, GCP), and Zero Trust architectures. Excellent communication, documentation, and stakeholder management skills, with the ability to produce high … with cloud networking and security (AWS, Azure, GCP) Experience with Infrastructure as Code (Terraform, Ansible) Knowledge of Zero Trust architectures Experience with SIEM and SOAR platforms Experience supporting large-scale security transformation programmes Benefits and perks There's one thing people can't stop talking about when it comes ...

hear from you if it's yours! Hands-on experience building with LLMs or agentic systems in production Detection engineering experience with a SIEM, SOAR, or detection-as-code pipeline Experience with fraud, anti-abuse, or trust and safety systems Cloud security and infrastructure hardening experience (AWS, identity providers, endpoint ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

senior technical point of contact for customers throughout the deployment lifecycle. Work with customer security and infrastructure teams to understand existing SOC, SIEM, EDR, SOAR and threat intelligence capabilities. Design and implement XSIAM solutions aligned to customer security requirements and operational objectives. Lead migration from legacy SIEM and security platforms ...

. Experience with CI/CD tooling (GitLab CI, GitHub Actions) and GitOps practices. Exposure to automated or AI-assisted SIEM detection engineering and SOAR concepts. Incident and Capacity Management understanding. What we offer you: Private pension plan - 10% of base salary contribution by Berenberg Private Health Insurance Enhanced parental ...

Lead Cloud Detection & Threat Modelling Engineer AWS, Azure, Sentinel, Elastic Stack, SOAR platforms 6 Month Fixed-Term Contract £110k-£120k pro rata 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature and … opportunities using frameworks such as MITRE ATT&CK Engineer and automate investigation and response workflows using tools such as Tracecat, Tines, Shuffle or similar SOAR platforms Build automated playbooks covering triage, containment, enrichment, escalation and response activities Conduct proactive threat hunting across cloud, endpoint, identity and application telemetry Collaborate with ...

monitoring, incident response, and mitigating and automating threat detection, is required. Mandatory Requirements: Proven experience designing, developing, and maintaining automated workflows using Hyperautomation or SOAR platforms (Google Chronicle/Siemplify, Microsoft Sentinel, Palo Alto XSOAR, Torq, Tines). Hands‐on experience with APIs and security tool integrations. Understanding of security ...

technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS. Ability to analyze and interpret logs from various sources. Familiarity with SIEM and SOAR solutions. Ability to perform threat research and analyze current threats. Understanding of business email compromise (BEC) cases and investigation techniques. Business Responsibilities Fluent in English. ...

Azure AI Foundry, AWS Bedrock or Gemini Enterprise Agent Platform. Agent orchestration frameworks, MCP integrations and AI‐assisted development tools/ADK.dev. SIEM, SOAR, identity governance and enterprise secrets‐management technologies. Cloud‐native modernisation, container platforms and reusable engineering standards. Relevant cloud architecture, cyber security or AI certifications. ...

team in London. The role emphasizes building and refining security tooling, SIEM/EDR configurations, and SOC collaboration. You will develop threat models, implement SOAR capabilities, manage SIEM/EDR and cloud/infrastructure logs across Azure, AWS, and on-prem environments. #J-18808-Ljbffr ...

customer‐facing technical role. Strong problem‐solving mindset with the ability to think strategically and act tactically. Practical experience integrating security solutions with SIEM, SOAR, DevOps, and enterprise observability platforms Additional Information Preferred Qualifications Certificates such as CCSP, AWS Solutions Architect, Azure Architect Expert, GCP Professional Cloud Architect, CKA/ ...

hybrid and multi‐cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities … expertise across the Microsoft security stack, including: Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR) Microsoft Security Copilot, automated investigation & response, and attack disruption Microsoft Defender for Cloud Apps and Defender for Cloud Proven experience leading incident response across identity ...

doing Building and improving security controls across our cloud and Microsoft 365 environments Developing detections, automations and response capabilities using SIEM, SOAR and security tooling Investigating and responding to security incidents and helping drive lessons learned Conducting threat hunting and using threat intelligence to identify potential risks Managing vulnerabilities and … and operational security processes What we’re looking for Security Engineering, Security Operations or Cloud Security Microsoft Azure (preferred), AWS or GCP SIEM and SOAR platforms such as Microsoft Sentinel or Splunk Microsoft Defender, Entra ID, EDR/XDR and identity security technologies Incident response, threat hunting and vulnerability management ...

Lead Cloud Detection & Threat Modelling Engineer - AWS, Azure, Sentinel, Elastic Stack, SOAR platforms 6 Month Fixed-Term Contract £110k-£120k pro rata 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature and ...

Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning ...

where you'll work with a wide range of organisations to design, develop and optimise detection and response capabilities across leading SIEM, XDR and SOAR technologies. You'll combine deep technical expertise with strong consulting skills, helping customers improve their security maturity through practical, scalable solutions. What … aligned with the MITRE ATT&CK framework and current threat techniques. Assessing customer telemetry and identifying opportunities to improve visibility and detection coverage. Building SOAR automations, integrations and response workflows to reduce manual effort. Developing incident response playbooks that support effective Security Operations Centre (SOC) processes. Applying threat intelligence ...

Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout the solution … and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable Adjustments: Respect ...

recording, credential rotation, least privilege, EPM/PRA) across on-prem and cloud workloads.* Lead complex integrations with AD/EntraID, IdPs, SIEM/SOAR, CSPM, ITSM, DevOps tooling (CI/CD), and secrets management.* Be responsible for the operational model: backup/recovery, DR, platform upgrades, policy hardening, performance … OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional desired capabilities* Experience with ...

labs, financial infrastructure, or critical infrastructure against nation-state threat models. Cloud-native forensics (AWS, GCP). Detection engineering and SIEM or SOAR tooling. Malware analysis or reverse engineering. We are committed to pay equity and transparency. Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration ...

audiences including leadership and C-suite teams with excellent communication skills. Experience with Security Operations (SecOps) toolset including Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence and Endpoint Detection and Response (EDR) tools. Channel experience, with an understanding of the Google Cloud Partner Ecosystem ...

security posture with automation and AI-assisted workflows. Ideal candidates will have strong DFIR experience in cloud environments, proficiency with SIEM/EDR/SOAR, and automation skills in Python to accelerate detections and responses. #J-18808-Ljbffr ...