1 to 25 of 41 SOAR Jobs in the South East

Skills, Qualifications & Experience: Scripting or automation skills (Python, PowerShell, Bash). Experience in research, higher education, healthcare, or similarly open computing environments. Familiarity with SOAR tooling or automation platforms. Experience with ISO27001:2022 or similar standards. Relevant certifications (e.g., ISC2 CC, CompTIA Security+). Our Benefits: Salary: Competitive salary (dependent ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

tools Experience integrating custom-built applications into SIEM platforms Experience with implementation of automation solutions, enhancing SOC efficiency and speeding incident response Familiarity with Security Orchestration, Automation, and Response (SOAR) platforms, including developing and maintaining automated response playbooks Experience with threat hunting focused on application code, application, infrastructure and hosting ...

methodical approach to incident investigation and response. Experience & Knowledge Active Directory recovery and server recovery experience. Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Knowledge of vulnerability management and vulnerability scanning tools. Understanding of digital forensics principles and practices. Awareness ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details Up to £92 per hour (Inside IR35 ...

edge of SOC 3.0: AI-assisted triage, agentic response, notebook-driven investigation, and engineering-led operations. The successful candidate is equal parts DFIR practitioner, SOAR architect, SOC AI-augmentation strategist, and product leader.The Role• Own and execute the multi-year strategy and roadmap for evolving and scaling incident response capabilities … capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.• Define and oversee SOAR playbook automation builds, documentation, and ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and ...

including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

waterfall) with senior stakeholders and government systems. Technical & Architectural Competencies SOC Technologies: Design, build, and deployment experience using at least two core technologies: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Architectural Frameworks: Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and system modeling. Environments: Proficiency in both On-Premises and ...

proven capability in SOC deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/ ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

experience Understanding of SOC operations and incident response (essential) Knowledge of Microsoft Defender and/or Microsoft Sentinel (essential) Experience with SIEM, XDR, EDR, SOAR or Threat Intelligence platforms Strong technical presentation skills Ability to engage both technical and business stakeholders What's On Offer Up to £75,000 basic ...

threat detection and investigation. Create and maintain analytic rules and detection logic aligned to emerging threats and business requirements. Develop Logic Apps and SOAR workflows to automate security response. Implement CI/CD pipelines using Azure DevOps/Git for controlled SIEM content deployment. Automate SIEM configuration and deployments across ...

skills & experience Proven experience in SOC Architecture within a senior role. Experience designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong understanding of Security Operations best practice, secure architecture principles, and risk assessment. Experience with on-premises and cloud ...

engineering, SOC deployment, or security infrastructure. Proven experience designing, building, and deploying SOC solutions for previous clients. Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence. Strong experience deploying and configuring applications in cloud and/or on-premises environments, particularly for high data ingest ...

and OT, with on-going threat detection, rapid response, and risk reduction. You will collaborate with IT/OT teams, maintain security platforms (SIEM, SOAR, EDR, and email security), and support audits and continuous improvement. A CTC clearance is required for eligibility. #J-18808-Ljbffr ...