1 to 25 of 103 SOAR Jobs in the UK excluding London

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

with relevant experience is also considered Desirable In-depth Microsoft Sentinel expertise: use case and rule development, workbooks and playbooks, KQL, Logic Apps and SOAR Managing Sentinel as an MSSP, including Azure Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender for Endpoint, Identity and Cloud ...

Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps How this aligns to our Values Customer ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

and Event Management (SIEM) Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms Security Event Monitoring & Alert Triage Log Analysis & Event Correlation Security Detection Engineering Security Orchestration, Automation & Response (SOAR) Incident Response & Threat Detection Security Incident Investigation & Response Incident Containment, Eradication & Recovery Endpoint Detection & Response (EDR) Microsoft Defender XDR CrowdStrike Falcon ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...