26 to 50 of 170 SOAR Jobs in the UK

methodical approach to incident investigation and response. Experience & Knowledge Active Directory recovery and server recovery experience. Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Knowledge of vulnerability management and vulnerability scanning tools. Understanding of digital forensics principles and practices. Awareness ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

lead or senior escalation point within a SOC Exposure to threat hunting or detection improvement activities Experience working with: MITRE ATT&CK Familiarity with SOAR platforms and automated response workflows Relevant certifications such as: SC-200 GCIH/GIAC Experience working in regulated or public sector environments Understanding ...

future. Join us and help secure Britain's energy. About the role: A crucial part of our Cyber Threat Detection team, the SOAR Engineer (security orchestration and automated response) ensures that National Gas can continuously keep up-to-date with new and emerging threats and ensures we can detect and … and enrichments for alerts/incidents across a wide range of security tools. Lead the design, development, and engineer new content (playbooks) across our security orchestration and response (SOAR) and security information and event management (SIEM) platforms to meet the organisation’s strategic objectives and goals. Assist with managing ...

and continuous learning It would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security ...

engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and ...

Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details Up to £92 per hour (Inside IR35 ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology services ...

Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible). Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub). Experience working in agile delivery teams and collaborating with diverse technical stakeholders. Strong problem‐solving ...

Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities. Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE). Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials ...

purple team experience. Experience with CNAPP, CSPM or exposure management platforms. Experience with eBPF or modern observability tooling. Experience implementing security automation using SOAR or similar orchestration platforms. Knowledge of policy-as-code and security governance. Familiarity with supply chain security and software integrity. Experience evaluating AI/LLM security ...

flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences ...

and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting for decision ...

party security providers. Limiting business disruption from malicious activity by containing and eradicating malicious activity from information systems. Support the development of SIEM and SOAR solutions. Ensure all investigative activity is correctly documented in ticketing systems and followed up with the relevant support teams. Perform research on the latest security ...

party security providers. Limiting business disruption from malicious activity by containing and eradicating malicious activity from information systems. Support the development of SIEM and SOAR solutions. Ensure all investigative activity is correctly documented in ticketing systems and followed up with the relevant support teams. Perform research on the latest security ...

and domain expert, balancing hands‐on engineering contributions with strategic planning, partner engagement, and organisational leadership. Minimum Requirements Demonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows. Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high‐performing team culture. ...

networking protocols, operating systems (Windows/Linux), and security technologies (SIEM, EDR, IDS/IPS, firewalls, proxies) Hands‐on experience with SIEM tuning and SOAR automation Familiarity with frameworks like MITRE ATT&CK and cyber kill chain Knowledge of cloud platforms (Azure, AWS, GoogleCloud) and scripting/programming skills Excellent ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber Security Specialist ...

controlvalidationand security acceptance awareness of recognised frameworks and good practice, including NCSC guidance, Cyber Essentials, ISO 27001, Zero Trust, cloud security and SIEM/SOAR concepts. We recognise the value of lived experience.If you have experienceofcomplainingaboutany public body, we strongly encourage you to apply. Civil Service Pension scheme 32.5days annual ...