26 to 50 of 57 SOAR Jobs in the UK

. AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms). Cloud & Search Interface Familiarity: Working comfort navigating the AWS Management Console (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics). Communication & Documentation ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

Engineering & OptimisationEnhance and optimise SIEM performance, coverage, and detection fidelityAssess and improve SIEM architecture, including ingestion pipelines, parsing, and correlation logicImplement automation and orchestration (SOAR) to streamline response activitiesLog Source Onboarding & IntegrationIdentify and onboard new log sources across cloud, network, endpoint, and application environmentsDevelop custom parsers, connectors, and ingestion playbooksCollaborate … Event Hubs, agents)Experience in detection engineering, threat modelling, and attacker behaviour analysisProven ability to build and tune correlation rules, dashboards, and alertsFamiliarity with SOAR tools and automation workflowsSecurity KnowledgeSolid understanding of networking, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security toolsKnowledge of MITRE ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security MonitoringDesign, implement, and maintain SIEM workspaces, data connectors, analytics rules … Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell and/or Python scripting. Good understanding of networking concepts including ...

and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow ...

coordinating incident response and making decisions under pressureA track record of improving operational quality and consistency within a teamPractical experience with SIEM, XDR or SOAR toolsClear communication with both technical teams and senior stakeholdersScripting or automation experience in languages such as Python, PowerShell or Bash is desirable, as is exposure ...

environments and IT infrastructure.Familiarity with frameworks such as MITRE ATT&CK.Ability to analyse threats and translate them into detection capability.Nice to have:Experience with SOAR (Logic Apps/Splunk SOAR).Detection-as-code or CI/CD pipeline experience.Scripting in PowerShell, Python or similar.Experience with Git-based workflows.Relevant certifications (Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security , while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and maintain cyber … Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring . Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation's security posture. ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...