51 to 75 of 160 SOAR Jobs in the UK

and domain expert, balancing hands‐on engineering contributions with strategic planning, partner engagement, and organisational leadership. Minimum Requirements Demonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows. Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high‐performing team culture. ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber Security Specialist ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and ...

Delivery within secure/enterprise/defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with ...

experience: You must have strong practical knowledge of SIEM, EDR/XDR, incident investigation and response, detection engineering, alert triage, threat intelligence, threat hunting, SOAR, automation and SOC reporting. Experience with Microsoft Sentinel, Microsoft Defender XDR and the wider Microsoft security ecosystem is strongly desirable. 3. Fluent business English: This ...

aligned environmentsDelivery within secure/enterprise/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active ...

security analytics solutions within large enterprise environments6+ years of experience with Security Operations Center (SOC) tooling, processes, and workflowsHands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligenceAbility to conceive, architect, and develop effective correlation and detection rulesFamiliarity with a range of SIEM technologies, such as Splunk ...

UK. Understanding of common cyber threats and attacker tactics, techniques and procedures and an ability to identify appropriate mitigation strategies Experience using automation or SOAR platforms Knowledge of incident response principles Experience using MITRE ATT&CK Experience using Splunk Experience using an intelligence platform Software development, scripting or programming skills ...

ideally have: Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and ...

including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements. Technical Leadership … security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk into ...

proficiency in Kusto Query Language (KQL), with proven experience writing complex, optimized queries for detection and hunting. Strong, demonstrated experience automating security workflows using SOAR platforms, APIs, or scripting languages (Python, PowerShell). Proven ability to operate with a high degree of autonomy, managing competing priorities and complex projects with ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design.Additional language requirements: N/A.Role Experience: Experience in senior roles at Financial Services or Critical National ...

and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Strong teamwork skills and attention to detailAbility to work independently as needed yet always thinking as part of a teamSelf-motivation and able ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre ...

FWaaS).Managing App segmentation and connector deployment.Zero Trust Client Connector configuration and rollout.Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc.Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models.Conducting ...

similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and/or PowerShell Exposure to SOAR, playbooks or security automation Comfortable working directly with clients and taking ownership of technical issues This could suit an experienced SOC Analyst looking to move further into ...

detection-as-code discipline across the detection lifecycle: version-controlled content, release rigor, automated testing, and telemetry quality standards, executed jointly with the SIEM, SOAR, & Agent Development team that owns the underlying pipeline and platform.Drive operational measurement toward compressing the defender's detect-decide-act cycle against AI-accelerated adversaries ...

cloud environmentExperience working across a technology stack on difficult security challenges and initiativesExperience with SIEM platforms and the ability to extend their functionalityExperience with SOAR tools and automating manual security processesExperience in either AWS, GCP, or other large cloud platformExcellent written and verbal communication skillsAbility to influence and build effective ...

with little guidanceBonus: deep familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender); detection-as-code (Sigma, detections in Git, CI-tested); SOAR or custom response automation; defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry); handling ISO 27001 or SOC 2 audits; FortiGate logging and ...