8 of 8 SOAR Jobs in the South West

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

actionable threat intelligence, from collection and analysis to dissemination and integration into defensive controls. Extensive background operating and tuning security platforms (SIEM, EDR, NDR, SOAR, etc.) to maximise efficacy and reduce noise. Skilled at managing third-party relationships: oversees MSSPs, coordinates with technology vendors, and ensures SLAs and deliverables ...

Delivery within secure/enterprise/defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with ...

aligned environmentsDelivery within secure/enterprise/defence environmentsDesirable:Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)SOAR platforms and automation of security response workflowsIntegration with monitoring, alerting, and incident response systemsThreat detection, analytics, and use case developmentExperience integrating with enterprise services (Active ...

fundamentals and common threat patterns/abuse casesAbility to use data to prioritize, measure detection efficacy, and manage false positivesPreferred:Experience with SIEM/SOAR and detection engineering programsExperience operating in a highly matrixed, complex organizationJ.P. Morgan is a global leader in financial services, providing strategic advice and products ...

SOAR/SIEM Security Engineer - Critical National Infrastructure (OT) 18-Month FTC | SC Cleared A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology … across converged IT/OT infrastructure. You'll be working on live, high-stakes environments. What you'll be doing Designing, building, and maintaining SOAR playbooks to automate detection and response workflows Developing and tuning Splunk use cases, dashboards, and correlation searches across IT and OT data sources Supporting incident ...

risk-based vulnerability management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident … specifically utilizing EPSS (Exploit Prediction Scoring System) alongside CVSS to determine patching prioritisation. Ability to design and influence automated response playbooks using SOAR platforms Practical experience creating reference architectures and patterns for engineering teams. Proven ability to design and deploy automated preventive and detective guardrails at scale. Ability to solve ...

Security Architect Microsoft, SIEM, SOAR, EDR, Cloud Security, Azure, Detection Engineering, Threat Hunting, Security Automation, SOC, APIs, Data Models, Integrations, Microsoft, CrowdStrike, SentinelOne, Palo Alto, Azure, Hybrid (London 3d/w then less) This is an exceptional permanent Security Architect opportunity to join a leading tech company. The Security Architect … Therefore, you must be based at a commutable distance from London. As Security Architect, you will take ownership of key security architecture across SIEM, SOAR, EDR, cloud security, detection engineering, threat hunting and automation. The Security Architect will work closely with internal and 3 rd party engineering and SOC teams ...