13 of 13 Permanent SOAR Jobs in County Antrim

with relevant experience is also considered Desirable In-depth Microsoft Sentinel expertise: use case and rule development, workbooks and playbooks, KQL, Logic Apps and SOAR Managing Sentinel as an MSSP, including Azure Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender for Endpoint, Identity and Cloud ...

Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps How this aligns to our Values Customer ...

framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP ...

.* **AI & Workflow Tooling:** Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms).* **Cloud & Search Interface Familiarity:** Working comfort navigating the **AWS Management Console** (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics).* **Communication & Documentation ...

Cybersecurity, Information Technology, Computer Science, or equivalent experience.* Experience with privileged access management platforms.* Familiarity with GitHub and version control best practices.* Experience with Security Orchestration, Automation and Response (SOAR) platforms.* Experience with Microsoft Sentinel or other SIEM platforms.* Experience implementing AI-assisted security operations or security copilots. **Supervisory Responsibilities ...

degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.Experience with privileged access management platforms.Familiarity with GitHub and version control best practices.Experience with Security Orchestration, Automation and Response (SOAR) platforms.Experience with Microsoft Sentinel or other SIEM platforms.Experience implementing AI-assisted security operations or security copilots.Supervisory Responsibilities:This role ...

managing live incident containment and day‐to‐day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Why consider joining our Digital & Data community? Join our Digital & Data team and work alongside cyber security … Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat‐detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures, automated ...

managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Join our Digital & Data team and work alongside cyber security, product, design and technology specialists in cross … Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures, automated ...

policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and increase confidence ...

enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance. Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures. Proven ability to influence technical decisions and drive adoption of secure patterns and engineering ...

Trust & Cyber Security practice. You will manage live incidents, guide day-to-day SOC operations, and help clients modernise their security operations, improving SIEM, SOAR and EDR capabilities. You will work with cross-disciplinary teams across sectors, mentor colleagues, and shape modern Security Operations services. #J-18808-Ljbffr ...

within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities. You’ll work across sectors, advise on tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with a focus ...

Digital Trust & Cyber Security practice in the UK. You will oversee live incident containment, coordinate investigations and help clients mature their security operations, SIEM, SOAR and EDR capabilities. You'll combine hands‐on leadership with advisory work, working across enterprise and public sector engagements, contributing to stronger cyber resilience while ...