1 to 25 of 128 Permanent SOAR Jobs in England

cyber incident management models and escalation frameworks across enterprise environments.· Familiarity with core cyber defence technologies (e.g. SIEM, Endpoint Detection and Response (EDR), Security Orchestration, Automation and Response (SOAR)).· Knowledge of cloud and container security, and modern technology architectures.· Experience with product methodologies and service-oriented delivery models.· Exposure … cyber incident management models and escalation frameworks across enterprise environments.· Familiarity with core cyber defence technologies (e.g. SIEM, Endpoint Detection and Response (EDR), Security Orchestration, Automation and Response (SOAR)).· Knowledge of cloud and container security, and modern technology architectures.· Experience with product methodologies and service-oriented delivery models.· Exposure ...

scripting language (e.g., Python, Go, Bash) for security automation or analysis.Experience with container security monitoring (Docker, Kubernetes).Experience with Detection-as-Code.Experience with SOAR platforms.Knowledge of digital forensics and incident response procedures.Understanding of malware analysis techniques.It would be great if you have one or more of the following qualifications ...

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

continuously improve Microsoft Sentinel and Microsoft Defender technologies.Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours.Build and maintain automated SOAR workflows using Logic Apps and related technologies.Integrate Microsoft security tooling with third-party technologies and service providers.Identify monitoring gaps and improve visibility across cloud and ...

analysis, packet captures, and forensic techniques. Lead containment, eradication, and recovery efforts during security incidents. Maintain alerting for security events & integrate with SIEM/SOAR platforms. Security Strategy & Programme Delivery: Define, own, and drive delivery of Asta’s end-toend security programme spanning PAM, EDR, NDR, SIEM, penetration testing ...

Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.Threat Detection & Incident Response: Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.Infrastructure Hardening: Enforce secure baselines across virtualized environments (VMware/Hyper ...

engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent).Hands-on threat hunting experience using hypothesis-driven methodologies.Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling.Experience defending large, complex enterprise or financial-services environments.Exposure to cloud security monitoring (AWS, Azure ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience with Endpoint Detection and Response (Cortex XDR or an equivalent EDR/XDR platform). Experience with email ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES• Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Familiarity with MITRE ATT&CKFamiliarity with ITILWorkplace type: About NTT DATANTT DATA is a $30+ billion business and technology services leader, serving ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)Role Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types.Developing security ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

under pressure.Nice-to-Haves• Fintech or regulated industry experience.• AWS or cloud-native security experience.• Experience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.• SOAR or security automation experience.• Threat hunting, purple teaming, or detection-as-code experience.• CI/CD, IaC, or DevSecOps exposure.• REST APIs, OAuth, secrets management ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...