1 to 25 of 69 Permanent SOAR Jobs in London

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation platforms. Scripting experience in Python, PowerShell, or Bash. Experience working within UK Government or public sector environments. Azure and/ ...

writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent). Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling. Experience defending large, complex enterprise or financial-services environments. Exposure to cloud security monitoring (AWS, Azure ...

/XDR Integration: Expert‐level deployment of tools (e.g., CrowdStrike, SentinelOne) to achieve full visibility across endpoints (CIS Control 6). SIEM/SOAR: Experience designing log aggregation and automated response playbooks in platforms like Splunk, Microsoft Sentinel, or Google Chronicle to satisfy monitoring requirements (CIS Control 8). Asset ...

Competitive Advantage Experience within FMCG, manufacturing, supply chain, or consumer goods environments. Hands-on experience with Microsoft Azure security technologies. Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms. Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology services ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

operations. Expert understanding of network protocols and infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and Confluence) Email ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands‐on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry‐standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology services ...

flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences ...

validation, secure development practices and operational readiness. Desirable Experience Experience securing Azure landing zones and enterprise-scale cloud platforms. Experience with Security Orchestration, Automation and Response solutions and automated control validation. Experience with Privileged Access Management and Zero Trust security principles. Experience supporting security platforms in a regulated financial-services ...

cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Ability to operate effectively during high-severity incidentsExcellent written communication skills with a passion for clear, actionable documentationGrowth mindset with a proactive approach ...

version control, peer review and CI/CD where appropriate Automation and tooling Identify repetitive analyst tasks and engineer automation to remove them, using SOAR, native platform automation, scripting or low-code approaches Build and maintain integrations between security tools and adjacent platforms such as identity, endpoint management and ticketing ...

propositions and pre-sales activity. Primary responsibilities: soc architecture and Transformation: Lead discovery, current-state assessment and target-state design for SOC, SIEM, SOAR, EDR/XDR and protective monitoring engagements. Define monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated … and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High ...

segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, and endpoint platforms such as CrowdStrike etc. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models. ...

data, threat intelligence inputs and decision‐making criteria. Ensure procedures are practical, repeatable and aligned with global security operations. Develop analyst playbooks and support SOAR and automation initiatives using technologies such as Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Tines, and Swimlane . Threat Analysis & Detection Validation Validate the effectiveness … Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR, SentinelOne, Carbon Black , or similar EDR/XDR technologies. Proven experience creating SOPs, playbooks, SOAR workflows, or response procedures for SOC teams. Strong understanding of attacker tactics, techniques and procedures (TTPs). Experience mapping detections to recognised threat frameworks such ...

technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements. Technical Leadership … security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk into ...

familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender) as an investigation tool Detection-as-code experience (Sigma, detection rules in Git, CI-tested detections) SOAR or custom automation for response workflows Experience defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry) Experience handling security audits ...

managing and operating FortiGate firewalls Proven experience with Active Directory/Azure AD, including patch and group policy management Cloud native SIEM, SOCs and SOAR Windows Server, Windows 11, and Microsoft Application Suite Experience with adoption of Infrastructure-as-Code (IaC) utilising technologies such as Terraform and Ansible. Mobile Device ...