13 of 13 Permanent SOAR Jobs in the South East

various tools including Jira and Cribl Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement … procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/ ...

part of a collaborative and committed team, safeguarding BAE Systems enterprise IT Infrastructure Installation, maintenance and configuration of Cyber Security Toolsets, including SIEM, SOAR, Cloud and other protection and monitoring technologies Collaborating within project teams to deliver large, complex projects across the enterprise networks, including technology onboarding Deliver value through ...

part of a collaborative and committed team, safeguarding BAE Systems enterprise IT Infrastructure Installation, maintenance and configuration of Cyber Security Toolsets, including SIEM, SOAR, Cloud and other protection and monitoring technologies Continuous commitment towards organisational, departmental and individual objectives and uphold security standards and principles Collaborating within project teams ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

fine-tuning Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models. Conducting proof ...

and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability … management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication ...

help organisations enhance their Security Operations and threat detection capabilities. This is a client-facing role focused on designing and delivering SIEM, XDR and SOAR solutions, developing detection content, automating security processes, and improving SOC effectiveness. You will lead detection engineering initiatives, create use cases aligned to MITRE … response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge of MITRE ATT&CK and threat detection methodologies Azure ...