11 of 11 Permanent Carbon Black Jobs in the UK

Tier 2 SOC teams. Create investigation workflows, triage processes and escalation procedures for security incidents across Microsoft Defender, CrowdStrike, Cortex XDR, SentinelOne, Carbon Black, Azure, AWS, and GCP environments . Define required enrichment data, threat intelligence inputs and decision‐making criteria. Ensure procedures are practical, repeatable and aligned … Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, or LogRhythm . Experience working with Microsoft Defender XDR, Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR, SentinelOne, Carbon Black , or similar EDR/XDR technologies. Proven experience creating SOPs, playbooks, SOAR workflows, or response procedures for SOC teams. Strong understanding ...

draw accurate, evidence‐based conclusions. Experience using endpoint detection and response (EDR) platforms, such as CrowdStrike Falcon, Microsoft Defender for Endpoint or VMware Carbon Black, to investigate malicious activity, analyse endpoint telemetry and support incident containment and remediation. Experience using security analysis and investigation tools such as Wireshark ...

draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms, such as CrowdStrike Falcon, Microsoft Defender for Endpoint or VMware Carbon Black, to investigate malicious activity, analyse endpoint telemetry and support incident containment and remediation. Experience using security analysis and investigation tools such as Wireshark ...

draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms, such as CrowdStrike Falcon, Microsoft Defender for Endpoint or VMware Carbon Black, to investigate malicious activity, analyse endpoint telemetry and support incidentcontainment and remediation. Experience using security analysis and investigation tools such as Wireshark, Snort ...

draw accurate, evidence-based conclusions. Experience using endpoint detection and response (EDR) platforms, such as CrowdStrike Falcon, Microsoft Defender for Endpoint or VMware Carbon Black, to investigate malicious activity, analyse endpoint telemetry and support incidentcontainment and remediation. Experience using security analysis and investigation tools such as Wireshark, Snort ...

understanding of TCP/IP, DNS, DHCP, VPNs, and firewalls; often CCNA or equivalent certified Security & Compliance: Familiarity with endpoint protection tools (e.g. Sophos, Carbon Black), patching cycles, encryption, and identity/access management Automation & Scripting: Experience with PowerShell, Bash, or Python for automating tasks and managing configurations ...

Okta, AirWatch, or similar technologies Experience supporting Citrix XenApp or similar virtual application technologies Experience with cybersecurity and email‐security solutions such as CrowdStrike, Carbon Black, Cylance, Mimecast, Proofpoint, or similar platforms Additional experience with storage, virtualization, or infrastructure technologies such as Nimble, Pure Storage, NetApp, Dell ...

Splunk, ELKetc. Experience documenting the technical details gathered from Forensics analysis into Incident Reports for wider consumption. Experience using EDR tools such as SentinelOne, Carbon Black etc. Knowledge of Chain of Custody procedures. Understanding of data loss/data theft prevention concepts and technologies. Threat modeling fundamentals. Preferred ...

Splunk, ELKetc.* Experience documenting the technical details gathered from Forensics analysis into Incident Reports for wider consumption.* Experience using EDR tools such as SentinelOne, Carbon Black etc.* Knowledge of Chain of Custody procedures.* Understanding of data loss/data theft prevention concepts and technologies.* Threat modeling fundamentals.Preferred Qualifications ...

threats, and prevent breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, they're transforming how SaaS is secured. With AI driving rapid SaaS growth and complexity, agentic AI tools gain privileged access to sensitive ...

threats, and prevent breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, they're transforming how SaaS is secured. With AI driving rapid SaaS growth and complexity, agentic AI tools gain privileged access to sensitive ...