1 to 25 of 32 Permanent SOAR Jobs in the UK

them grow their Security Operation department from the ground up.Key skills required for this role Security Operations, SIEM, SOC Important SOC, Security Operation, SIEM, SOAR Job descriptionTitle: Cyber Security Operations ManagerLocation: Either Crawley or London (Hybrid)Salary: Up to 80,000 base plus bonusLine Management: up to 14 peopleWe are … tools and defences.Accountable for Cyber Security incident response management including the establishment, maintenance and improvement of cyber security incident response plans, procedures, and playbooks.Promote security orchestration, automation, and response (SOAR) solutions for systems and operational playbooks to enable efficient discovery of security events and response actions.Ideal experience:Minimum 5 years+ … experience leading Cyber Security Operations teams.Practical experience of incident response governance (lifecycles, frameworks, incident handling) and developing incident response playbooks/processes, Security Orchestration, Automation and Response (SOAR), running red-team exercises and tabletop crisis war games.Working knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss more »

as they occur as part of an incident response team. • Implement metrics and dashboards to give visibility of the Enterprise infrastructure. • Use of the SOAR platform to assist with playbook automation and case management capabilities to streamline team processes and tools. • Produce documentation to ensure the repeatability and standardisation of more »

as they occur as part of an incident response team. • Implement metrics and dashboards to give visibility of the Enterprise infrastructure. • Use of the SOAR platform to assist with playbook automation and case management capabilities to streamline team processes and tools. • Produce documentation to ensure the repeatability and standardisation of more »

a coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements more »

confidential investigations with discretion Ability to multi-task and prioritize workload Familiarity with PowerShell, Python and/or SQL is a plus Familiarity with security orchestration, automation and response (SOAR) is a plus more »

and internal threats is a top priority which makes this role very challenging.Principal ResponsibilitiesResponsible for the daily operation of enterprise security systems including SIEM, SOAR, Elastic, ticketing, alerting, and messaging systems.Manage junior level analysts in the daily operation of enterprise security systems including shift rotations and hand-offs.Work closely with more »

quick, informed decisions under pressure. Relevant certifications such as GIAC, or Microsoft certifications would be advantageous. Any experience with SOC Prime, Carbon Black, and SOAR would be advantageous. Hybrid based - 2 days per week expected in their Warrington office. Paying up to 70k, depending on experience. As this is a more »

using a combination of existing knowledge resources and independent research.Understand Threat Intelligence and its use in an operational environmentProduce new workflows for automation into SOAR tools for common attack types.Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat.SOC Analyst Technical more »

cyber security systems and tooling • Reasonable knowledge of Security Information and Event Management systems • Reasonable knowledge of Firewall systems (Fortigate essential) • Foundational knowledge of Security Orchestration, Automation and Response (SOAR) systems • Good knowledge of common operating systems (Windows, Mac, Linux) • Good knowledge of networking and network equipment • Relevant certifications such more »

cyber security systems and tooling * Reasonable knowledge of Security Information and Event Management systems * Reasonable knowledge of Firewall systems (Fortigate essential) * Foundational knowledge of Security Orchestration, Automation and Response (SOAR) systems * Good knowledge of common operating systems (Windows, Mac, Linux) * Good knowledge of networking and network equipment * Relevant certifications such more »

as they occur as part of an incident response team. Implement metrics and dashboards to give visibility of the Enterprise infrastructure. Use of the SOAR platform to ass... more »

define the technology, policies and practices used to protect the company and its clients. You’ll work to implement the Splunk monitoring solution and SOAR and you’ll be able to work across vulnerability detection, infrastructure management, Web and Mobile Application Security, DevSecOps and many other areas – A Very varied more »

have experience across: Security principles, techniques, and protocols Endpoints, servers, infrastructure and networking technologies Experience in supporting security systems, including vulnerability management, SIEM, DLP,SOAR, EDR solution, Network Firewalls etc The client is based in London, however will consider candidates on a remote basis. Sound interesting? Click apply now and more »

and protocols Detailed technical knowledge related to endpoints, servers, infrastructure and networking technologies Strong experience in supporting security systems, including vulnerability management, SIEM, DLP,SOAR, EDR solution, Network Firewalls etc. Working knowledge of IT processes (i.e., ITIL) including incident, problem, defect, change and release management The Cyber Security IT Analyst more »

Cyber Assessment Framework (CAF) and ISA/IEC 62443, ISO/IEC 27001/27002, and GDPR. Working knowledge of security technologies including SIEM, SOAR, EDR, AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics. Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks more »

will have good security qualifications such as SANS/CREST qualifications, however, equivalent experience is just as well regarded. Strong working knowledge of SIEM, SOAR, EDR tooling is essential, as is an understanding of the MITRE ATT&CK framework. Experience in CNI/Defence sectors is also desirable.This is a more »

within Secuirty Engineering · Understanding of Security Operations · Experience with security toolsets such as (but not limited to) SIEM, cloud security (zero trust, CASB ect), SOAR, CVM tools. Desirable skills: · Experience with using Zscaler · Experience with using CrowdStrike. · Experience with using Qualys CVM. If you are ready to take the next more »

the technology, policies and practices used to protect the company and its clients. You’ll drive the implement of a Splunk monitoring solution and SOAR and you’ll be able to work across vulnerability detection, infrastructure management, Web and Mobile Application Security, DevSecOps and many other areas - A key and more »

related field AND 5+ years sales and negotiation experience or related work or internship experience. 3+ years' experience selling Security Solutions (EDR, XDR, SIEM, SOAR) to MSSP and MSP customers. Additional Or Preferred Qualifications (PQs) Bachelor's degree in business management, Information Technology, Marketing (or equivalent) or related field AND more »

incidents Experience in log analysis, incident response and/or digital forensicsExperience with SIEM and centralized data lake logging (e.g., Splunk, Snowflake)Experience with Security Orchestration, Automation, and Response (SOAR)Experience securing cloud environments such as AWS, GCP, and/or AzureProficient in programming languages to automate/build features more »

security toolsets as required for the role Continuously work towards organisational, departmental, and individual objectives and uphold security standards and principles Supporting SIEM and SOAR technologies Provide ongoing management and administration of Cyber Security solutions Provide support to projects delivering and implementation of Cyber Security solutions Provide guidance and support more »

Experience of CISSP, SSCP, CRISC or CGEIT would be beneficial Experience as a MS Azure Cloud Architect or Engineer is preferred Working knowledge of SOAR concepts and toolsets Authoritative understanding of data communications and information systems hardware, software, and design principles such as VPN, segmentation, WAF, access control, CASB. Working more »

by design. Other essentials: Background that covers cyber technology, security operations, incident response, architecture, and training. Experience in implementing technology such as SIEM, XDR, SOAR, etc. Background in Financial Services or other regulated industries (desired) Experience in leading through leaders and developing an internal capability Good soft skills, and the more »

need: · Extensive experience of working within a SOC or adjacent role. · Experienced in responding to cyber incidents. · Conversant with common security tooling (E.g., SIEM, SOAR, EDR, NDR). · Understanding of threat actors, their tactics, techniques, and procedures. · Understanding of security event data, the value of different data sources and tools more »

the charge in designing and implementing robust security controls. ? What You'll Do: Optimise the Security Operations platform across endpoints, networks, and cloud. Spearhead Security Orchestration Automation and Response (SOAR) initiatives. Drive Security Data & Analytics with next-gen detection logic and analytics. ? Essential Skills: Proven cyber security experience. Proficiency in … supporting security tools like SOAR, SIEM, EDR, NGFW, and more. Industry certifications (CISSP/CCSP, CEH, etc.) or equivalent expertise. Hybrid environment expertise with Azure or AWS certifications as a bonus. Scripting prowess for automation and API interaction. Familiarity with microservices, Kubernetes, CI/CD pipelines, and DevSecOps principles. Ready more »