22 of 22 Remote/Hybrid SOAR Jobs in England

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

work independently in a remote environment Desirable Skills Splunk Enterprise Security experience Knowledge of SPL query language Microsoft Sentinel automation, Logic Apps or SOAR experience Detection-as-Code and CI/CD pipeline experience PowerShell or Python scripting skills Experience supporting Threat Hunting or Incident Response activities Reasonable Adjustments: Respect ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and threat investigation ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

environments and IT infrastructure.Familiarity with frameworks such as MITRE ATT&CK.Ability to analyse threats and translate them into detection capability.Nice to have:Experience with SOAR (Logic Apps/Splunk SOAR).Detection-as-code or CI/CD pipeline experience.Scripting in PowerShell, Python or similar.Experience with Git-based workflows.Relevant certifications (Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...

and Compliance teams. Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI-assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying … root causes and potential impact. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. ...

security space. These include (but are not limited to): E nd-to-end management of EDR solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication ...