126 to 149 of 149 SOAR Jobs in England

intent and actions—including prompts and instructions where policy permits—tool calls, identities, memory updates, policy decisions, outputs, errors and outcomes; integrate with SIEM, SOAR, EDR/XDR, cloud, identity, data protection, application security and case-management platforms. Detection and Response: Design, tune and operationalize detections for AI-specific threats … patterns, MCP/A2A concepts and associated security risks Hands-on experience with security monitoring, detection engineering, incident response and automation using SIEM/SOAR and relevant cloud, identity, endpoint, data or application security telemetry. xperience defining and validating controls for cloud and AI platforms, preferably across two or more ...

/YAML; Git (or comparable Source-Control Platforms; Infrastructure-as-Code (Terraform or equivalent); CI/CD Tooling; Automated Configuration Management; Configuration Testing & Validation; Security Orchestration & Workflow Automation. You Do Not Need to be Full-Time Software Developer , but you should approach Security Technology as an Engineering Problem rather than … Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore be both ...

accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate … Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability management. ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

authoring and maintaining playbooks for the most significant incident types and owning clear, calm communication up to and including the CISO. Response automation – build SOAR-style automation to accelerate and standardise response, targeting automated first-actions for high-priority incidents and reducing manual triage so the team scales without proportional … Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across security tooling and ticketing. Proficiency in Python or an equivalent language for detection development, log parsing and automation, producing readable ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps ...

workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/CD pipelines to multiple environments. Strong familiarity with SOAR and Logic Apps is essential. #J-18808-Ljbffr ...

workflows. Responsibilities include tuning KQL queries, building analytic rules, and deploying SIEM content via CI/CD pipelines to multiple environments. Strong familiarity with SOAR and Logic Apps is essential. #J-18808-Ljbffr ...

Lead solution architecture across the full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure on-premise …/Security Architect in complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise security ...

This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps Solutions Architect … operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills for proposals and technical documentation Full ...

and knowledge retrieval Developing AI solutions using Python and modern AI frameworks Working with vector databases and retrieval technologies Integrating AI capabilities with SIEM, SOAR and wider cyber platforms Designing prompts and optimising LLM performance Building proofs-of-concept and technical prototypes Developing evaluation frameworks to test model performance, accuracy … development Vector databases and knowledge retrieval AI evaluation and model testing API integration and secure software engineering Cyber Security/SOC environments SIEM/SOAR technologies Rapid prototyping and PoC development You don't need to have done everything above. Strong practical GenAI engineering experience combined with an interest ...

Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response. ...

and ensure the organisation is prepared to respond Improve detection coverage, security tooling, telemetry, automation and operational processes Manage key security platforms including SIEM, SOAR, EDR and NDR Provide risk based decision making around cyber incidents, containment, recovery and remediation Manage external security partners and ensure effective delivery and service … incident response within a complex enterprise environment Hands-on experience across security monitoring, incident response, threat intelligence and detection engineering Strong understanding of SIEM, SOAR, EDR, NDR, logging, telemetry and security tooling Proven experience managing major cyber incidents, including containment, recovery and executive communication Strong understanding of emerging cyber threats ...

Sanderson Government and Defence seeks a SOAR/SIEM Security Engineer for a critical national infrastructure project. You will design and automate detection workflows, tune Splunk dashboards and support live incident response in OT/IT environments, while maintaining high availability and safety standards. This 18-month FTC role requires ...

Implement, and Optimize (PDIO) methodologies. Product Influence: Synthesize customer feedback to prioritize and advocate for Splunk product and service improvements. Innovation: Apply expertise in security orchestration, automation, and AI Ops to deliver innovative, scalable customer outcomes. Intellectual Capital: Lead the creation of digital assets, procedures, and standardized methodologies for Splunk … security space. Deep technical expertise in the Splunk platform, with a demonstrated ability to drive security adoption and customer outcomes. Advanced skills in automation, SOAR orchestration, and AI-driven security operations. Demonstrated ability to mentor and develop talent across technical consulting teams. Superb communication, collaborator management, and presentation skills, with ...

Implement, and Optimize (PDIO) methodologies. Product Influence: Synthesize customer feedback to prioritize and advocate for Splunk product and service improvements. Innovation: Apply expertise in security orchestration, automation, and AI Ops to deliver innovative, scalable customer outcomes. Intellectual Capital: Lead the creation of digital assets, procedures, and standardized methodologies for Splunk … security space. Deep technical expertise in the Splunk platform, with a demonstrated ability to drive security adoption and customer outcomes. Advanced skills in automation, SOAR orchestration, and AI-driven security operations. Demonstrated ability to mentor and develop talent across technical consulting teams. Superb communication, collaborator management, and presentation skills, with ...

detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

Engineer to join its Security Operations Centre at the Head Office in Lutterworth. You will develop and maintain SOC tooling, including SIEM/SOAR, to define a use case-driven logging, monitoring and response capability across the organisation. The role reports to the Director of Security Operations and involves ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...

Security Operations Centre and advance our managed security services. This hands-on role designs, develops and maintains security automation workflows, builds integrations with SIEM, SOAR, EDR and cloud platforms, and collaborates with SOC Analysts and service owners to automate investigations and improve customer outcomes. Hybrid working is supported. #J ...

National Gas Transmission PLC is seeking a SOAR Engineer to join the Cyber Threat Detection team in the UK. You will enable CSIRT threat detection, automate responses, and mature security posture through orchestrated playbooks and analytics. The role involves developing content for SOAR and SIEM, analyzing workflows, and guiding backlog ...