26 to 45 of 45 SOAR Jobs in England

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

coordinating incident response and making decisions under pressureA track record of improving operational quality and consistency within a teamPractical experience with SIEM, XDR or SOAR toolsClear communication with both technical teams and senior stakeholdersScripting or automation experience in languages such as Python, PowerShell or Bash is desirable, as is exposure ...

environments and IT infrastructure.Familiarity with frameworks such as MITRE ATT&CK.Ability to analyse threats and translate them into detection capability.Nice to have:Experience with SOAR (Logic Apps/Splunk SOAR).Detection-as-code or CI/CD pipeline experience.Scripting in PowerShell, Python or similar.Experience with Git-based workflows.Relevant certifications (Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security , while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and maintain cyber … Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring . Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation's security posture. ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...

SOAR Engineer £65,000 - £75,000 | Warwick (1 day every 2 months) Build the future of cyber security automation. We're supporting a major UK infrastructure organisation as they continue to invest heavily in their cyber security capability. As a SOAR Engineer, you'll play a key role in transforming … operational efficiency Working closely with Security Operations teams to identify automation opportunities Developing solutions using Python and PowerShell Supporting the evolution of SIEM and SOAR capabilities Contributing to a strategic migration towards Google SecOps (Chronicle) What we're looking for Experience in a SOAR Engineer, Security Automation Engineer, Detection Engineer ...

and Compliance teams. Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI-assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying … root causes and potential impact. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. ...

Sentinel, Entra and Purview solutions aligned to customer risk, maturity and operational needs Advise on Zero Trust, identity and access, threat protection, SIEM and SOAR, XDR, cloud security posture, data governance and regulatory considerations Help customers define prioritised security roadmaps, target operating outcomes, adoption plans and measurable improvements, rather than … security service outcomes Technical knowledge Microsoft Defender XDR, including Defender for Endpoint, Office 365, Identity and Cloud Apps Microsoft Sentinel: security operations, SIEM and SOAR concepts, analytics, automation and use-case development Defender for Cloud: cloud security posture management and workload protection across cloud and hybrid environments Entra ID, Conditional ...

security space. These include (but are not limited to): E nd-to-end management of EDR solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell , bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication ...

emerging technologies, identifying high-value use cases and defining a secure target architecture and implementation roadmap. The Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate … Architecture and technical design. Knowledge of Generative AI, LLMs, RAG and agentic AI. Understanding of cyber security operations and SOC environments. Experience with SIEM, SOAR, EDR/XDR and security tooling integrations. Knowledge of data architecture, APIs, cloud platforms and integration patterns. Understanding of AI security, assurance and responsible AI. ...

with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization: Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. Leverage BigQuery … and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script for building ...