24 of 24 Remote/Hybrid SOAR Jobs in London

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

Active SC Clearance. Technical Experience Experience with some of the following technologies would be advantageous: Security & Monitoring Splunk Enterprise Security SIEM & Security Analytics Platforms SOAR Technologies Identity & Access Management (IAM) Cloud & Infrastructure AWS Security Services Microsoft Azure Security Kubernetes Security Docker Security Terraform (Infrastructure as Code) Preferred Certifications The following ...

methodical approach to incident investigation and response. Experience & Knowledge Active Directory recovery and server recovery experience. Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Knowledge of vulnerability management and vulnerability scanning tools. Understanding of digital forensics principles and practices. Awareness ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

purple team experience. Experience with CNAPP, CSPM or exposure management platforms. Experience with eBPF or modern observability tooling. Experience implementing security automation using SOAR or similar orchestration platforms. Knowledge of policy-as-code and security governance. Familiarity with supply chain security and software integrity. Experience evaluating AI/LLM security ...

technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements. Technical Leadership … security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk into ...

and Logic Apps. Highproficiencyin Kusto Query Language (KQL), with proven experience writing complex, optimized queries for detection and hunting. Strong,demonstratedexperience automating security workflowsusing SOAR platforms, APIs, or scripting languages (Python, PowerShell). Proven ability tooperate with a high degree of autonomy, managing competing priorities and complex projects with minimal ...

This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities …/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem ...

This fits within the context of the broader organizational Crisis Management plan owned outside Technology. A key focus is optimising security tooling (e.g., SIEM, SOAR, EDR/XDR, NDR, email security, vulnerability scanning) and driving strong vulnerability and threat management, using threat intelligence to prioritise defensive improvements. Key Responsibilities …/KPIs, escalation paths, continuous improvement plans, quality assurance, and commercial governance. Optimise security monitoring and response tooling working across technology teams (e.g., SIEM, SOAR, EDR/XDR, NDR, email security) including use‐case coverage, alert quality, automation, logging strategy, and operational runbooks. Own the vulnerability management programme (on‐prem ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

Experience with Defender for Endpoint, Defender for Identity, Defender for Office 365 and/or Defender for Cloud Apps. Strong understanding of SIEM, XDR, SOAR, detection engineering and threat hunting. Experience designing solutions across hybrid and multi-cloud environments. Proven ability to lead complex client engagements and solutioning opportunities. Strong ...

mentality who enjoys building new business. Ability to thrive in a fast-growing, high-velocity startup environment. Nice to have Experience selling AI, SecOps, SOAR, SIEM, XDR, or security operations platforms. Experience working with enterprise customers across the UK market. Experience partnering with MSSPs, channel partners, or strategic alliances. ...

Conduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats. Develop and enhance security automation and SOAR playbooks to improve operational efficiency, response capability and analytical effectiveness. Mentor and support SOC analysts while contributing to the ongoing maturity of detection engineering, incident … senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity. Deep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms. Proven experience leading the investigation and response to complex cyber security incidents and acting ...

Conduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats.* Develop and enhance security automation and SOAR playbooks to improve operational efficiency, response capability and analytical effectiveness.* Mentor and support SOC analysts while contributing to the ongoing maturity of detection engineering, incident … senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity.* Deep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms.* Proven experience leading the investigation and response to complex cyber security incidents and acting ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage improvement Cloud security engineering and scalable security architecture design Automation, SOAR, playbooks, enrichment workflows and response improvement Scripting/programming skills such as Python and PowerShell Infrastructure-as-code, CI/CD pipelines, version control and ...

authoring and maintaining playbooks for the most significant incident types and owning clear, calm communication up to and including the CISO. Response automation – build SOAR-style automation to accelerate and standardise response, targeting automated first-actions for high-priority incidents and reducing manual triage so the team scales without proportional … Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across security tooling and ticketing. Proficiency in Python or an equivalent language for detection development, log parsing and automation, producing readable ...

/YAML; Git (or comparable Source-Control Platforms; Infrastructure-as-Code (Terraform or equivalent); CI/CD Tooling; Automated Configuration Management; Configuration Testing & Validation; Security Orchestration & Workflow Automation. You Do Not Need to be Full-Time Software Developer , but you should approach Security Technology as an Engineering Problem rather than … Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore be both ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps ...

This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps Solutions Architect … operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills for proposals and technical documentation Full ...

and knowledge retrieval Developing AI solutions using Python and modern AI frameworks Working with vector databases and retrieval technologies Integrating AI capabilities with SIEM, SOAR and wider cyber platforms Designing prompts and optimising LLM performance Building proofs-of-concept and technical prototypes Developing evaluation frameworks to test model performance, accuracy … development Vector databases and knowledge retrieval AI evaluation and model testing API integration and secure software engineering Cyber Security/SOC environments SIEM/SOAR technologies Rapid prototyping and PoC development You don't need to have done everything above. Strong practical GenAI engineering experience combined with an interest ...

detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...

understand requirements and design appropriate MSSP security solutions. Having a good understanding of how SOC services fit together with technologies such as SIEM, SOAR, EDR/XDR and threat intelligence. Helping shape the architecture and implementation of customer solutions, without needing to be the person configuring everything yourself. Identifying opportunities … improve automation, orchestration and use of technology. Supporting the implementation and adoption of SOAR and other automation capabilities. Working alongside other MSSP services such as Vulnerability Assessment, Vulnerability Management, MDR, SIEM and incident response . Improving processes, procedures, playbooks and operational standards. Developing and mentoring the existing SOC team, helping ...