51 to 73 of 73 SOAR Jobs in London

temporary contract to start asap Day rate: Competitive Market rate Key Requirements & Responsibilities SIEM engineeringing Detection engineeringing Response engineeringing Threat hunting Security telemetry integration SOAR automation Secure CI/CD pipelines Excellent stakeholder management and client-facing skills with the ability to build strong professional relationships. Strong team player with ...

providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. You will collaborate with architects and cross-functional teams to align tooling with client needs, produce ...

Operations Centres (SOCs) through the implementation and optimisation of PANW Cortex XSIAM.Working closely with customers, providing technical leadership and hands-on expertise across SIEM, SOAR, EDR, and threat intelligence, enabling the transition from legacy security operations to AI-driven, highly automated security platforms that improve visibility, efficiency, and response capabilities. ...

mentality who enjoys building new business. Ability to thrive in a fast-growing, high-velocity startup environment. Nice to have Experience selling AI, SecOps, SOAR, SIEM, XDR, or security operations platforms. Experience working with enterprise customers across the UK market. Experience partnering with MSSPs, channel partners, or strategic alliances. ...

shape, and qualify opportunities across AI-driven security and the security of AI systems Architect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modelling Define security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding security … Identity and Access Management, including PAM, IGA, ITDR, and machine/non-human identity governance Familiarity with SIEM platforms (e.g. Microsoft Sentinel, Splunk) and SOAR tooling Awareness of AI governance frameworks and standards (NIST AI RMF, ISO/IEC 42001, EU AI Act) Strong commercial acumen with experience supporting bids ...

defined SLOs and KPIs, coordinating with market security and technology teams. Detection & Response Operations Identify and investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets. Provide detection tuning and feedback loops to Detection … security incident management. Demonstrated experience leading or supervising SOC teams, including direct people management, coaching, and performance management. Deep technical understanding of SIEM platforms, SOAR orchestration, EDR/XDR solutions, log management, and security event investigation workflows. Expert-level understanding of security monitoring, alert triage methodologies, incident escalation frameworks, and ...

Project Global Limited is seeking a Security Engineer to join our client's IT security team in London/Bristol/Leeds/Sheffield on a hybrid basis. The role is a 12-month contract ...

investigate incidents, and drive improvements in security posture with advanced tooling and automation. Role requires hands-on expertise with firewalls, WAFs, VPNs, SIEM/SOAR, and Zero Trust. Hybrid working with in-office presence in Osterley is expected as part of Sky’s campus culture. #J-18808-Ljbffr ...

wider cyber domains – Identity Security, Sec‐Ops, Data Security and AI Security – to show how Network & Edge controls integrate with identity providers, SIEM/SOAR/MDR (e.g. FortiSIEM, FortiSOAR), data loss prevention and AI usage controls. Utilise vendor‐specific tools and resources to support solution design and validation. Maintain ...

Services and Capabilities Location: GBR Manchester Hardman Boulevard Description We are seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR … ensuring they are secure, reliable, and aligned with security governance and operational needs. The role requires a technically strong Splunk engineer with experience in SOAR development, Splunk architecture, and security engineering best practices. You will work closely with SOC teams, security engineers, and customers, owning your own workload and providing ...

optimise the Cortex XSIAM platform across enterprise SOC environments, delivering hands-on engineering leadership to client teams and ensuring seamless integration with existing SIEM, SOAR and EDR tooling. Responsibilities include guiding customers through implementation, tuning detections, and enabling AI-driven automation to improve visibility, response and security #J-18808-Ljbffr ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage improvement Cloud security engineering and scalable security architecture design Automation, SOAR, playbooks, enrichment workflows and response improvement Scripting/programming skills such as Python and PowerShell Infrastructure-as-code, CI/CD pipelines, version control and ...

technical escalation point for high‐severity security incidents, facilitating rapid investigation, containment, and remediation using EDR and SIEM tools. Develop and implement SOAR workflows to automate detection, response, and security operations processes. Conduct proactive threat hunting using SIEM/EDR data and MITRE ATT&CK‐aligned techniques. Support vulnerability assessment … network protocols, cloud security (AWS/Azure), and threat detection methodologies. Working knowledge of the MITRE ATT&CK framework. Experience building automation or SOAR playbooks for security operations. CrowdStrike certifications (CCFA/CCFR/CCSE – any combination preferred). Splunk Certified Cybersecurity Defense Engineer (mandatory preferred requirement). Security certifications ...

cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security, while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and maintain cyber … Exchange Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring. Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation's security posture. ...

concepts, CONOPS and high/low-level architecture designs • Working directly with senior client and government stakeholders • Designing and integrating security technologies including SIEM, SOAR, EDR, Threat Intelligence and Vulnerability Management • Assessing existing SOC capabilities and developing security maturity • Designing scalable, resilient on-prem and cloud security architectures • Supporting accreditation … and operation They're looking for: • Strong experience in SOC architecture and security operations • Hands-on architectural experience across at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence • Strong understanding of security operations, threat detection and incident response • Experience designing both on-prem and cloud security architectures ...

solution walkthroughs for enterprise security teams across the UK and Europe Run structured technical discovery to understand customer security posture, existing tooling (SIEM, EDR, SOAR, identity), and integration needs Design and validate customer-specific solutions that meet technical, security, compliance, and business requirements Serve as the primary technical owner … enterprise sales cycles Strong understanding of modern security architecture: identity, endpoint, network, and cloud (AWS, Azure, GCP) Strong knowledge of SIEM, EDR/XDR, SOAR, and common log sources (CloudTrail, Okta, endpoint telemetry, etc.) Familiarity with detection frameworks (MITRE ATT&CK) and threat modeling Comfort with APIs, scripting (Python, Bash ...

researchers; Security Engineering & Orchestration: Design, implement, and optimize core security infrastructure (e.g. EDR,, Zero Trust, IAM, and DLP). Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment; Incident Response Leadership: Lead the technical response … security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...

authoring and maintaining playbooks for the most significant incident types and owning clear, calm communication up to and including the CISO. Response automation – build SOAR-style automation to accelerate and standardise response, targeting automated first-actions for high-priority incidents and reducing manual triage so the team scales without proportional … Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across security tooling and ticketing. Proficiency in Python or an equivalent language for detection development, log parsing and automation, producing readable ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

tuning policies based on real incidents, and continuously improving what is already built. You bring an automation mindset to repetitive work, whether using Python, SOAR platforms, or AI-assisted tools. You enjoy supporting teammates and helping other engineers build their security knowledge. This is a remote position open to candidates … Identity and Access Management (IAM) An automation mindset with experience scripting and debugging code with Python (with or without AIassistance) and using SOAR platforms Strong familiarity with common security challenges and the ability to independently evaluate their severity and business impact Track record of delivering impactful work across multiple quarters ...

with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. Leverage BigQuery … and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script for building ...

with modern security operations platforms. Develop automated response workflows and leverage threat intelligence by using tools such as Google Chronicle Security Operations (SIEM/SOAR), Mandiant, and Security Command Center. Marketing Intelligence & Personalization: Build data-driven marketing solutions by unifying customer data from multiple sources into Google Cloud. Leverage BigQuery … and working with Google Cloud databases such as Cloud SQL, Spanner, or Bigtable. Google Chronicle Security Operations, Security Command Center, or other SIEM/SOAR platforms. Marketing analytics, customer data platforms (CDP), or building solutions for marketing and sales Experience with Google Workspace APIs and Google Apps Script for building ...

detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and #J-18808-Ljbffr ...