3 of 3 Remote/Hybrid SOAR Jobs in the Midlands

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

resilient. You will also work to integrate GCP-native security controls and telemetry with Arden’s wider security tools, including Microsoft Sentinel SIEM/SOAR, to support a consistent and effective approach to security monitoring and response. Reporting to the Senior Information Security Engineer, this is an opportunity to contribute … prompt injection, sensitive-data leakage, tool access, autonomous actions and output validation. Experience integrating GCP security logs and findings with Microsoft Sentinel SIEM/SOAR to support monitoring, detection, investigation and incident response. At least two years’ experience in incident detection, incident response and digital forensics. Experience working with recognised ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...