1 to 25 of 27 Remote/Hybrid SOAR Jobs in the UK

projects. Build and maintain tools for proactive detection, configuration drift monitoring and automated remediation. Security tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management … security monitoring use cases and Threat hunting capabilities. Relevant industry certifications (e.g., AZ-500, SC-200, SC-900, CompTIA Security+) or similar Cert with Security Orchestration, Automation, and Response (SOAR) playbooks within Sentinel or other platforms. Scripting skills (PowerShell, Python) for automation and data manipulation. What Mizuho Can Offer ...

work independently in a remote environment Desirable Skills Splunk Enterprise Security experience Knowledge of SPL query language Microsoft Sentinel automation, Logic Apps or SOAR experience Detection-as-Code and CI/CD pipeline experience PowerShell or Python scripting skills Experience supporting Threat Hunting or Incident Response activities Reasonable Adjustments: Respect ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and threat investigation ...

. AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms). Cloud & Search Interface Familiarity: Working comfort navigating the AWS Management Console (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics). Communication & Documentation ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

Experience with enterprise architecture modelling and documentation tools. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies Experience with SIEM/SOAR technologies beyond Microsoft Sentinel. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only ...

Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow ...

environments and IT infrastructure.Familiarity with frameworks such as MITRE ATT&CK.Ability to analyse threats and translate them into detection capability.Nice to have:Experience with SOAR (Logic Apps/Splunk SOAR).Detection-as-code or CI/CD pipeline experience.Scripting in PowerShell, Python or similar.Experience with Git-based workflows.Relevant certifications (Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...