1 to 25 of 48 Remote/Hybrid SOAR Jobs in the UK

designing, developing and optimising security automation across a large-scale enterprise environment. This is a hands-on engineering position focused on delivering scalable Security Orchestration, Automation and Response (SOAR) capabilities using the Splunk Security platform . Working alongside Incident Response and Threat Management teams, you will develop advanced automation, improve … eligible for SC clearance. 5 years or more in the UK, with full right to work. Key Responsibilities Design, develop and maintain SOAR automation and response playbooks using Splunk SOAR (Phantom) Partner with Incident Response teams to identify opportunities for automation and operational improvement Build and enhance security detection and ...

several of the following technologies would be advantageous: Microsoft Defender Splunk Qualys Azure Security AWS Microsoft 365 Security PowerShell Python Kubernetes Windows Server Linux SOAR platforms Data Loss Prevention (DLP) DevSecOps practices Experience with AI-driven threat detection technologies would also be beneficial. Qualifications Ideally you'll hold ...

Logic Apps Azure Lighthouse Experience Minimum 5 years' experience within Cyber Security, Security Engineering, SOC, SIEM Engineering or related disciplines. Strong understanding of SIEM, SOAR, threat detection and incident response. Demonstrable experience designing and implementing Microsoft Sentinel solutions. Experience developing detection rules, use cases and security monitoring capabilities. Strong threat ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response. Conduct proactive threat hunting activities using advanced search ...

Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response. Conduct proactive threat hunting activities using advanced search ...

/Azure) in line with security baselines Support vulnerability management - scanning, patching coordination, remediation tracking Build and maintain detection rules, alerts, and automation (SOAR) in partnership with the SOC Support incident response - containment, investigation, and remediation of confirmed threats Automate security processes via scripting (Python, PowerShell, Terraform/IaC) Work ...

Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small ...

strategic platforms and capabilities that GCS operates on behalf of the Group, including (but not limited to) identity and access management, SIEM/SOAR, endpoint protection, cloud security, network security, and OT security. Provide architectural input to the GCS investment planning cycle, ensuring technology decisions are grounded in sound architectural ...

generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement … procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/ ...

Processing Infrastructure & Platforms Linux (Red Hat preferred) Apache/Nginx Elasticsearch Grafana Prometheus Cosmos DB Kafka or Azure Event Hubs Desirable Experience SIEM or SOAR platforms Cybersecurity Analytics Azure Security Financial Services or other highly regulated environments Knowledge of cybersecurity frameworks such as NIST, ISO 27001, CIS or OWASP About ...

part of a collaborative and committed team, safeguarding BAE Systems enterprise IT Infrastructure Installation, maintenance and configuration of Cyber Security Toolsets, including SIEM, SOAR, Cloud and other protection and monitoring technologies Continuous commitment towards organisational, departmental and individual objectives and uphold security standards and principles Collaborating within project teams ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

playbooks, runbooks, templates, or accelerators - back into a practice or community, rather than leaving knowledge within a single team Tools and practices Familiarity with SOAR tooling and automation of triage and enrichment workflows Experience working in Kanban-led operating models, including managing triage queues, WIP limits, and class-of-service ...

security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation and SOAR AI-driven Security Operations or Agentic AI Threat Intelligence integration Telemetry Engineering About You You'll likely be an experienced Detection Engineer, Security Platform Engineer ...

and ransomware recovery solutions. Strong knowledge of hybrid cloud environments (Azure, AWS and/or GCP). Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR and IAM/PAM. Strong understanding of disaster recovery and business continuity principles. Excellent stakeholder management and communication skills. Desirable Experience working ...

Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats … and career progression opportunities Candidates must be eligible to obtain SC clearance What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

with common attack vectors and defence techniques. Proven ability to build and deploy automation using code, APIs, and orchestration tools (e.g., Python, workflow engines, SOAR platforms). Practical experience with AI/LLM systems and automation, including prompt engineering, retrieval augmented generation (RAG), function‐calling, or agent‐based tools. Skilled ...

decision-making, streamline workflows, and drive business outcomes. Bonus points: Currently developing Go-based microservices for scalable, high-throughput architectures; experience in cybersecurity, SIEM, SOAR, or adjacent security domains; hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks. Benefits Market-leading compensation and equity awards ...