151 to 175 of 237 SOAR Jobs in the UK

working with and relationships across financial services, manufacturing, retail or CPG, healthcare, or energy or utilities marketKnowledge of modern security stack, including SIEM/SOAR, EDR/XDR, IAM, data security, or cloud security, and where AI is being adopted across itKnowledge of emerging AI-security topics, including securing enterprise ...

Alto Networks PCNSE/PCSAE, CISSP, CCIE, or equivalent advanced cloud certifications (AWS/Azure/GCP).Deep operational understanding of SecOps workflows, automation (SOAR), and AI-driven security operations.Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple ...

customer engagement models. + Technical Expertise - Deep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software. - Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools. + Sales Acumen - Strong consultative selling skills. - Ability to translate technical features into business benefits. + Leadership & Communication - Proven ability ...

strategy, resource planning, and customer engagement models.Technical ExpertiseDeep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software.Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools.Sales AcumenStrong consultative selling skills.Ability to translate technical features into business benefits.Leadership & CommunicationProven ability to lead cross-functional teams.Excellent presentation, negotiation, and ...

and real-world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations … developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar Scripting and automation capability using Python, PowerShell or similar, including working with APIs Experience ...

every incident into improved detection content, hardening, or run‐book coverage; design for resilience by anticipating failure modes and ensuring systems degrade gracefully. Build SOAR playbooks and auto‐triage — identify toil and repetition in analyst workflows, and build automation that saves the team time and improves consistency without removing human … technical stakeholders—communicating likelihood, impact and recommended treatment clearly, and reflecting asset criticality and threat context in prioritisation decisions. Evidence of building or improving SOAR playbooks, automated triage workflows or equivalent automation that reduced analyst toil in a SOC or detection‐engineering context. Familiarity with UK government security frameworks—notably ...

recording, credential rotation, least privilege, EPM/PRA) across on-prem and cloud workloads.* Lead complex integrations with AD/EntraID, IdPs, SIEM/SOAR, CSPM, ITSM, DevOps tooling (CI/CD), and secrets management.* Be responsible for the operational model: backup/recovery, DR, platform upgrades, policy hardening, performance … OAuth).Automation proficiency (PowerShell, Python, REST APIs) and Infrastructure-as-Code (Terraform/CloudFormation) for repeatable deployments.Experience with SIEM (e.g., Splunk, Sentinel, QRadar) and SOAR integrations for session telemetry, alerts, and response.Proven leadership in defining standards, runbooks, and governance; excellent customer engagement and interpersonal skills.## Additional desired capabilities* Experience with ...

effectiveness and consistency Experience in security operations, risk management, and incident response Experience designing or building automated security response workflows, playbooks, or orchestration systems (SOAR, custom pipelines, or equivalent) Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make ...

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks ...

Cyber SOAR Specialist Salary: Circa £68,000 Location: Bristol, Leeds, Norwich, Sheffield, York or Perth A bit about the job We are looking for someone who loves using automation to solve complex cyber security challenges and wants to make a real impact. You may already be working with SOAR technologies … step in a role where you can combine technical expertise, AI innovation and problem‐solving skills to help protect Aviva. Responsibilities As a Cyber SOAR Specialist, you’ll help strengthen Aviva's global cyber security capabilities through automation and orchestration. You’ll join the Automation and Orchestration team within Cyber ...

incidents, drive detection engineering, playbooks, and automation, while mentoring junior analysts in a fast-paced global security team. The role focuses on SIEM, EDR, SOAR, cloud and endpoint security, with collaboration across internal and external stakeholders to strengthen cyber resilience. #J-18808-Ljbffr ...

providing strategic direction to maintain a robust security posture for clients. You will own detection rules and playbooks for Microsoft Sentinel, Defender XDR, SIEM, SOAR, EDR and XDR, while mentoring the Cyber Services team. You will collaborate with architects and cross-functional teams to align tooling with client needs, produce ...

will monitor, detect, respond and recover, reporting to the CISO and guiding cyber defence operations including the MSSP. Focus areas include optimising tooling (SIEM, SOAR, EDR/XDR, NDR), vulnerability management, and threat intel-driven prioritisation. You will drive threat and incident management with governance, metrics, and executive updates. #J ...

common compromise chains Ability to design validation approaches and measure detection performance (precision/noise reduction) using data-driven methods Experience with security automation (SOAR) About Electronic Arts We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value ...

managed security services or MSSP environment serving multiple clients Proficiency in multiple SIEM query languages (SPL, KQL, YARA-L, or similar) Familiarity with SOAR platforms and automation-assisted detection workflows Experience with threat hunting methodologies and retrohunt program execution Relevant certifications: GCIA, GCIH, GCDA, or SIEM vendor certifications WHY CYDERES ...

integration, and governance frameworks Ideally, you will be familiar with: Identity Governance and Administration (IGA) solutions Zero Trust Network Access (ZTNA) technologies SIEM and SOAR platforms Procurement and vendor lifecycle management processes Regulatory compliance, audit, and assurance requirements Wipro is an advocate for positive change and conscious inclusion. ...

building processes from scratch, owning outcomes end-to-end, and thriving in ambiguity. Domain experience in areas adjacent to our platform: EDR, SIEM/SOAR, Vulnerability Management, Exposure Management, CTEM, or Security Control Assessment, strong advantage. Based in the UK or Western Europe, with willingness to travel across Europe ...

helping customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.Your role as Senior Security Engineering ConsultantThe Security Engineering Consultant role sits within the Security … Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.A key aspect of the role is ownership ...

MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection … engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similarScripting and automation capability using Python, PowerShell or similar, including working with APIsExperience designing detection ...

engineer, SOC automation engineer, threat hunter, threat modeler, and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found. ...

mentality who enjoys building new business. Ability to thrive in a fast-growing, high-velocity startup environment. Nice to have Experience selling AI, SecOps, SOAR, SIEM, XDR, or security operations platforms. Experience working with enterprise customers across the UK market. Experience partnering with MSSPs, channel partners, or strategic alliances. ...

Senior SOC Engineer at Nomios, you'll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers … and response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection and response capabilities.You’ll play a central role in security orchestration and automation, helping reduce time to detect and respond by refining playbooks and building intelligent workflows. You’ll also lead customer onboarding in collaboration ...

SLAs, drive false-positive reduction, and define L1 alert handling procedures.Deliver the 24/7 coverage model — on-call structure, follow-the-sun planning, SOAR automation of Tier 1 triage.Tooling & ConsolidationConsolidate the security stack — one signal, one view, less noise. Drive down cost and eliminate coverage gaps.Own the security tooling … tech and regulated environments — betting, gaming, or sports data.Experience integrating acquired companies into an existing security program.Security certifications — CISSP, OSCP, GIAC, or equivalent.Experience with SOAR implementation and security automation at scale.Experience operating follow-the-sun or 24/7 security coverage models.We enjoy an ‘office-first’ culture and maximize opportunities ...

reduce false positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider … experience in cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security ...

reduce false positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider … experience in cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security ...