201 to 225 of 237 SOAR Jobs in the UK

researchers; Security Engineering & Orchestration: Design, implement, and optimize core security infrastructure (e.g. EDR,, Zero Trust, IAM, and DLP). Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment; Incident Response Leadership: Lead the technical response … security tooling, automate repetitive SecOps tasks, and develop sophisticated detection logic; Detection & Response Architecture: Proven experience designing and optimising enterprise security stacks, including SIEM, SOAR, and EDR. You don't just use tools; you tune them to eliminate noise and build high-fidelity alerting pipelines; DevSecOps Leadership: Experience leading ...

professional services.Reporting to the SecOps Solutions Architect, you will support Account Managers and customers across three key solution domains:SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence.Exposure Management – vulnerability management, CTEM and attack path analysis.Email Security.You will work closely with our Cyber Defence Operations Centre … and Email Security portfolios, and be able to communicate effectively with both technical and business stakeholders.Key Responsibilities:Maintain knowledge across SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management and exposure management technologies.Understand SOC operations and confidently position our Managed SOC, Managed VOC and Threat Intelligence services.Develop expertise in automation ...

services. Reporting to the SecOps Solutions Architect, you will support Account Managers and customers across three key solution domains: SecOps – SIEM, EDR/XDR, SOAR, automation, AI-assisted triage and threat intelligence. Exposure Management – vulnerability management, CTEM and attack path analysis. Email Security. You will work closely with our Cyber … Email Security portfolios, and be able to communicate effectively with both technical and business stakeholders. Key Responsibilities: Maintain knowledge across SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management and exposure management technologies. Understand SOC operations and confidently position our Managed SOC, Managed VOC and Threat Intelligence services. Develop expertise ...

authoring and maintaining playbooks for the most significant incident types and owning clear, calm communication up to and including the CISO. Response automation – build SOAR-style automation to accelerate and standardise response, targeting automated first-actions for high-priority incidents and reducing manual triage so the team scales without proportional … Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across security tooling and ticketing. Proficiency in Python or an equivalent language for detection development, log parsing and automation, producing readable ...

/YAML; Git (or comparable Source-Control Platforms; Infrastructure-as-Code (Terraform or equivalent); CI/CD Tooling; Automated Configuration Management; Configuration Testing & Validation; Security Orchestration & Workflow Automation. You Do Not Need to be Full-Time Software Developer , but you should approach Security Technology as an Engineering Problem rather than … Enterprise Environments Experience of Hybrid Cloud & On-Premises Infrastructure AWS, Azure or other Major Cloud Platform Security Experience Experience Integrating Security Tooling with SIEM, SOAR, ITSM & Observability Platforms. Experience Designing or Implementing Zero Trust Architectures. Experience with Identity-Aware Segmentation & Workload Protection The Measure of Success will therefore be both ...

systems.§ Ability to perform static and dynamic analysis of suspicious scripts, executables etc.§ Experience with a broad range of security technologies such as EDR, SOAR, and SIEM.§ Ability to think critically and lead technical investigations.§ Ability to handle high pressure situations in a calm, productive, and professional manner.§ Proficiency … systems.§ Ability to perform static and dynamic analysis of suspicious scripts, executables etc.§ Experience with a broad range of security technologies such as EDR, SOAR, and SIEM.§ Ability to think critically and lead technical investigations.§ Ability to handle high pressure situations in a calm, productive, and professional manner.§ Proficiency ...

and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius … solid understanding of MITRE ATT&CK and KQL (or equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity ...

Sentinel; build custom parsers and data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections … source onboarding, custom parsers and data normalisation Advanced KQL development and optimisation Analytic rule/detection logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause ...

accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate … Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability management. ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...

platform security space. These include (but are not limited to): End-to-end management of EDR solutions at enterprise scale DLP & DSPM Automation/Security Orchestration Automation & Response (SOAR) Scripting (python, PowerShell, bash etc.) Security Information & Event Management (SIEM) content creation, data source on-boarding Strong verbal and written communication ...

implementation and improvements to existing environments. The role will give you the opportunity to work across a broad range of security capabilities, including SIEM, SOAR, EDR, vulnerability management and threat intelligence, while considering how these technologies fit within wider people, process and service requirements. You’ll also be expected … experience in SOC Architecture, Security Architecture or Cyber Security Architecture Experience designing and implementing SOC capabilities Strong knowledge of security technologies such as SIEM, SOAR, EDR, vulnerability management and/or threat intelligence Understanding of how to build secure, scalable and resilient architectures Experience working with both cloud and ...

implementation and improvements to existing environments. The role will give you the opportunity to work across a broad range of security capabilities, including SIEM, SOAR, EDR, vulnerability management and threat intelligence, while considering how these technologies fit within wider people, process and service requirements. You’ll also be expected … experience in SOC Architecture, Security Architecture or Cyber Security Architecture Experience designing and implementing SOC capabilities Strong knowledge of security technologies such as SIEM, SOAR, EDR, vulnerability management and/or threat intelligence Understanding of how to build secure, scalable and resilient architectures Experience working with both cloud and ...

enable collaboration while remaining secure.You will:Build Detection & Response Systems: Design, write, and maintain production-quality detections, automations and integrations (detections-as-code, SOAR playbooks, data and enrichment pipelines) that scale our monitoring capability and reduce manual toil.Own Tooling & Platform: Develop and improve the tooling the global SIRT/… and production environments, taking ownership from identification to resolution.Knowledge/Tools/Techniques: Deep understanding of security tooling (SIEM, EDR, IDS/IPS, NDR, SOAR) and experience extending or building on it. You are proficient in applying Incident Response frameworks (NIST IR Lifecycle, Cyber Kill Chain, MITRE ...

workflows covering triage, investigation, containment, remediation, recovery and closure Automate security incident processes to reduce manual intervention and accelerate response Integrate SIR with SIEM, SOAR, EDR and other enterprise cyber security technologies Configure alert and incident ingestion, enrichment, categorisation, prioritisation, assignment and escalation Work directly with SOC analysts and Incident … solving and stakeholder communication skills It would be great if you also have Broader ServiceNow Security Operations/SecOps experience Integration experience across SIEM, SOAR, EDR and security monitoring platforms ServiceNow Scripting and development experience Experience within large-scale, complex or regulated enterprise environments Financial services or banking cyber security ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … Kanban delivery models KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps, NSD #J-18808-Ljbffr ...

solution design and development for security operations Experience with Architecture Frameworks (ideally TOGAF) and developing HLD and LLD documents Technical expertise in SIEM and SOAR tooling, such as Google SecOps or similar Proficiency with EDR, XDR, and NDR tools like Crowdstrike or Microsoft Defender Experience working within Agile, DevOps … submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Security Operations Architect, Cyber Security, SIEM, SOAR, EDR, XDR, Solution Design, TOGAF, HLD, LLD, Google SecOps ...

Lead solution architecture across the full lifecycle, from conceptualisation and design through to build, deployment and operation. Design and integrate security technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Assess existing SOC capabilities and recommend improvements to increase security maturity. Develop scalable, resilient and secure on-premise …/Security Architect in complex enterprise environments. Strong experience designing and deploying SOC solutions . Hands-on knowledge of at least two of: SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence . Strong understanding of SOC operating models, security processes, people and governance . Experience with cloud and on-premise security ...

This is a genuine opportunity to shape how a leading security operations practice takes its services to market — working across SIEM, EDR/XDR, SOAR, exposure management and email security, with an initial focus on Microsoft Defender and Microsoft Sentinel. The Role Reporting to the SecOps Solutions Architect … operations, detection and response Working knowledge of Microsoft Defender and Microsoft Sentinel Familiarity with at least two of: SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability management, exposure management or email security Confident presenter, comfortable engaging both technical and business stakeholders Strong written skills for proposals and technical documentation Full ...

technology and infrastructure. Work across the full lifecycle from concept and architecture through to deployment and operation. Design and support security tooling across SIEM, SOAR, EDR, vulnerability management and threat intelligence. Engage with senior stakeholders to define security and accreditation requirements. Assess existing security capabilities and identify opportunities for improvement. … address complex requirements. What were looking for Strong experience in SOC architecture and security operations. Hands-on knowledge of at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence. Strong understanding of cloud and on-premise security architecture. Experience with security best practices including least privilege, encryption and ...

technology and infrastructure. Work across the full lifecycle from concept and architecture through to deployment and operation. Design and support security tooling across SIEM, SOAR, EDR, vulnerability management and threat intelligence. Engage with senior stakeholders to define security and accreditation requirements. Assess existing security capabilities and identify opportunities for improvement. … address complex requirements. What were looking for Strong experience in SOC architecture and security operations. Hands-on knowledge of at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence. Strong understanding of cloud and on-premise security architecture. Experience with security best practices including least privilege, encryption and ...

Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response. ...

and ensure the organisation is prepared to respond Improve detection coverage, security tooling, telemetry, automation and operational processes Manage key security platforms including SIEM, SOAR, EDR and NDR Provide risk based decision making around cyber incidents, containment, recovery and remediation Manage external security partners and ensure effective delivery and service … incident response within a complex enterprise environment Hands-on experience across security monitoring, incident response, threat intelligence and detection engineering Strong understanding of SIEM, SOAR, EDR, NDR, logging, telemetry and security tooling Proven experience managing major cyber incidents, including containment, recovery and executive communication Strong understanding of emerging cyber threats ...

leadership role responsible for the engineering and enablement functions that underpin Security Operations. This includes ownership of Data Engineering, Data Analytics, and SIEM/SOAR engineering capabilities, ensuring that platforms, data pipelines, and automation solutions effectively support detection and response outcomes. This role manages a global team of engineering professionals … with broader strategic objectives.What you'll need to succeedOwn and lead the Security Operations Enablement function, covering Data Engineering, Data Analytics, and SIEM/SOAR engineeringDefine and deliver the strategic roadmap for Security Operations platforms and capabilities, ensuring alignment with organizational cyber defense prioritiesManage and develop a global team ...