51 to 61 of 61 SOAR Jobs in the UK

client sites in UK and occasional travel to Europe and Asia. Design, deploy and configuration of SIEM applications (e.g. SPLUNK enterprise, enterprise security, Splunk SOAR and UBA, Microsoft Sentinnel, Elastic, Microsoft XDR and other) including: Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for SIEM applications Integration of SIEM application … deployment and configuration of various tools including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SIEM/SOAR tools (Splunk and Sentinel at a minimum) and other appropriate tooling e.g. SOAR, Threat Intelligence, traffic analysis tools etc. to identify signs of an intrusion ...

technical complexity into clear business outcomes Confidence presenting to both technical and non-technical stakeholders A solid understanding of modern security architectures, including SIEM, SOAR, and managed security services Exposure to advanced security domains such as DDoS protection, WAF, IAM, EDR, MDM, and vulnerability management Continuous learning is a core ...

Responsibilities Monitor, investigate and respond to security incidents across secure environments Develop and tune SIEM detection rules and correlation logic Support SIEM and SOAR tooling optimisation and automation Integrate and onboard log sources to improve visibility across systems Conduct threat analysis, including TTPs and IOCs Carry out network and host … develop and tune detection rules and alerts Experience with incident response and threat analysis Knowledge of MITRE ATT&CK, IOCs, and TTPs Familiarity with SOAR tools and automation Scripting experience (e.g. Python, PowerShell, Bash) is beneficial Why Apply? Opportunity to work on a mission-critical defence programme Gain exposure ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with … security testing, attack simulation, validation or Purple Team activities. Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure ...

Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with … security testing, attack simulation, validation or Purple Team activities. Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure ...

## CISOApplylocations: London-Heathrow, UKtime type: Full timeposted on: Posted Todaytime left to apply: End Date: July 10, 2026 (10 days left to apply)job requisition id: JR100629Intl Consolidated Airlines Group UKFull time## IAG GBS ...

through hands-on experience in SecOps tools and incident response. The ideal candidate will engineer and optimise platforms like SIEM, EDR/XDR, and SOAR, as well as develop detections to improve visibility. Strong SecOps background and technical cybersecurity knowledge are essential. The position offers a rate ...

strategy around their SIEM solutions. The incoming profile will need to have a strong balance of hands-on engineering and analyst experience (across SIEM, SOAR, SOC etc) whilst being comfortable driving and shaping a security strategy, leading others from the front, and managing a small tight-knit team … suitable fit for this opening, the following experience is required: At least 4-5 years within SecOps focused positions Capable across SIEM, SOAR and SOC (with hands-on experience across tools such as Google Chronicle, Sentinel, or Splunk) Prior experience across Incident Management, monitoring and triaging incidents etc Knowledge ...

strategy around their SIEM solutions. The incoming profile will need to have a strong balance of hands-on engineering and analyst experience (across SIEM, SOAR, SOC etc) whilst being comfortable driving and shaping a security strategy, leading others from the front, and managing a small tight-knit team … suitable fit for this opening, the following experience is required: At least 4-5 years within SecOps focused positions Capable across SIEM, SOAR and SOC (with hands-on experience across tools such as Google Chronicle, Sentinel, or Splunk) Prior experience across Incident Management, monitoring and triaging incidents etc Knowledge ...

and product evolution The ideal background: • 5+ years in technical service delivery, SOC, cyber operations or technical customer success • Strong understanding of MDR, SIEM, SOAR, incident response and SOC operations • Experience managing technical escalations and complex client environments • Comfortable presenting to senior technical and non-technical stakeholders • Able to translate … insight • Experience with SLAs, KPIs, service reporting and managed services environments Useful experience would include exposure to platforms such as Sentinel, Google SecOps, Google SOAR, CrowdStrike, Defender, ServiceNow, Salesforce or similar. Certifications such as CISSP, CISM or equivalent would be beneficial but are not essential. This would suit someone ...