76 to 100 of 111 SOAR Jobs in the UK

MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR automations, integrations and response workflowsDevelop and document customer incident response playbooks aligned to detection outputsTranslate threat intelligence and operational learnings into improved detections and automationsDeliver detection … engineering, including developing and tuning detection rules, with Microsoft Sentinel preferredExperience writing detection logic using KQL or similar query languagesProven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similarScripting and automation capability using Python, PowerShell or similar, including working with APIsExperience designing detection ...

Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout the solution … and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable Adjustments: Respect ...

Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge sources. Applying prompt engineering techniques to optimise AI performance and accuracy. Integrating AI capabilities with SIEM, SOAR and other cyber security platforms. Establishing evaluation frameworks to measure effectiveness, accuracy and business value. Embedding Responsible AI principles and security controls throughout the solution … and communication skills. Desirable Experience AI solutions within cyber security or threat detection environments. Experience with Microsoft Sentinel, Splunk, QRadar or other SIEM platforms. SOAR platforms and security automation tooling. Cloud platforms including Azure, AWS or Google Cloud. Public sector or government project experience. Active SC Clearance. Reasonable Adjustments: Respect ...

audiences including leadership and C-suite teams with excellent communication skills. Experience with Security Operations (SecOps) toolset including Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence and Endpoint Detection and Response (EDR) tools. Channel experience, with an understanding of the Google Cloud Partner Ecosystem ...

Infrastructure modernisation initiatives Experience working on large-scale enterprise transformation programmes. Desirable Skills Cyber security technologies and frameworks, including: Zero Trust Microsoft Sentinel/SOAR Microsoft Defender Vulnerability Assessment Privileged Access Management (PAM) Attack Surface Management IT/OT Security Integration Awareness of SQL and Oracle database environments. Experience with ...

monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. You'll build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. You'll implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. … Defender for Cloud, Entra security capabilitiesExperience with Security Copilot and other AI defence capabilities highly desirable. Experience implementing and maintaining security telemetry, integrations, automation and response workflows. Knowledge of cloud security controls and Azure security concepts, while working effectively with separate cloud platform and operations teams. Understanding of identity security ...

technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services.You’ll build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions.You’ll implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture.You’ll work … Sentinel, Defender for Cloud, Entra security capabilitiesExperience with Security Copilot and other AI defence capabilities highly desirable.Experience implementing and maintaining security telemetry, integrations, automation and response workflows.Knowledge of cloud security controls and Azure security concepts, while working effectively with separate cloud platform and operations teams.Understanding of identity security, workload identities ...

identify, shape, and qualify opportunities across AI-driven security and the security of AI systemsArchitect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modellingDefine security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding security from … Identity and Access Management, including PAM, IGA, ITDR, and machine/non-human identity governanceFamiliarity with SIEM platforms (e.g. Microsoft Sentinel, Splunk) and SOAR toolingAwareness of AI governance frameworks and standards (NIST AI RMF, ISO/IEC 42001, EU AI Act)Strong commercial acumen with experience supporting bids, proposals ...

identify, shape, and qualify opportunities across AI-driven security and the security of AI systemsArchitect AI-powered security solutions spanning threat detection, SIEM/SOAR modernisation, anomaly detection, automated incident response, and predictive risk modellingDefine security architectures for AI pipelines, data platforms, model registries, and inference environments, embedding security from … Identity and Access Management, including PAM, IGA, ITDR, and machine/non-human identity governanceFamiliarity with SIEM platforms (e.g. Microsoft Sentinel, Splunk) and SOAR toolingAwareness of AI governance frameworks and standards (NIST AI RMF, ISO/IEC 42001, EU AI Act)Strong commercial acumen with experience supporting bids, proposals ...

calling.Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards.System Architecture: Architect … tooling.Desirable:The following would be beneficial but are not essential:Previous experience within cyber security or security operations.Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response.Experience deploying infrastructure-as-code.What we're looking forA collaborative and engaging approach ...

calling.Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards.System Architecture: Architect … tooling.Desirable:The following would be beneficial but are not essential:Previous experience within cyber security or security operations.Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response.Experience deploying infrastructure-as-code.What we're looking forA collaborative and engaging approach ...

calling.Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards.System Architecture: Architect … tooling.Desirable:The following would be beneficial but are not essential:Previous experience within cyber security or security operations.Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response.Experience deploying infrastructure-as-code.What we're looking forA collaborative and engaging approach ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Security and Agentic AI.Strong work ethic, integrity, and organizational discipline.Extensive experience working with strategic enterprise customers and major cloud infrastructure providers.Strong background in security orchestration, automation, and response (SOAR), XSIAM, XDR, or CNAPP technologies.Demonstrated mastery of securing modern cloud platforms and application architectures.Excellent written and verbal communication skills with outstanding ...

and Agentic AI.Strong work ethic, integrity, and organizational discipline. Extensive experience working with strategic enterprise customers and major cloud infrastructure providers. Strong background in security orchestration, automation, and response (SOAR), XSIAM, XDR, or CNAPP technologies. Demonstrated mastery of securing modern cloud platforms and application architectures. Excellent written and verbal communication ...

wide range of organizations and verticalsAct a trusted advisor to help lead customers to mature outcomes using next generation SIEM, log management, XDR and SOAR features and functionalityProvide knowledge transfer of Falcon LogScale NGSIEM to our customersWhat You'll Need:We’re looking for a colleague with a great compassion … parties.2+ years of experience working with log management/SIEM solutions (e..g, Falcon Next-Gen SIEM, Splunk, Chronicle, Exabeam, QRadar, Sumo Logic, etc) and SOAR (e.g., CrowdStrike Fusion, Palo Alto XSOAR, Splunk SOAR, Tines, Swimlane etc.) in a Security Operations role, a professional services consulting role or similar capacityKnowledge ...

cyber security capabilities. You will have a broad remit across Microsoft security technologies, identity and access management, vulnerability management, incident response, SIEM/SOAR, threat hunting and cloud security , while also providing security advice to technology projects and supporting security-by-design principles. Key Responsibilities Design, implement and maintain cyber … Online, SharePoint and Teams. Support identity and access management, vulnerability management and security monitoring . Investigate and respond to security incidents, including SIEM/SOAR investigations and advanced threat hunting. Support security reviews, audits and annual penetration testing. Identify vulnerabilities, risks and opportunities to improve the organisation's security posture. ...

organizational skillsAt least 2 years of experience with one or more major cloud infrastructure providersAt least 2 years of experience with security orchestration, automation, and response technologyUnderstanding of securing cloud platforms using security operations automationTechnical knowledge of cloud platforms (AWS, Azure, GCP) and modern application architecturesExcellent written and verbal interpersonal ...

here: Working for Home Office Digital.Job descriptionWe are seeking a Senior Response Manager to join the Cyber Security Operations Centre (CSOC) as a Senior SOAR & Detection-as-Code (DaC) Analyst. This role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code … practices. You will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologies.You will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute ...

here: Working for Home Office Digital.Job descriptionWe are seeking a Senior Response Manager to join the Cyber Security Operations Centre (CSOC) as a Senior SOAR & Detection-as-Code (DaC) Analyst. This role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code … practices. You will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologies.You will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute ...

event response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagementsYou will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements … using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgmentExperience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud securityWorking ...

Tune alerts and significantly reduce false positives Onboard, parse and normalise security logs across enterprise environments Support complex incident investigations and threat hunting Develop SOAR playbooks, automation and security integrations Improve detection coverage, SOC efficiency and security monitoring capabilities Work across SIEM, EDR/XDR, IAM, cloud and wider security … false positives and improving alert fidelity Excellent critical thinking and problem-solving skills Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar Knowledge of SOAR, automation, log pipelines and API integrations Strong communication skills and the ability to explain complex security concepts clearly AI experience is beneficial but not essential ...