1 to 25 of 39 Remote/Hybrid SOAR Jobs in the UK excluding London

security monitoring, and cyber risk reduction within complex enterprise environments. Proven experience in implementing, configuring, maintaining, and optimising security technologies including SIEM, EDR, XDR, SOAR, vulnerability management platforms, cloud security solutions, identity and access management controls, endpoint protection, and threat intelligence capabilities. Skilled in cyber incident investigation, threat hunting, security ...

security monitoring, and cyber risk reduction within complex enterprise environments. Proven experience in implementing, configuring, maintaining, and optimising security technologies including SIEM, EDR, XDR, SOAR, vulnerability management platforms, cloud security solutions, identity and access management controls, endpoint protection, and threat intelligence capabilities. Skilled in cyber incident investigation, threat hunting, security ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

Security Operations Manager, this role sits within ICT Services and carries genuine scope and technical authority, including sign-off on detection content, SOAR playbooks and hunting queries, named administrative ownership of key security platforms, and the authority to take immediate containment action during live incidents. Key Responsibilities Lead ...

risks and misconfigurations. You will participate in cloud security reviews, assessments, and architecture discussions. Security Operations & Threat Detection You will engineer and maintain SIEM, SOAR, and security monitoring platforms. You will develop and optimise security alerts, detections, and automated response processes. You will collaborate with internal teams and SOC providers ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

tools Experience integrating custom-built applications into SIEM platforms Experience with implementation of automation solutions, enhancing SOC efficiency and speeding incident response Familiarity with Security Orchestration, Automation, and Response (SOAR) platforms, including developing and maintaining automated response playbooks Experience with threat hunting focused on application code, application, infrastructure and hosting ...

methodical approach to incident investigation and response. Experience & Knowledge Active Directory recovery and server recovery experience. Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Knowledge of vulnerability management and vulnerability scanning tools. Understanding of digital forensics principles and practices. Awareness ...

methodical approach to incident investigation and response. Experience & Knowledge Active Directory recovery and server recovery experience. Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Knowledge of vulnerability management and vulnerability scanning tools. Understanding of digital forensics principles and practices. Awareness ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

Experience It would be beneficial if you also have: Active Directory and server recovery experience. Experience with tools and technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms. Familiarity with security monitoring, threat detection and network defence capabilities. Essential Skills You’ll be successful in this ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

and continuous learning It would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities. Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE). Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials ...

including security incidents and data breaches, from containment and eradication through to post-incident analysis.• Manage and optimise security technologies including Next-Gen SIEM, SOAR, EDR/MDR/XDR and cloud security solutions such as CASB, ZTNA and SASE.• Take a leading role in Bulk's upcoming Cyber Essentials ...

controlvalidationand security acceptance awareness of recognised frameworks and good practice, including NCSC guidance, Cyber Essentials, ISO 27001, Zero Trust, cloud security and SIEM/SOAR concepts. We recognise the value of lived experience.If you have experienceofcomplainingaboutany public body, we strongly encourage you to apply. Civil Service Pension scheme 32.5days annual ...

Delivery within secure/enterprise/defence environments Desirable: Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with ...

ideally have: Significant experience designing, building or deploying Security Operations Centre solutions . Experience with at least two of the following: SIEM SOAR EDR Vulnerability Management Threat Intelligence Strong understanding of SOC operating models, including people, process, policy, services and technology . Good understanding of common cyber threats and appropriate ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Good understanding of industry best practice in Security Operations for Services, People, Policy and ...

including Jira and Cribl Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management fordesign, build, deployment and operation ofSecurity Operations Centre solutions. Good ...

proven capability in SOC deployment for previous clients. Strong hands-on experience designing, building, and operating SOC technology, including at least two of: SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence . Proven delivery record in SIEM onboarding and configuring applications for high data-ingest rates (Cloud and/ ...

ensure security is embedded into the SDLC (DevSecOps). Drive Security Engineering & Automation: Establish best practices for operational readiness, leveraging AI, security automation (SOAR), and threat analytics to streamline delivery, reduce risk, and optimize capacity across technical squads. Executive Security Risk & Delivery Reporting: Present delivery updates, threat/risk assessments ...