need: · Extensive experience of working within a SOC or adjacent role. · Experienced in responding to cyber incidents. · Conversant with common security tooling (E.g., SIEM, SOAR, EDR, NDR). · Understanding of threat actors, their tactics, techniques, and procedures. · Understanding of security event data, the value of different data sources and tools more »
Corsham, England, United Kingdom Hybrid / WFH Options
J&C Associates Ltd
as they occur as part of an incident response team. • Implement metrics and dashboards to give visibility of the Enterprise infrastructure. • Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. • Produce documentation to ensure the repeatability and standardisation of more »
Preston, Lancashire, North West Hybrid / WFH Options
BAE Systems
is not a typical network engineer or SOC analyst role) Development of automation scripts using Python and various toolset API's Supporting SIEM andSOAR technologies Supporting Endpoint Protection technologies Contribute to the development of the services through process, people, and technology where appropriate Contribute to the management and updating … Proficiency in Python scripting/automation scripting using API's Analytical background with ability to solve problems/issues Desirable: Knowledge of SIEM/SOAR toolsets Technical background with experience in an IT or Cyber Security operations or equivalent role Experience of working with Anti-Virus/Anti-Malware/ more »
Preston, Lancashire, North West Hybrid / WFH Options
BAE Systems
security toolsets as required for the role Continuously work towards organisational, departmental, and individual objectives and uphold security standards and principles Supporting SIEM andSOAR technologies Provide ongoing management and administration of Cyber Security solutions Provide support to projects delivering and implementation of Cyber Security solutions Provide guidance and support more »
Glasgow, Lanarkshire, United Kingdom Hybrid / WFH Options
Sanderson Recruitment Plc
experience of learning, adapting and utilising different security technologies, including but not limited to private and cloud infrastructure. Technical knowledge and experience with SIEM, SOAR, IDPS, DDoS, Malware Protection, Vulnerability Management, and Application Security tooling, etc. Knowledge of Information Security frameworks (CIS, NIST, NCSC CAF), supporting processes and toolsets. Ability more »
as they occur as part of an incident response team. * Implement metrics and dashboards to give visibility of the Enterprise infrastructure. * Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. * Produce documentation to ensure the repeatability and standardisation of more »
North West London, London, United Kingdom Hybrid / WFH Options
Client Server
security experience with a strong understanding of security concepts, principles and best practice You're experienced with security tools and technologies e.g. Splunk, SIEM, SOAR, EDR, NDR You have a good knowledge of Linux and associated scripting languages e.g. Python, bash, PowerShell You have an infrastructure/systems engineering background more »
london, south east england, United Kingdom Hybrid / WFH Options
Capita
Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps About Capita Technology and Software Solutions (TSS more »
confidential investigations with discretion Ability to multi-task and prioritize workload Familiarity with PowerShell, Python and/or SQL is a plus Familiarity with securityorchestration, automationandresponse (SOAR) is a plus more »
leeds, west yorkshire, yorkshire and the humber, United Kingdom
Anson McCade
combination of existing knowledge resources and independent research. Understand Threat Intelligence and its use in an operational environment Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. SOC more »
cyber security systems and tooling • Reasonable knowledge of Security Information and Event Management systems • Reasonable knowledge of Firewall systems (Fortigate essential) • Foundational knowledge of SecurityOrchestration, AutomationandResponse (SOAR) systems • Good knowledge of common operating systems (Windows, Mac, Linux) • Good knowledge of networking and network equipment • Relevant certifications such more »
crawley, west sussex, south east england, United Kingdom
InfoSec People Ltd
Centre (NCSC) Cyber Assessment Framework (CAF) and ISA/IEC 62443, ISO/IEC 27001/27002, GDPR.Working knowledge of security technologies including SIEM, SOAR, EDR, AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics.Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks (Mitre more »
london, south east england, United Kingdom Hybrid / WFH Options
Client Server
security experience with a strong understanding of security concepts, principles and best practice You're experienced with security tools and technologies e.g. Splunk, SIEM, SOAR, EDR, NDR You have a good knowledge of Linux and associated scripting languages e.g. Python, bash, PowerShell You have an infrastructure/systems engineering background more »
crawley, west sussex, south east england, United Kingdom
Vallum Associates
Cyber Assessment Framework (CAF) and ISA/IEC 62443, ISO/IEC 27001/27002, and GDPR. Working knowledge of security technologies including SIEM, SOAR, EDR, AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics. Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks more »
leeds, west yorkshire, yorkshire and the humber, United Kingdom Hybrid / WFH Options
Harvey Nash
by design. Other essentials: Background that covers cyber technology, security operations, incident response, architecture, and training. Experience in implementing technology such as SIEM, XDR, SOAR, etc. Background in Financial Services or other regulated industries (desired) Experience in leading through leaders and developing an internal capability Good soft skills, and the more »
to data, security, and network engineers. Technical Scope: Security Domains : Architecture and strategy across IT security areas such as Identity & Access Management, SIEM/SOAR, Threat Prevention, Network Security, Application Security, Data Privacy. Compliance : Ensure data securityand compliance with relevant regulatory andsecurity standards (e.g., NIST, CyberEssentials Plus, NCSC more »
threat actors, and the tactics and techniques adopted. Proven experience with programming - Python, Rust, C++ or other major languages Knowledge of SecOps tooling (SIEM, SOAR, TI). more »
and managing Fortinet FortiAnalyzer. • Provide guidance to Infrastructure and Product teams on securing Microsoft 365 and Azure cloud services. • Establish and manage SIEM andSOAR capabilities using Azure Logic Apps or equivalents. • Enhance the usage and support of Entra ID (previously Azure AD) for IAM, Identity Governance, and PIM. • Document … with enhancing security in Azure Landing Zones (e.g., Key Vault, NSGs, WAF). • Experience with Microsoft Entra ID, including identity governance. • Proficiency in using SOAR tooling, automating security operations, and policy as code. • Ideally, experience in securing GitHub or similar platforms. • Ideally, experience in securing data platforms (e.g., Databricks, Snowflake more »
as Code practices. Assist in securing data platforms and implementing internal SIEM. Collaborate on securing Microsoft 365 and Azure cloud services. Operate SIEM andSOAR capabilities and enhance identity governance. Requirements: Hands-on experience with Microsoft Sentinel and Defender suite. Proficiency in Azure Landing Zones security enhancement. Familiarity with Microsoft … Entra ID andSOAR tooling. Ideally, experience in securing GitHub and data platforms. Knowledge of ISO 27001, Cyber Essentials Plus, and CIS. Scripting skills with Python and KQL. Strong English communication skills. more »
edinburgh, central scotland, United Kingdom Hybrid / WFH Options
Denholm Associates
part of the Cyber Security Operations team, this role will support: Security Platform Optimisation, covering endpoint, network, cloud and logging technologies SecurityOrchestrationAutomationandResponse, building securityautomation playbooks and integration's Security Data & Analytics, onboarding data and developing detection logic and analytics Essential Criteria: Demonstrable experience working in … cyber security Experience supporting security tools, such as SOAR, SIEM, EDR, NGFW, CSPM, WAF, AV Industry recognised certifications such as Certified Splunk Architect, PCSAE, CISSP/CCSP, CEH or equivalent experience Experience working in a hybrid (on-prem/multi-cloud) environment. Knowledge of one or more scripting languages with more »
relevant experience CISSP, CEH, OSCP, GCIH or applicable security field Incident, change and problem process management experience Experience in SIEM (Splunk, Sentinel), IPS andSOAR tools a plus Experience with investigating and managing major/complex cyber security incidents end-to-end Knowledge of adversarial tactics, techniques, procedures (TTPs) & industry … Att&ck, ISO27000, ISO27001) Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, IDS, IPS, AD, DNS, SOAR E: j.bhard@locke-mccloud.com Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber more »
Northallerton, North Yorkshire, Yorkshire and the Humber
Computer Futures
as they occur as part of an incident response team. Implement metrics and dashboards to give visibility of the Enterprise infrastructure. Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. Produce documentation to ensure the repeatability and standardisation of more »
as they occur as part of an incident response team. Implement metrics and dashboards to give visibility of the Enterprise infrastructure. Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. Produce documentation to ensure the repeatability and standardisation of more »
as they occur as part of an incident response team. Implement metrics and dashboards to give visibility of the Enterprise infrastructure. Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. Produce documentation to ensure the repeatability and standardisation of more »
Leeds, England, United Kingdom Hybrid / WFH Options
Cyber Security Jobsite
a coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements more »