26 to 50 of 57 SOAR Jobs in the UK excluding London

and ransomware recovery solutions. Strong knowledge of hybrid cloud environments (Azure, AWS and/or GCP). Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR and IAM/PAM. Strong understanding of disaster recovery and business continuity principles. Excellent stakeholder management and communication skills. Desirable Experience working ...

Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture Produce evidential-standard reporting fit for auditors, regulators and law enforcement Mentor the analyst team and ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization #J-18808-Ljbffr ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength and ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

hybrid role, primarily at the Basingstoke office. You will lead the design, deployment and continuous improvement of our SOC technologies, including SIEM, XDR, SOAR, and custom automation. You’ll mentor SOC engineers, develop automation, and own customer onboarding with our SOC Operations. Expect a fast-paced environment with labs ...

Rule Tuning, Log Ingestion Maintenance of Platform Architecture Detection Engineering Skills/Must have: Strong Defender Suite knowledge: Defender XDR, Endpoint, Identity Sentinel One (SOAR Automation, Playbook operations, Logic Apps) Purview (DLP) Vulnerability Management Tooling i.e. Qualys Salary: £82,500 Basic Salary Per Annum #J-18808-Ljbffr ...

technical complexity into clear business outcomes Confidence presenting to both technical and non-technical stakeholders A solid understanding of modern security architectures, including SIEM, SOAR, and managed security services Exposure to advanced security domains such as DDoS protection, WAF, IAM, EDR, MDM, and vulnerability management Continuous learning is a core ...

and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability … management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication ...

Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority … Skills/Qualifications Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS ...

Splunk SOAR Engineer - Splunk SOAR Phantom - FTC 12 Months £110k plus bens - UK REMOTE Senior SOAR Engineer | Splunk SOAR | Splunk Enterprise Security | Cyber Security | Security Automation | Python | MITRE ATT&CK | NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team ...

Splunk SOAR Engineer - Splunk SOAR Phantom - FTC 12 Months £110k plus bens - UK REMOTE Senior SOAR Engineer Splunk SOAR Splunk Enterprise Security Cyber Security Security Automation Python MITRE ATT&CK NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team ...

Qodea in Manchester is seeking a Senior Security Engineer to lead client engagements focused on Google Cloud Security solutions. This hands-on role requires deep experience with Google SecOps and SIEM delivery, guiding clients towards ...

full project lifecycle, from architecture and implementation through to automation, threat detection, and stakeholder engagement. Strong experience with Microsoft Sentinel & Defender SIEM, XDR & SOAR expertise Security architecture and deployment experience Scripting and automation skills SC-200, SC-100 or AZ-500 certifications desirable You'll act as a trusted advisor ...

Senior SOC Engineer at Nomios, you’ll lead the design, deployment, and ongoing improvement of the technologies that underpin our SOC, including SIEM, XDR, SOAR, scripting, and automation. From building custom log parsers and … response workflows to developing platform architecture, you’ll drive meaningful enhancements to our detection and response capabilities. You’ll play a central role in security orchestration and automation, helping reduce time to detect and respond by refining playbooks and building intelligent workflows. You’ll also lead customer onboarding in collaboration ...

enhance efficiency, reduce false positives, and accelerate response times. Evaluate, recommend, and support the implementation and optimization of SOC technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms) across heterogeneous client stacks. Develop and maintain advanced detection content, custom queries, correlation rules, and use cases tailored to client environments and … environment). Strong hands‐on expertise with industry‐leading tools: SIEM platforms (Microsoft Sentinel, CrowdStrike) EDR/XDR solutions (CrowdStrike, Microsoft Defender, Carbon Black) SOAR, threat intelligence platforms, and network security tools. Proven experience in advanced threat hunting. Solid automation skills to improve SOC efficiency. Experience designing and tuning detection ...

hands‐on delivery. You will shape reference architectures and operating models while aligning to Zero Trust and regulatory requirements. The role covers SOC, SIEM, SOAR, XDR/EDR, identity and cloud security across complex enterprise estates. Collaboration with sales, pre‐sales, and delivery teams is essential to ensure scalable services. ...

Bynd Limited is searching for a Senior Security Engineer in Manchester to lead security deployments for regulated clients, primarily in Google Cloud environments. This role involves hands-on technical work, mentoring junior team members, and ...

looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform click apply ...

Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build and maintain workflows across SIEM, EDR, and SOAR platforms Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate … cloud security, identity, and event-driven automation Strong communication and analytical skills Security clearance (NPPV and/or SC) may be required. Technical Knowledge Security orchestration and automation principles Scripting and integration patterns (APIs, webhooks) SOC detection and response workflows Threat intelligence integration and use case design Cloud and identity ...

Managing CrowdStrike policies, sensor deployments and platform optimisation Designing and implementing endpoint security controls Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms Developing detection rules, response workflows and security policies Supporting threat hunting and improving endpoint visibility Working across Windows server, desktop and cloud workloads Providing … platforms Active Directory integration Enterprise-scale security engineering Desirable Experience Microsoft Defender for Endpoint (MDE) SentinelOne Rapid7 Carbon Black Microsoft Sentinel XSOAR or other SOAR platforms Azure, AWS or GCP security PowerShell or Python automation Zero Trust or enterprise security architecture ...