51 to 75 of 82 SOAR Jobs in the UK excluding London

and OT, with on-going threat detection, rapid response, and risk reduction. You will collaborate with IT/OT teams, maintain security platforms (SIEM, SOAR, EDR, and email security), and support audits and continuous improvement. A CTC clearance is required for eligibility. #J-18808-Ljbffr ...

team with both technical and non-technical guidance. Ideal candidates will have extensive AWS/Sentinel/Defender experience, strong knowledge of SIEM/SOAR/EDR, and familiarity with NIST/ISO frameworks, plus the #J-18808-Ljbffr ...

Harvey Nash in the United Kingdom seeks an experienced SEIM Engineer with Active SC clearance to onboard and integrate security log sources into Microsoft Sentinel, delivering reliable telemetry and comprehensive threat visibility. You will develop ...

enterprise platforms supporting DLP, data discovery and classification, information protection, or data access governance.* Knowledge of integrating data security capabilities with identity, cloud, SIEM, SOAR, workflow, and enterprise data platforms through APIs and event-driven architectures.* Proven ability to influence technical decisions and drive adoption of secure patterns and engineering ...

remediation and guiding both technical and non-technical teams with security best practices. The ideal candidate brings cloud security expertise, familiarity with SIEM/SOAR/EDR tools, and knowledge of frameworks like NIST/ISO. Willingness to obtain required UK clearance is essential. #J-18808-Ljbffr ...

and advance the Security Operations Centre. You will manage investigations, drive threat detection enhancements, and lead a team across SIEM, EDR, and SOAR platforms in a hybrid UK-based role. The role emphasizes incident response, forensics, automation, and CI/CD security, with collaboration across DevOps, IT, and development teams ...

contribution within a small team environment Desirable Skills Experience with platforms such as CrowdStrike or similar ecosystems Experience building automation for enrichment and response (SOAR, scripting) Experience working with managed security providers or specialist partners Benefits 100% renewable energy powering the riverside factory On-site gym and exercise studio Subsidised ...

common threat patterns/abuse cases Ability to use data to prioritize, measure detection efficacy, and manage false positives Preferred Experience with SIEM/SOAR and detection engineering programs Experience operating in a highly matrixed, complex organization Equal Opportunity Statement We recognize that our people are our strength and ...

customer engagement models. + Technical Expertise - Deep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software. - Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools. + Sales Acumen - Strong consultative selling skills. - Ability to translate technical features into business benefits. + Leadership & Communication - Proven ability ...

strategy, resource planning, and customer engagement models.Technical ExpertiseDeep understanding of IT infrastructure, cybersecurity, cloud platforms, and enterprise software.Hands-on experience with technologies like SIEM, SOAR, EDR, and virtualization tools.Sales AcumenStrong consultative selling skills.Ability to translate technical features into business benefits.Leadership & CommunicationProven ability to lead cross-functional teams.Excellent presentation, negotiation, and ...

and real-world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations … developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar Scripting and automation capability using Python, PowerShell or similar, including working with APIs Experience ...

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks ...

Cyber SOAR Specialist Salary: Circa £68,000 Location: Bristol, Leeds, Norwich, Sheffield, York or Perth A bit about the job We are looking for someone who loves using automation to solve complex cyber security challenges and wants to make a real impact. You may already be working with SOAR technologies … step in a role where you can combine technical expertise, AI innovation and problem‐solving skills to help protect Aviva. Responsibilities As a Cyber SOAR Specialist, you’ll help strengthen Aviva's global cyber security capabilities through automation and orchestration. You’ll join the Automation and Orchestration team within Cyber ...

common compromise chains Ability to design validation approaches and measure detection performance (precision/noise reduction) using data-driven methods Experience with security automation (SOAR) About Electronic Arts We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value ...

integration, and governance frameworks Ideally, you will be familiar with: Identity Governance and Administration (IGA) solutions Zero Trust Network Access (ZTNA) technologies SIEM and SOAR platforms Procurement and vendor lifecycle management processes Regulatory compliance, audit, and assurance requirements Wipro is an advocate for positive change and conscious inclusion. ...

SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python … across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination ...

queries, behavioral analysis, and threat modeling frameworks. Develop and maintain security dashboards, metrics, and executive-level reporting. Develop and maintain security tools, playbooks, and SOAR workflows to improve SOC efficiency. Core Qualifications The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern … framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP ...

Lead Deep understanding of end‐to‐end SOC operations including alert triage, incident response, threat hunting, and case management Extensive experience with SIEM platforms, security orchestration tools, and the broader SOC technology stack Strong knowledge of threat detection methodologies, alert correlation, and incident prioritisation frameworks Expert‐level understanding of MITRE … Tier 3 SOC roles with incident response and threat hunting responsibilities. Previous involvement in SOC tool evaluation, selection, or implementation projects. Experience with security automation, SOAR platforms, or playbook development. Experience working with or partnering with SOC/SIEM/EDR vendors and MSSP (Managed Security Service Provider) vendors. Familiarity ...

Fixed Term Contract Location: GBR Cheltenham Jessop House Description We are seeking an experienced Splunk Engineer to help design, build, and manage our Splunk SOAR service, with a strong focus on automation, security response, and service maturity. This role will be responsible for developing, reviewing, testing, and deploying Splunk SOAR … ensuring they are secure, reliable, and aligned with security governance and operational needs. The role requires a technically strong Splunk engineer with experience in SOAR development, Splunk architecture, and security engineering best practices. You will work closely with SOC teams, security engineers, and customers, owning your own workload and providing ...

strategy and technical execution across SEP2’s core portfolio, including the Wingman Managed Services Suite (mXDR, MDR, EDR, Managed Firewalls, vCISO), Google SecOps (SIEM, SOAR, Mandiant Threat Intelligence), and vendor partner technologies (e.g., Check Point, Wiz, SentinelOne, CrowdStrike) and services for our clients. This is a Hybrid position with … solutions are scalable, operationally deliverable, and compliant with customer RACI expectations. Demonstrations & Proof of Concepts (POC) Deliver compelling, outcome-based product demonstrations covering SIEM, SOAR, EDR, Cloud Security, and Threat Intelligence platforms. Manage and execute end-to-end technical Proof of Concepts (POCs) for client opportunities, establishing clear success criteria ...

risk-based vulnerability management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality. Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing. Provide senior technical escalation support during critical security incidents and drive post-incident … specifically utilizing EPSS (Exploit Prediction Scoring System) alongside CVSS to determine patching prioritisation. Ability to design and influence automated response playbooks using SOAR platforms Practical experience creating reference architectures and patterns for engineering teams. Proven ability to design and deploy automated preventive and detective guardrails at scale. Ability to solve ...

and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs or a SOAR platform Correlate evidence across SIEM, endpoint, identity and cloud platforms (Sentinel, Defender XDR, CrowdStrike, Entra ID, Microsoft 365, AWS) to scope the full blast radius … solid understanding of MITRE ATT&CK and KQL (or equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands-on SOAR platform configuration Working knowledge of several of: Microsoft Sentinel, Defender XDR, CrowdStrike, Microsoft Entra ID/Azure AD, Microsoft 365, AWS security tooling Experience investigating identity ...

Sentinel; build custom parsers and data transformations Design and optimise KQL queries; build and tune analytic rules and detection logic Develop Logic Apps/SOAR workflows to automate response Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment Automate deployment/config across environments; tune detections … source onboarding, custom parsers and data normalisation Advanced KQL development and optimisation Analytic rule/detection logic design and tuning Logic Apps, Playbooks and SOAR automation Azure DevOps/Git CI/CD pipeline implementation Strong grounding in security monitoring, incident response and threat hunting Strong troubleshooting and root cause ...

accreditation requirements. Design across people, process, technology, services and infrastructure . Develop CONOPS and high- and low-level designs. Work with technologies including SIEM, SOAR, EDR, Vulnerability Management and Threat Intelligence . Design on-premise and cloud security architectures . Conduct risk assessments and support vulnerability management. Research and evaluate … Lean and Waterfall delivery environments. Experience You'll Need Strong experience in SOC/Security Architecture . Experience with at least two of SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence . Strong knowledge of cloud and on-premise security architecture. Understanding of security best practices, risk and vulnerability management. ...

About Us Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them ...