and applications in threat intelligence, with knowledge of how to conduct analyses within SIEM (Security Information and Event Management) andSOAR (SecurityOrchestration, Automation, andResponse) platforms. Strong foundation in cybersecurity principles, practices, and technologies, including data management specific to cybersecurity applications. Relevant certifications such as CISSP, GCIH, or Google … Cloud Professional Security Engineer are desirable. Skills in data onboarding, quality control, and ensuring high-quality, non-duplicative data for SIEM andSOAR platforms. Preferred Qualifications Include: Master's degree in Cybersecurity, Computer Science, or related field preferred Advanced certifications such as CISSP, CISM, OSCP, and GWAPT. Experience with machine more »
confidential investigations with discretion Ability to multi-task and prioritize workload Familiarity with PowerShell, Python and/or SQL is a plus Familiarity with securityorchestration, automationandresponse (SOAR) is a plus more »
have experience across: Security principles, techniques, and protocols Endpoints, servers, infrastructure and networking technologies Experience in supporting security systems, including vulnerability management, SIEM, DLP,SOAR, EDR solution, Network Firewalls etc The client is based in London, however will consider candidates on a remote basis. Sound interesting? Click apply now andmore »
and protocols Detailed technical knowledge related to endpoints, servers, infrastructure and networking technologies Strong experience in supporting security systems, including vulnerability management, SIEM, DLP,SOAR, EDR solution, Network Firewalls etc. Working knowledge of IT processes (i.e., ITIL) including incident, problem, defect, change and release management The Cyber Security IT Analyst more »
within Secuirty Engineering · Understanding of Security Operations · Experience with security toolsets such as (but not limited to) SIEM, cloud security (zero trust, CASB ect), SOAR, CVM tools. Desirable skills: · Experience with using Zscaler · Experience with using CrowdStrike. · Experience with using Qualys CVM. If you are ready to take the next more »
Experience of CISSP, SSCP, CRISC or CGEIT would be beneficial Experience as a MS Azure Cloud Architect or Engineer is preferred Working knowledge of SOAR concepts and toolsets Authoritative understanding of data communications and information systems hardware, software, and design principles such as VPN, segmentation, WAF, access control, CASB. Working more »
Leeds, England, United Kingdom Hybrid / WFH Options
Harvey Nash
by design. Other essentials: Background that covers cyber technology, security operations, incident response, architecture, and training. Experience in implementing technology such as SIEM, XDR, SOAR, etc. Background in Financial Services or other regulated industries (desired) Experience in leading through leaders and developing an internal capability Good soft skills, and the more »
relevant experience CISSP, CEH, OSCP, GCIH or applicable security field Incident, change and problem process management experience Experience in SIEM (Splunk, Sentinel), IPS andSOAR tools a plus Experience with investigating and managing major/complex cyber security incidents end-to-end Knowledge of adversarial tactics, techniques, procedures (TTPs) & industry … Att&ck, ISO27000, ISO27001) Strong working knowledge of security technologies including but not limited to SIEM, EDR/EPP, AV, IDS, IPS, AD, DNS, SOAR E: j.bhard@locke-mccloud.com Locke & McCloud are the UK’s leading cyber security & information security staffing company – through having a sole focus on the cyber more »
North West London, London, United Kingdom Hybrid / WFH Options
Client Server
security experience with a strong understanding of security concepts, principles and best practice You're experienced with security tools and technologies e.g. Splunk, SIEM, SOAR, EDR, NDR You have a good knowledge of Linux and associated scripting languages e.g. Python, bash, PowerShell You have an infrastructure/systems engineering background more »
Leeds, England, United Kingdom Hybrid / WFH Options
Cyber Security Jobsite
a coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements more »
cyber security systems and tooling • Reasonable knowledge of Security Information and Event Management systems • Reasonable knowledge of Firewall systems (Fortigate essential) • Foundational knowledge of SecurityOrchestration, AutomationandResponse (SOAR) systems • Good knowledge of common operating systems (Windows, Mac, Linux) • Good knowledge of networking and network equipment • Relevant certifications such more »
Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Sanderson Recruitment
work in a small high performing team, collaborating with other technical resources whilst aligning to the security strategy. Technical knowledge and experience with SIEM, SOAR, IDPS, DDoS, Malware Protection, Vulnerability Management, and Application Security tooling, etc. Knowledge of Information Security frameworks (CIS, NIST, NCSC CAF), supporting processes and toolsets. Ability more »
Crawley, West Sussex, South East, United Kingdom Hybrid / WFH Options
Matchtech
anomalous activity. Incident Response: Lead the response to high-severity security incidents, providing senior-level response activities and ensuring effective remediation and recovery actions. SecurityOrchestration, Automation, andResponse (SOAR): Support and develop the SOAR platform, creating new workflows for automated responses to common attack types. Digital Forensics: Conduct forensic … of advanced threat hunting and incident response. Experience in log correlation, forensics investigations, and compliance with regulatory frameworks. Proficiency in security technologies including SIEM, SOAR … EDR, IDS/IPS, and behavioural analytics. Knowledge of adversarial tactics, techniques, and industry-standard frameworks like Mitre ATT&CK. Deep understanding of SIEM andSOAR solutions, Identity and Access Management, and Data Loss Prevention technologies. Experience in developing incident response playbooks, SOAR, and conducting red-team exercises. If you more »
as they occur as part of an incident response team. • Implement metrics and dashboards to give visibility of the Enterprise infrastructure. • Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. • Produce documentation to ensure the repeatability and standardisation of more »
define the technology, policies and practices used to protect the company and its clients. You’ll work to implement the Splunk monitoring solution andSOARand you’ll be able to work across vulnerability detection, infrastructure management, Web and Mobile Application Security, DevSecOps and many other areas – A Very varied more »
one or more of the following: Public Cloud technologies, including experience with Azure (or similar) Endpoint Security technologies SIEM products Automation technologies such as SOAR Virtualisation Microsoft security stack more »
the technology, policies and practices used to protect the company and its clients. You’ll drive the implement of a Splunk monitoring solution andSOARand you’ll be able to work across vulnerability detection, infrastructure management, Web and Mobile Application Security, DevSecOps and many other areas - A key andmore »
Cyber Security Engineer, M&A, £635(inside) 10 months +Extension – SIEM, SOAR, IdAM, Vulnerability Management, Trellix Are you a Cyber Security Engineer and ready to take on a pivotal role in a global business? Working on a M&A, the largest in its sector. You will be joining the team … cyber action plan. Track and communicate progress, risks, and issues. Review, report, and sign-off Infrastructure designs. Security Tooling (EDR, Vulnerability Management, IdAM, SIEM, SOAR). Input/review into cyber security design artefacts (HLD/LLD) and provide security engineering consultancy. Implementation cyber security support activities (configuration, connectivity, integration more »
Cyber Assessment Framework (CAF) and ISA/IEC 62443, ISO/IEC 27001/27002, and GDPR. Working knowledge of security technologies including SIEM, SOAR, EDR, AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics. Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks more »
the charge in designing and implementing robust security controls. 🚀 What You'll Do: Optimise the Security Operations platform across endpoints, networks, and clouds. Spearhead SecurityOrchestrationAutomationandResponse (SOAR) initiatives. Drive Security Data & Analytics with next-gen detection logic and analytics. 🎯 Essential Skills: Proven cyber security experience. Proficiency in … supporting security tools like SOAR, SIEM, EDR, NGFW, and more. Industry certifications (CISSP/CCSP, CEH, etc.) or equivalent expertise. Hybrid environment expertise with Azure or AWS certifications as a bonus. Scripting prowess for automationand API interaction. Familiarity with microservices, Kubernetes, CI/CD pipelines, and DevSecOps principles. Ready more »
and managing Fortinet FortiAnalyzer. • Provide guidance to Infrastructure and Product teams on securing Microsoft 365 and Azure cloud services. • Establish and manage SIEM andSOAR capabilities using Azure Logic Apps or equivalents. • Enhance the usage and support of Entra ID (previously Azure AD) for IAM, Identity Governance, and PIM. • Document … with enhancing security in Azure Landing Zones (e.g., Key Vault, NSGs, WAF). • Experience with Microsoft Entra ID, including identity governance. • Proficiency in using SOAR tooling, automating security operations, and policy as code. • Ideally, experience in securing GitHub or similar platforms. • Ideally, experience in securing data platforms (e.g., Databricks, Snowflake more »
as Code practices. Assist in securing data platforms and implementing internal SIEM. Collaborate on securing Microsoft 365 and Azure cloud services. Operate SIEM andSOAR capabilities and enhance identity governance. Requirements: Hands-on experience with Microsoft Sentinel and Defender suite. Proficiency in Azure Landing Zones security enhancement. Familiarity with Microsoft … Entra ID andSOAR tooling. Ideally, experience in securing GitHub and data platforms. Knowledge of ISO 27001, Cyber Essentials Plus, and CIS. Scripting skills with Python and KQL. Strong English communication skills. more »
Corsham, England, United Kingdom Hybrid / WFH Options
J&C Associates Ltd
as they occur as part of an incident response team. • Implement metrics and dashboards to give visibility of the Enterprise infrastructure. • Use of the SOAR platform to assist with playbook automationand case management capabilities to streamline team processes and tools. • Produce documentation to ensure the repeatability and standardisation of more »
Experience of CISSP, SSCP, CRISC or CGEIT would be beneficial Experience as a MS Azure Cloud Architect or Engineer is preferred Working knowledge of SOAR concepts and toolsets Authoritative understanding of data communications and information systems hardware, software, and design principles such as VPN, segmentation, WAF, access control, CASB. Working more »