26 to 50 of 65 SOAR Jobs in the UK

Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

playbooks, runbooks, templates, or accelerators - back into a practice or community, rather than leaving knowledge within a single team Tools and practices Familiarity with SOAR tooling and automation of triage and enrichment workflows Experience working in Kanban-led operating models, including managing triage queues, WIP limits, and class-of-service ...

security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation and SOAR AI-driven Security Operations or Agentic AI Threat Intelligence integration Telemetry Engineering About You You'll likely be an experienced Detection Engineer, Security Platform Engineer ...

Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats … and career progression opportunities Candidates must be eligible to obtain SC clearance What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

team in London. The role emphasizes building and refining security tooling, SIEM/EDR configurations, and SOC collaboration. You will develop threat models, implement SOAR capabilities, manage SIEM/EDR and cloud/infrastructure logs across Azure, AWS, and on-prem environments. #J-18808-Ljbffr ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

small founding team where architecture, code, debugging, customer context and hiring input all overlap. Desirable experience: Cybersecurity product experience in EDR, XDR, SIEM, SOAR, Zero Trust, identity security, network security or deception technology. Experience implementing cryptographic data structures, signed records, PKI integrations or tamper-evident audit systems. Experience with Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

fine-tuning Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models. Conducting proof ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability … management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication ...

Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority … Skills/Qualifications Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS ...

architecture reviews to ensure products are secure by design. You will design and scale enterprise SIEM, develop detection logic, manage SBOM, prioritize vulnerabilities, build SOAR playbooks, and support audit and regulatory activities while fostering a security-first culture. #J-18808-Ljbffr ...

enhance efficiency, reduce false positives, and accelerate response times. Evaluate, recommend, and support the implementation and optimization of SOC technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms) across heterogeneous client stacks. Develop and maintain advanced detection content, custom queries, correlation rules, and use cases tailored to client environments and … environment). Strong hands‐on expertise with industry‐leading tools: SIEM platforms (Microsoft Sentinel, CrowdStrike) EDR/XDR solutions (CrowdStrike, Microsoft Defender, Carbon Black) SOAR, threat intelligence platforms, and network security tools. Proven experience in advanced threat hunting. Solid automation skills to improve SOC efficiency. Experience designing and tuning detection ...

hands‐on delivery. You will shape reference architectures and operating models while aligning to Zero Trust and regulatory requirements. The role covers SOC, SIEM, SOAR, XDR/EDR, identity and cloud security across complex enterprise estates. Collaboration with sales, pre‐sales, and delivery teams is essential to ensure scalable services. ...

Cyber Security Engineering, Security Operations, Threat Detection or Security Platform Implementation. Experience integrating enterprise security technologies into complex environments. Good understanding of SIEM, SOAR, EDR, Threat Intelligence and modern SOC operations. Knowledge of networking, APIs, authentication, Identity & Access Management (IAM) and cloud platforms. Experience with … security testing, attack simulation, validation or Purple Team activities. Excellent analytical, troubleshooting and documentation skills. Exposure to AI-powered security platforms, automation technologies or security orchestration tools would be highly desirable. Desirable technologies SIEM & SOAR platforms Microsoft Sentinel, Splunk or QRadar Microsoft Defender, CrowdStrike or other EDR solutions Azure ...