26 to 50 of 166 SOAR Jobs in the UK

establishing an internal SOC or transitioning from an outsourced SOC/MSSP. Strong knowledge of Microsoft Sentinel, Microsoft Defender XDR and KQL. Experience with SOAR and security automation. Exposure to global, multi-company or multi-tenant enterprise environments. Relevant certifications such as CISSP, CISM, GCIH, GCIA or SC-200. Experience ...

following skills and experience: Significant experience in Cyber Threat Intelligence. Significant experience in Threat Hunting. Experience with the Microsoft Sentinel SIEM/SOAR platform. Significant experience in writing KQL. Excellent understanding of threat intelligence principles and practices. Proven understanding of security risk management. Understanding of threat modelling. Knowledge ...

working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and threat investigation ...

Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details Up to £92 per hour (Inside IR35 ...

engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and ...

experience that would be beneficial: Microsoft Sentinel, Defender XDR and KQL. Building an internal SOC or transitioning away from an outsourced SOC/MSSP. SOAR and security automation. Certifications such as CISSP, CISM, GCIH, GCIA or SC-200. Why Consider This Opportunity? Build something from the ground up - play ...

experience that would be beneficial: Microsoft Sentinel, Defender XDR and KQL. Building an internal SOC or transitioning away from an outsourced SOC/MSSP. SOAR and security automation. Certifications such as CISSP, CISM, GCIH, GCIA or SC-200. Why Consider This Opportunity? Build something from the ground up - play ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

experience with Git/version control, code reviews and automation . Strong communication and stakeholder management skills. Desirable Skills Purple teaming or adversary emulation. SOAR integration and automation. Python Scripting. Data modelling and log normalisation. Machine Learning-based anomaly detection. Relevant security certifications such as GIAC or cloud security certifications ...

infrastructure-as-code The ability to communicate technical risk clearly and concisely to non-technical stakeholders Experience with detection-as-code practicesExperience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks Experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tooling Familiarity ...

infrastructure-as-code The ability to communicate technical risk clearly and concisely to non-technical stakeholders Experience with detection-as-code practices Experience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks Experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tooling ...

.* **AI & Workflow Tooling:** Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms).* **Cloud & Search Interface Familiarity:** Working comfort navigating the **AWS Management Console** (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics).* **Communication & Documentation ...

Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Extensive playbook development and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting Extensive experience with AWS Cloud-native security tools (CloudTrail, GuardDuty, Security Hub) Security certifications (GIAC, CEH, CISSP, etc.) Experience working with ...

Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Extensive playbook development and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting Extensive experience with AWS Cloud-native security tools (CloudTrail, GuardDuty, Security Hub) Security certifications (GIAC, CEH, CISSP, etc.) Experience working with ...

validation, secure development practices and operational readiness. Desirable Experience Experience securing Azure landing zones and enterprise-scale cloud platforms. Experience with Security Orchestration, Automation and Response solutions and automated control validation. Experience with Privileged Access Management and Zero Trust security principles. Experience supporting security platforms in a regulated financial-services ...

cloud platforms (AWS & GCP) Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK) Experience building or working with automation (e.g., Python, scripting, SOAR platforms) Ability to operate effectively during high-severity incidents Excellent written communication skills with a passion for clear, actionable documentation Growth mindset with a proactive ...

networking protocols, operating systems (Windows/Linux), and security technologies (SIEM, EDR, IDS/IPS, firewalls, proxies) Hands‐on experience with SIEM tuning and SOAR automation Familiarity with frameworks like MITRE ATT&CK and cyber kill chain Knowledge of cloud platforms (Azure, AWS, GoogleCloud) and scripting/programming skills Excellent ...

effectively when threats arise The role offers the opportunity to work with industry‐leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether you're influencing strategic decisions, leading improvement initiatives ...

within secure/enterprise/defence environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with ...

solutions within large enterprise environments 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence Ability to conceive, architect, and develop effective correlation and detection rules Familiarity with a range of SIEM technologies, such ...

propositions and pre-sales activity. Primary responsibilities: soc architecture and Transformation: Lead discovery, current-state assessment and target-state design for SOC, SIEM, SOAR, EDR/XDR and protective monitoring engagements. Define monitoring strategies, target operating models, service boundaries, responsibilities, escalation paths, service levels and transition plans for client-operated … and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management, identity, network and incident response processes. Produce and own architecture artefacts including requirements, High ...

determine root cause, impact, and remediation actions. Correlate telemetry from SIEM, EDR, CSPM, and cloud‐native sources to identify sophisticated attack chains. Security Automation & SOAR Engineering Design, develop, and maintain automated response playbooks within the SOAR platform to improve response efficiency. Build and maintain automation scripts (Python, Go, etc. … response across AWS – AWS experience is essential for this role. Proven scripting and automation capability using Python, Go, PowerShell, Bash, etc. Practical experience with SOAR platforms (e.g., CrowdStrike Fusion SOAR) and SIEM technologies (e.g., CrowdStrike Falcon, Splunk, QRadar, Microsoft Sentinel). Deep understanding of EDR tooling, host/network forensics ...

with the SOC and IT teams, ensuring resilient services for communities. You will work with industry frameworks such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR, collaborating with stakeholders to embed best practices and continuous improvement across security #J-18808-Ljbffr ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

playbooks, runbooks, templates, or accelerators— back into a practice or community, rather than leaving knowledge within a single team Tools and practices Familiarity with SOAR tooling and automation of triage and enrichment workflows Experience working in Kanban‐led operating models, including managing triage queues, WIP limits, and class‐of‐service ...