26 to 50 of 68 SOAR Jobs in the UK

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote (with UK wide travel) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity ...

Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

playbooks, runbooks, templates, or accelerators - back into a practice or community, rather than leaving knowledge within a single team Tools and practices Familiarity with SOAR tooling and automation of triage and enrichment workflows Experience working in Kanban-led operating models, including managing triage queues, WIP limits, and class-of-service ...

security platform management Improving detection coverage within complex enterprise environments Desirable Experience Exposure to any of the following would be advantageous: Security automation and SOAR AI-driven Security Operations or Agentic AI Threat Intelligence integration Telemetry Engineering About You You'll likely be an experienced Detection Engineer, Security Platform Engineer ...

Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities ...

threat detection and investigation Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases Develop Logic Apps and SOAR workflows to automate response and reduce manual effort Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules ...

support the design, deployment, configuration and ongoing development of the SOCs security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content and threat-led use cases. Whats … and career progression opportunities Candidates must be eligible to obtain SC clearance What you need Strong experience designing, building, deploying and operating SIEM and SOAR platforms Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both Experience with technologies such as Splunk Enterprise Security ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

streamline workflows and processes, improve efficiency and drive business outcomes.Bonus points:Currently developing Go-based microservices for scalable, high-throughput architecturesExperience in cybersecurity, SIEM, SOAR, or adjacent security domainsHands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks#LI-GO1#LI-HYBRIDBenefits of Working at CrowdStrike:Market leader ...

decision-making, streamline workflows, and drive business outcomes. Bonus points: Currently developing Go-based microservices for scalable, high-throughput architectures; experience in cybersecurity, SIEM, SOAR, or adjacent security domains; hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks. Benefits Market-leading compensation and equity awards ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

projects. Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers, SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

small founding team where architecture, code, debugging, customer context and hiring input all overlap. Desirable experience: Cybersecurity product experience in EDR, XDR, SIEM, SOAR, Zero Trust, identity security, network security or deception technology. Experience implementing cryptographic data structures, signed records, PKI integrations or tamper-evident audit systems. Experience with Microsoft ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

fine-tuning Managing App segmentation and connector deployment. Zero Trust Client Connector configuration and rollout. Integrating Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms. Collaborating with infrastructure teams to migrate legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models. Conducting proof ...

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and ...

design, implementation, and operation of key security technologies and services across a cloud‐first environment, including: Security Information and Event Management (SIEM) Security Orchestration, Automation and Response (SOAR) Endpoint Detection and Response (EDR/XDR) Network Detection and Response (NDR) Vulnerability and Exposure Management Security Incident Management and Response Cyber ...

defending critical public services and guiding a team of engineers and analysts in Scotland. You will own the core security tooling estate, oversee SIEM, SOAR, EDR/XDR, NDR and CTI in a cloud-first environment, shaping strategy, managing risk, and delivering robust security controls across our organization. #J ...

and endpoint environments. Design, implement and optimise SIEM detection rules to improve threat detection and reduce false positives. Develop and maintain security automation using SOAR platforms, Logic Apps, Python and APIs. Conduct proactive threat hunting and perform root cause analysis following security incidents. Support endpoint security, identity protection and vulnerability … management initiatives. Requirements Experience within a SOC environment. Strong knowledge of SIEM, EDR and SOAR platforms. Hands-on experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, Darktrace or similar security technologies. Experience monitoring and securing Azure and AWS environments. Knowledge of ISO 27001 and Cyber Essentials. Excellent communication ...

Zero Trust principles, regulatory requirements and recognised security frameworks. Lead the end‐to‐end delivery of complex consultancy engagements across SOC/SIEM/SOAR, XDR/EDR, identity, cloud security, vulnerability management and related services, ensuring delivery to agreed scope, quality and timelines. Serve as a senior technical authority … Skills/Qualifications Significant experience delivering complex security consultancy engagements within an MSSP or managed services environment, covering SOC design and deployment, SIEM/SOAR, XDR/EDR, identity, cloud security and vulnerability management. Proven capability designing and implementing enterprise security architectures across Microsoft and mixed-vendor environments, including SaaS ...