26 to 50 of 185 SOAR Jobs in the UK

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

and stakeholder management skills. 8+ years of experience in cybersecurity, with at least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience ...

operations. Expert understanding of network protocols and infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and Confluence) Email ...

operations. Expert understanding of network protocols and infrastructure. Ability to gather client requirements and translate them into technical solutions. Strong knowledge of: SIEM and SOAR platforms API integrations Endpoint Detection and Response (EDR) Log analysis and malware detection Network monitoring tools Case management systems Atlassian Suite (Jira and Confluence) Email ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands‐on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry‐standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

Rapid7, Sentinel, or Chronicle). Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA. Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential. Professional experience operating ...

and access management platforms and cloud security posture management tools. Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows. Familiarity with SOAR platforms or orchestration tools for automated response and enrichment. Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security ...

engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and ...

Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details Up to £92 per hour (Inside IR35 ...

framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology services ...

validation, secure development practices and operational readiness. Desirable Experience Experience securing Azure landing zones and enterprise-scale cloud platforms. Experience with Security Orchestration, Automation and Response solutions and automated control validation. Experience with Privileged Access Management and Zero Trust security principles. Experience supporting security platforms in a regulated financial-services ...

.* **AI & Workflow Tooling:** Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms).* **Cloud & Search Interface Familiarity:** Working comfort navigating the **AWS Management Console** (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics).* **Communication & Documentation ...

flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences ...

Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible). Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub). Experience working in agile delivery teams and collaborating with diverse technical stakeholders. Strong problem-solving ...

and domain expert, balancing hands‐on engineering contributions with strategic planning, partner engagement, and organisational leadership. Minimum Requirements Demonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows. Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high‐performing team culture. ...

networking protocols, operating systems (Windows/Linux), and security technologies (SIEM, EDR, IDS/IPS, firewalls, proxies) Hands‐on experience with SIEM tuning and SOAR automation Familiarity with frameworks like MITRE ATT&CK and cyber kill chain Knowledge of cloud platforms (Azure, AWS, GoogleCloud) and scripting/programming skills Excellent ...

within secure/enterprise/defence environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with ...

pipelines Load and deploy existing TENEX content into customer environments — including parsers, dashboards, detections, and playbooks developed by the Security Solution Engineers — SIEM/SOAR Work from standardized playbooks to deliver MDR coverage within target SLOs Troubleshoot connectivity, ingestion, and configuration issues during deployment Enable customers through hands-on training ...

Cybersecurity, Information Technology, Computer Science, or equivalent experience. Experience with privileged access management platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities ...