26 to 50 of 155 SOAR Jobs in the UK

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

Radar, Rapid7, Sentinel, or Chronicle).Active Splunk certification combined with hands-on experience managing one or more Splunk premium applications, including Enterprise Security, Splunk SOAR (Phantom), or Splunk UBA.Possession of at least one industry-standard security certification, such as GIAC, CISSP, OSCP, or an equivalent credential.Professional experience operating within both ...

equivalent experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Participate in pre-sales tasks and perform ongoing support of delivery collateral.Familiarity with MITRE ATT&CKFamiliarity with ITILCHARACTERISTICSStrategic mindset, able to balance business ...

under pressure.Nice-to-Haves• Fintech or regulated industry experience.• AWS or cloud-native security experience.• Experience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.• SOAR or security automation experience.• Threat hunting, purple teaming, or detection-as-code experience.• CI/CD, IaC, or DevSecOps exposure.• REST APIs, OAuth, secrets management ...

Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflowsStrong analytical and problem-solving skills; ability ...

and continuous learning It would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

including security incidents and data breaches, from containment and eradication through to post-incident analysis.• Manage and optimise security technologies including Next-Gen SIEM, SOAR, EDR/MDR/XDR and cloud security solutions such as CASB, ZTNA and SASE.• Take a leading role in Bulk's upcoming Cyber Essentials ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

assessments.Contribute to winning medium and large cybersecurity transformation programmes.Cyber Security DomainsThe candidate should have a broad understanding of enterprise cybersecurity technologies, including:Security OperationsSIEM, SOAR, UEBA, Threat Intelligence, Threat Hunting, Incident Response, XDR, MDRNetwork SecurityNext Generation Firewalls, WAF, SASE, DNS Security, DDoS, NDREndpoint & Identity SecurityEDR, Endpoint Protection ...

Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders.Strong problem-solving skills and ...

mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto, Microsoft Defender, or equivalent ...

Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible). Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub). Experience working in agile delivery teams and collaborating with diverse technical stakeholders. Strong problem-solving ...

flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences ...

next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication skills and ...

Centres or Managed Security Service ProvidersFamiliarity with Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike or similar enterprise security platformsExperience automating security operations using scripting or SOAR technologiesWe might not be right for you if...You prefer working within a narrow technical specialism rather than owning security operations end-to-end.You enjoy maintaining ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

senior security leadership/advisory role.Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).Experience embedding security into CI/CD pipelines and DevSecOps practices.Proven capability in risk assessments, threat modeling, and control ...

with particular focus on email security. • Monitor, investigate and respond to security threats, incidents and data breaches. • Manage and optimise security technologies including SIEM, SOAR, EDR/MDR/XDR, CASB, ZTNA and SASE. • Lead Cyber Essentials activity and support wider compliance, including ISO 27001. • Assess vendor security and work ...

security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat ...

security leadership/advisory role.* Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat ...

Engineering or Microsoft Security Consulting SIEM engineering rather than solely alert monitoring or incident triage Detection engineering and security monitoring optimisation Automation, scripting, SOAR or Sentinel playbooks Cloud security assessments, controls and risk analysis Designing and documenting security processes Customer-facing technical delivery Candidates whose experience is predominantly L1/ ...

UK. Understanding of common cyber threats and attacker tactics, techniques and procedures and an ability to identify appropriate mitigation strategies Experience using automation or SOAR platforms Knowledge of incident response principles Experience using MITRE ATT&CK Experience using Splunk Experience using an intelligence platform Software development, scripting or programming skills ...

edge of SOC 3.0: AI-assisted triage, agentic response, notebook-driven investigation, and engineering-led operations. The successful candidate is equal parts DFIR practitioner, SOAR architect, SOC AI-augmentation strategist, and product leader.The Role• Own and execute the multi-year strategy and roadmap for evolving and scaling incident response capabilities … capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.• Define and oversee SOAR playbook automation builds, documentation, and ...

technical leader and domain expert, balancing hands-on engineering contributions with strategic planning, partner engagement, and organisational leadership.Minimum RequirementsDemonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows.Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high-performing team culture.Strong hands ...