26 to 50 of 75 SOAR Jobs in the UK

generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement … procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong Scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/ ...

Global 2000 accounts - Bachelor's degree or equivalent professional experience PREFERRED QUALIFICATIONS - Deep knowledge of the cloud security landscape, including CSPM, CNAPP, SIEM/SOAR, identity management, data protection, and network security - Experience with competitive displacement selling against established security vendors (e.g., Palo Alto Networks, CrowdStrike, Wiz, Microsoft) - Familiarity with ...

design and enhance Splunk dashboards, alerts, and data models Act as escalation point for high-severity incidents, driving rapid detection and response Develop SOAR workflows to automate and streamline security operations Conduct proactive threat hunting to identify hidden risks Upskill internal teams in CrowdStrike, Splunk, and security analysis best practices ...

design and enhance Splunk dashboards, alerts, and data models Act as escalation point for high-severity incidents, driving rapid detection and response Develop SOAR workflows to automate and streamline security operations Conduct proactive threat hunting to identify hidden risks Upskill internal teams in CrowdStrike, Splunk, and security analysis best practices ...

and Processes, Technology and Physical Infrastructure layers. Knowledge and experience of design, build and deployment of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Engineering leadership and management for design, build, deployment and operation of Security Operations Centre ...

Skills Strong experience implementing and configuring ServiceNow Security Incident Response (SIR). Expertise across ServiceNow Security Operations (SecOps). Experience integrating ServiceNow with SIEM, SOAR, and Threat Intelligence platforms. Strong knowledge of ITSM (Incident, Change and Problem Management). Experience designing and automating security workflows and incident response processes. Strong ...

enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that reduce manual effort and improve response times. ...

enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that reduce manual effort and improve response times. ...

enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that reduce manual effort and improve response times. ...

management skills. Desirable Skills Local Government, NHS, Housing or wider Public Sector experience. Defender XDR, Defender for Endpoint, Defender for Identity and Entra ID. SOAR, Logic Apps or security automation experience. Contract Details 6-Month Contract Inside IR35 Hybrid Working (2 Days Onsite) Immediate Start Preferred An excellent opportunity ...

Experience Security Operations Centre (SOC) experience. Customer Success Engineering or Technical Account Management experience. Experience delivering cybersecurity training and enablement programs. Knowledge of SIEM, SOAR, EDR, Attack Surface Management, Asset Management, Vulnerability Management, or Security Posture Management solutions. Experience working with AI-powered security products. Exposure to enterprise SaaS startup ...

Experience Security Operations Centre (SOC) experience. Customer Success Engineering or Technical Account Management experience. Experience delivering cybersecurity training and enablement programs. Knowledge of SIEM, SOAR, EDR, Attack Surface Management, Asset Management, Vulnerability Management, or Security Posture Management solutions. Experience working with AI-powered security products. Exposure to enterprise SaaS startup ...

develop our cyber offering. What Youll Be Doing Analysing security alerts and detections from SOC tools, including SIEM Working with automation and playbooks using SOAR tools Implementing mitigation and remediation activities following cyber incidents Supporting the efficiency and effectiveness of SOC operations Contributing to the development of Rocs cyber products ...

and cyber incident response, including internal SOC and third-party services Overseeing detection, triage, investigation and response to threats using security tooling (e.g. SIEM, SOAR, EDR/XDR) and acting as the senior escalation point and cyber incident commander where required Ensuring incident response plans, playbooks, testing, and post-incident ...

environments • Configure and optimise security policies including DLP, CASB, FWaaS, segmentation, and secure web access • Integrate Zero Trust solutions with identity providers, SIEM/SOAR platforms, and endpoint security tooling • Conduct threat modelling, risk assessments, and security architecture reviews • Troubleshoot complex deployment and access issues across enterprise environments • Provide technical ...

Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical validation ...

Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models, and supporting ...

Excellent communication and stakeholder management skills Ability to work independently while contributing to a wider technical team Desirable Experience CrowdStrike certifications Exposure to SIEM, SOAR, XDR or MDR environments Experience with Microsoft Defender, Sentinel, Splunk, Exabeam or similar technologies Background working within a consultancy, MSSP, security vendor or professional services ...

Excellent communication and stakeholder management skills Ability to work independently while contributing to a wider technical team Desirable Experience CrowdStrike certifications Exposure to SIEM, SOAR, XDR or MDR environments Experience with Microsoft Defender, Sentinel, Splunk, Exabeam or similar technologies Background working within a consultancy, MSSP, security vendor or professional services ...

level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic ...

level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic ...

level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic ...

level policy governance. Incident Support: Lead investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic ...

hybrid environments Oversee patching, upgrades, and platform performance Drive platform improvements and engineering enhancements Support detection engineering, tuning, and platform optimisation Lead automation and SOAR initiatives to improve efficiency Collaborate with SOC providers on SIEM governance and data ingestion Ensure platforms meet regulatory and compliance requirements Maintain engineering documentation, standards ...

documents for security solutions. Strong understanding of Security Operations/SOCs. Hyperscaler experience (AWS, Azure, GCP); Professional Cloud Architect cert preferred. SIEM/SOAR tooling (e.g., Google SecOps/Chronicle). EDR/XDR/NDR experience (e.g., Crowdstrike, Corelight, Microsoft Defender XDR). What's on Offer Permanent ...