26 to 50 of 174 SOAR Jobs in the UK

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response ...

and stakeholder management skills. 8+ years of experience in cybersecurity, with at least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience ...

following skills and experience: Significant experience in Cyber Threat Intelligence. Significant experience in Threat Hunting. Experience with the Microsoft Sentinel SIEM/SOAR platform. Significant experience in writing KQL. Excellent understanding of threat intelligence principles and practices. Proven understanding of security risk management. Understanding of threat modelling. Knowledge ...

working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and threat investigation ...

Life (EOL) Migrations End of Support (EOS) Upgrades Security Appliance Administration Threat Detection Technologies Desirable Splunk Microsoft Sentinel QRadar Elastic LogRhythm ArcSight Wazuh SOAR Platforms AI/Machine Learning Security Automation Proxy Administration Network Packet Capture Technologies EDR/XDR Platforms Contract Details Up to £92 per hour (Inside IR35 ...

and access management platforms and cloud security posture management tools. Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows. Familiarity with SOAR platforms or orchestration tools for automated response and enrichment. Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security ...

engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and ...

threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps ...

infrastructure-as-code The ability to communicate technical risk clearly and concisely to non-technical stakeholders Experience with detection-as-code practicesExperience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks Experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tooling Familiarity ...

infrastructure-as-code The ability to communicate technical risk clearly and concisely to non-technical stakeholders Experience with detection-as-code practices Experience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks Experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tooling ...

automationWorking knowledge of infrastructure-as-codeThe ability to communicate technical risk clearly and concisely to non-technical stakeholdersDesirableExperience with detection-as-code practicesExperience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooksExperience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) toolingFamiliarity with ...

.* **AI & Workflow Tooling:** Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms).* **Cloud & Search Interface Familiarity:** Working comfort navigating the **AWS Management Console** (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics).* **Communication & Documentation ...

. AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms). Cloud & Search Interface Familiarity: Working comfort navigating the AWS Management Console (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics). Communication & Documentation ...

flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms. Abletoqueryand analysestructured log data. Purpose & Values Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives. Values: Deliver Unforgettable Experiences ...

validation, secure development practices and operational readiness. Desirable Experience Experience securing Azure landing zones and enterprise-scale cloud platforms. Experience with Security Orchestration, Automation and Response solutions and automated control validation. Experience with Privileged Access Management and Zero Trust security principles. Experience supporting security platforms in a regulated financial-services ...

cloud platforms (AWS & GCP) Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK) Experience building or working with automation (e.g., Python, scripting, SOAR platforms) Ability to operate effectively during high-severity incidents Excellent written communication skills with a passion for clear, actionable documentation Growth mindset with a proactive ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

networking protocols, operating systems (Windows/Linux), and security technologies (SIEM, EDR, IDS/IPS, firewalls, proxies) Hands‐on experience with SIEM tuning and SOAR automation Familiarity with frameworks like MITRE ATT&CK and cyber kill chain Knowledge of cloud platforms (Azure, AWS, GoogleCloud) and scripting/programming skills Excellent ...

effectively when threats arise The role offers the opportunity to work with industry‐leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether you're influencing strategic decisions, leading improvement initiatives ...

within secure/enterprise/defence environments## ## Desirable:* Experience with SIEM/EDR/vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar)* SOAR platforms and automation of security response workflows* Integration with monitoring, alerting, and incident response systems* Threat detection, analytics, and use case development* Experience integrating with ...