26 to 50 of 62 SOAR Jobs in the UK

PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005 ...

similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and/or PowerShell Exposure to SOAR, playbooks or security automation Comfortable working directly with clients and taking ownership of technical issues This could suit an experienced SOC Analyst looking to move further into ...

ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with ...

with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple-team ...

PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005 ...

PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005 ...

and ransomware recovery solutions. Strong knowledge of hybrid cloud environments (Azure, AWS and/or GCP). Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR and IAM/PAM. Strong understanding of disaster recovery and business continuity principles. Excellent stakeholder management and communication skills. Desirable Experience working ...

Implement identity access control measures and DLP controls Respond to Tier 3 security incidents Monitor threat intelligence Participate in pentests Engineer Microsoft Sentinel detections & SOAR playbooks Senior Cyber Security Engineer: Technical Experience XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview ...

proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture Produce evidential-standard reporting fit for auditors, regulators and law enforcement Mentor the analyst team and ...

cases Strong software engineering skills, ideally Python Proven experience in SOC, SecOps, incident response or security engineering environments Ideally experience building security automation, SOAR workflows, detection/response automation, or similar systems Knowledge of agent orchestration frameworks and MCP Experience taking AI or automation solutions from proof of concept into ...

Security environment A good practical knowledge of security technologies and wider business solutions including Firewalls, IDS/IPS, Identity and access management, SIEM, SOAR, PAM, remote working and cloud technologies Proven experience of working at a senior level leading and delivering IT Security in a sensitive and complex environment which ...

exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. •Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. •Support security assessments, threat modelling, technical testing and client projects. •Assist with modernising legacy VPN, proxy and firewall environments. •Work alongside experienced consultants ...

exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. Support security assessments, threat modelling, technical testing and client projects. Assist with modernising legacy VPN, proxy and firewall environments. Work alongside experienced consultants ...

exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. Support security assessments, threat modelling, technical testing and client projects. Assist with modernising legacy VPN, proxy and firewall environments. Work alongside experienced consultants ...

exposure to Zero Trust, SASE/SSE, cloud security and network segmentation. Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. Support security assessments, threat modelling, technical testing and client projects. Assist with modernising legacy VPN, proxy and firewall environments. Work alongside experienced consultants ...

Security, SAST/DAST, secrets management, API security Endpoint: CrowdStrike, SentinelOne Network: WAF, CDN security, Zero Trust Network Access Data Security: DLP, SIEM/SOAR, logging & monitoring Vendor Security: Risk assessments, secure configuration baselines Who were looking for: Experience leading global security programmes in SaaS environments. Comfortable working with security ...

hybrid and multi-cloud environments. Automation, Agentic AI & Continuous Improvement Contribute towards automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot. Define KPIs and metrics covering deception engagement, detection coverage, and response maturity. Continuously improve detection, hunting, and deception capabilities … expertise across the Microsoft security stack, including: Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR) Microsoft Security Copilot, automated investigation & response, and attack disruption Microsoft Defender for Cloud Apps and Defender for Cloud Proven experience leading incident response across identity ...

Splunk SOAR Engineer - Splunk SOAR Phantom - FTC 12 Months £110k plus bens - UK REMOTE Senior SOAR Engineer Splunk SOAR Splunk Enterprise Security Cyber Security Security Automation Python MITRE ATT&CK NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team ...

full project lifecycle, from architecture and implementation through to automation, threat detection, and stakeholder engagement. Strong experience with Microsoft Sentinel & Defender SIEM, XDR & SOAR expertise Security architecture and deployment experience Scripting and automation skills SC-200, SC-100 or AZ-500 certifications desirable You'll act as a trusted advisor ...

Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development Build and maintain workflows across SIEM, EDR, and SOAR platforms Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate … cloud security, identity, and event-driven automation Strong communication and analytical skills Security clearance (NPPV and/or SC) may be required. Technical Knowledge Security orchestration and automation principles Scripting and integration patterns (APIs, webhooks) SOC detection and response workflows Threat intelligence integration and use case design Cloud and identity ...

looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform click apply ...

/XDR, Network Anomaly Detection (NAD), and cloud security technologies. Oversee vulnerability management and coordinate remediation efforts across global systems. Design and operate SOAR workflows to automate response playbooks and improve operational efficiency. Support the operational management of Secure Email Gateways (SEG), Secure Web Gateways (SWG), Firewalls, and CASB. Monitor … Cloud), alongside Azure Security Centre. Proven experience managing major incidents and collaborating with third-party/outsourced SOC providers. Demonstrated experience designing and operating SOAR workflows. Hands-on knowledge of Network Anomaly Detection (NAD), firewalls, LAN/WAN security principles, Secure Email Gateways, and Secure Web Gateways. Solid grounding ...

capabilities that support a modern Security Operations Centre (SOC). The Role You'll design, deploy, and enhance core SOC platforms including SIEM, XDR, SOAR, automation, and security tooling , driving improvements in threat detection, response, and operational efficiency. Working closely with operational teams, you'll support customer onboarding, develop automated … workflows, and help shape the future direction of SOC engineering. Key Responsibilities Design, deploy and optimise SIEM, XDR and SOAR platforms. Build security automation, integrations, and response workflows. Develop log parsing, data normalisation and telemetry solutions. Lead technical onboarding and implementation projects. Act as an escalation point for complex security ...

and improving detection across SIEM and EDR platforms. Proactive threat hunting across cloud infrastructure, applications, and CI/CD environments. Building and maintaining automation and response playbooks using SOAR tooling. Working closely with DevOps, infrastructure and engineering teams to improve security posture and response capability. Reducing alert fatigue, improving logging ...

SOAR/SIEM Security Engineer - Critical National Infrastructure (OT) 18-Month FTC | SC Cleared A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology … across converged IT/OT infrastructure. You'll be working on live, high-stakes environments. What you'll be doing Designing, building, and maintaining SOAR playbooks to automate detection and response workflows Developing and tuning Splunk use cases, dashboards, and correlation searches across IT and OT data sources Supporting incident ...