26 to 50 of 126 SOAR Jobs in the UK

handling and investigationsStrong understanding of security fundamentals, including network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniquesExperience using SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security HubAbility to analyse logs, correlate events and develop investigative hypothesesFamiliarity with forensic concepts ...

and continuous learning It would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

principles. Cloud, network, identity, application and OT security. Security operations, threat detection, incident response and cyber resilience. Modern security technologies including SIEM, EDR, XDR, SOAR and vulnerability management platforms. Industry frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOX, GDPR and NIS2. What will help you succeed ...

under pressure.Nice-to-Haves• Fintech or regulated industry experience.• AWS or cloud-native security experience.• Experience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.• SOAR or security automation experience.• Threat hunting, purple teaming, or detection-as-code experience.• CI/CD, IaC, or DevSecOps exposure.• REST APIs, OAuth, secrets management ...

Access Management (PAM) Experience implementing SAST, DAST, SCA, container scanning and secrets management Strong scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+ ...

and threat exposure management.• Experience leading or architecting large scale, multi region cyber programs across enterprises of varying sizes and maturity.• Knowledge of SIEM, SOAR, EDR, ASM, VM, and cloud native security stacks across Azure, AWS, and GCP.• Advanced capability in solution cost modeling, rate card development, effort modeling, and ...

obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small ...

and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security ...

cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflowsStrong analytical and problem-solving skills; ability ...

and architecture reviewsReport metrics, incident summaries, and risk posture to leadershipQualificationsRequired SkillsStrong grounding in security operations - SIEM platforms (Sentinel), EDR/XDR (Defender), and SOAR toolingKQL skills for Sentinel analytics, hunting, and workbooksMicrosoft Defender suite (XDR, endpoint, identity, cloud) administrationPhishing analysis and response (headers, URLs, attachments) and email security toolingIdentity ...

working in client-facing or business-facing security roles. Knowledge of MITRE ATT&CK, threat detection, security operations, and security architecture principles. Familiarity with SOAR platforms and security automation. Relevant certifications such as CISSP, SSCP, Microsoft SC-200/SC-100, or GIAC certifications. A Level 4 qualification or higher ...

Centres or Managed Security Service ProvidersFamiliarity with Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike or similar enterprise security platformsExperience automating security operations using scripting or SOAR technologiesWe might not be right for you if...You prefer working within a narrow technical specialism rather than owning security operations end-to-end.You enjoy maintaining ...

developing and maintaining IT/OT vulnerability management programs and processes. This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content ...

equivalent experienceGood knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Participate in pre-sales tasks and perform ongoing support of delivery collateral.Familiarity with MITRE ATT&CKFamiliarity with ITILCHARACTERISTICSStrategic mindset, able to balance business ...

operations, threat detection, and incident responseAbility to understand end-to-end customer environments (cloud, infrastructure, security stack)Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management)Able to interpret and translate security metrics into clear risk-based narrativesProven ability to build and maintain 12-month technical roadmaps with ...

edge of SOC 3.0: AI-assisted triage, agentic response, notebook-driven investigation, and engineering-led operations. The successful candidate is equal parts DFIR practitioner, SOAR architect, SOC AI-augmentation strategist, and product leader.The Role• Own and execute the multi-year strategy and roadmap for evolving and scaling incident response capabilities … capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection, and response orchestration.• Define and oversee SOAR playbook automation builds, documentation, and ...

Azure).Familiarity with DevOps and infrastructure automation tooling (e.g. Jenkins, ArgoCD, Terraform, Ansible).Exposure to security operations tooling such as SIEM/XDR/SOAR platforms (e.g. Microsoft Sentinel, Elastic Security, AWS Security Hub).Experience working in agile delivery teams and collaborating with diverse technical stakeholders.Strong problem-solving skills and ...

next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication skills and ...

and monitoring. Learn to analyse security alerts and incidents within Cortex XSIAM and respond effectively under guidance. Build familiarity with the organisation's SIEM, SOAR, DLP, email security, and endpoint tooling and processes. Use developing analytical skills to help evaluate risks posed by cyber threats and support reporting for decision ...

senior security leadership/advisory role.Strong cloud and application security experience (AWS, Azure, GCP; secure SDLC).Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).Experience embedding security into CI/CD pipelines and DevSecOps practices.Proven capability in risk assessments, threat modeling, and control ...

with internal and external stakeholders.• Strong understanding of information security principles across web, network, and endpoint technologies.• Working knowledge of security technologies including SIEM, SOAR, EDR, NDR, firewalls, intrusion detection, and vulnerability management platforms.• Excellent communication skills, with the ability to translate technical security risks into clear business-focused recommendations. ...

security analytics solutions within large enterprise environments6+ years of experience with Security Operations Center (SOC) tooling, processes, and workflowsHands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligenceAbility to conceive, architect, and develop effective correlation and detection rulesFamiliarity with a range of SIEM technologies, such as Splunk ...

assessments.Contribute to winning medium and large cybersecurity transformation programmes.Cyber Security DomainsThe candidate should have a broad understanding of enterprise cybersecurity technologies, including:Security OperationsSIEM, SOAR, UEBA, Threat Intelligence, Threat Hunting, Incident Response, XDR, MDRNetwork SecurityNext Generation Firewalls, WAF, SASE, DNS Security, DDoS, NDREndpoint & Identity SecurityEDR, Endpoint Protection ...

generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement … procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/ ...

technical leader and domain expert, balancing hands-on engineering contributions with strategic planning, partner engagement, and organisational leadership.Minimum RequirementsDemonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows.Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high-performing team culture.Strong hands ...