26 to 50 of 237 SOAR Jobs in the UK

reporting to Board‐level stakeholders. Technical Expertise Security frameworks: ISO 27001, NIST CSF, COBIT Cloud security (AWS, Azure, GCP) Identity & Access Management (IAM) SIEM, SOAR, EDR/XDR platforms Threat intelligence and vulnerability management Data protection technologies Secure SDLC and DevSecOps practices Strategic thinker with strong commercial awareness Excellent communication ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)ROLE DUTIES• Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Azure, GCP; virtualization and container platforms Operating Systems & Networking: Windows or Linux; network segmentation, SDN, and isolation techniques Security Technologies: EDR, NGFW, IDS, SIEM, SOAR, and related platforms Key Duties Support containment, recovery, and post‐incident remediation by identifying root causes and implementing technical fixes that reduce recurrence. Partner with ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

coaching capacity Work with other teams within BAE to improve services on the basis of customer needs. Produce new workflows for automation into SOAR tools for common attack types. Continually improve the service and review use cases and propose changes and enhancements in line with the changing threat. Requirements Technical ...

QRadar, Microsoft Sentinel and LogRhythmIn-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps How this aligns to our ValuesCustomer First ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware) Familiarity with MITRE ATT&CK Familiarity with ITIL Workplace type About NTT DATA NTT DATA is a $30+ billion business and technology services ...

knowledge covering several of the following examples (this list is not exhaustive): AD (Active Directory), Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualisation (VMware)Familiarity with MITRE ATT&CKFamiliarity with ITILWorkplace type: About NTT DATANTT DATA is a $30+ billion business and technology services leader, serving ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)RoleThrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types.Developing security vulnerabilities ...

knowledge covering at least 2 of the following examples (this list is not exhaustive): AD Cryptography End User Computing IAM PKI Server hardening SIEM SOAR virtualization (VMware) ROLE DUTIES Thrive as a consultant seeking the variety and challenge of engaging with different clients and variety of technologies and solution types. ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks.Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response.Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools.Experience ...

Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks. Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response. Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/ ...

stakeholders. You will provide technical guidance to L1 analysts during live incidents and help maintain investigation quality under pressure. You will execute defined SOAR playbooks as part of incident response and provide structured feedback to improve automation, response consistency, and efficiency. You will maintain awareness of SOC performance metrics and ...

enrichment, and define standardised and automated containment workflows. Develop and manage operational procedures and reporting methodology. Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security). Monitor ongoing control performance and coordinate remediation where gaps are found. Automate operational procedures and reporting processes and integrate outputs ...

under pressure.Nice-to-Haves• Fintech or regulated industry experience.• AWS or cloud-native security experience.• Experience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.• SOAR or security automation experience.• Threat hunting, purple teaming, or detection-as-code experience.• CI/CD, IaC, or DevSecOps exposure.• REST APIs, OAuth, secrets management ...

lead or senior escalation point within a SOC Exposure to threat hunting or detection improvement activities Experience working with: MITRE ATT&CK Familiarity with SOAR platforms and automated response workflows Relevant certifications such as: SC-200 GCIH/GIAC Experience working in regulated or public sector environments Understanding ...

cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflowsStrong analytical and problem-solving skills; ability ...

and continuous learning It would be great if you also have: Experience working as an Incident Responder Experience developing detection rules, automation workflows or SOAR playbooks Knowledge of vulnerability management and remediation processes Understanding of HMG security standards and processes Microsoft certifications such ...

and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security ...

engineering, security operations, or cloud security. Strong knowledge of Azure security controls, IAM, and cloud-native security services. Experience with endpoint security, SIEM/SOAR, network security, and automation tools. Familiarity with scripting (Python, PowerShell) and infrastructure-as-code (Terraform, Ansible). Deep understanding of vulnerability management, penetration testing, and ...

and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security ...

mentoring analysts, leading investigations, or serving as a technical lead within a security operations environment. Strong hands-on experience with SIEM, EDR/XDR, SOAR, IDS/IPS, log management, and cloud security technologies. Experience with platforms such as Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Palo Alto, Microsoft Defender, or equivalent ...

security tools and technologies to enhance the effectiveness of the Cybersecurity team Maintain operational oversight of security operations tools and technologies, including SIEM, XDR, SOAR, endpoint detection and response systems and Identity and Access management tools Compliance & Reporting: Ensure compliance with relevant security regulations and industry standards (e.g. ...