26 to 50 of 61 SOAR Jobs in the UK

working as a Security Engineer, Cyber Security Engineer, or Security Operations Engineer. Strong hands-on experience with: Microsoft Defender XDR Microsoft Sentinel (SIEM/SOAR) Microsoft Entra ID (Azure Active Directory) Identity and Access Management (IAM) Microsoft 365 E5 Security Security monitoring and detection engineering Incident response and threat investigation ...

automationWorking knowledge of infrastructure-as-codeThe ability to communicate technical risk clearly and concisely to non-technical stakeholdersDesirableExperience with detection-as-code practicesExperience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooksExperience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) toolingFamiliarity with ...

. AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira, ServiceNow, PagerDuty, or SOAR platforms). Cloud & Search Interface Familiarity: Working comfort navigating the AWS Management Console (specifically Amazon Bedrock, Amazon OpenSearch Dashboards, and CloudWatch metrics). Communication & Documentation ...

modern incident response methodologies, operating models, and governance frameworks. Experience leading multidisciplinary cyber security teams in large, global organisations. Deep technical understanding of SIEM, SOAR, EDR/XDR, cloud security, identity security, email security, and digital forensics. Experience defining operational metrics, service management frameworks, and continual improvement programmes. Ability ...

Cloud and Entra. Develop security monitoring, telemetry and integrations across cloud, identity, endpoint and application environments. Build and maintain automated security workflows, including SOAR playbooks and response processes. Investigate technical security issues and support incident response, threat hunting and remediation activities. Work with technology teams to embed effective security controls ...

Cybersecurity, Information Technology, Computer Science, or equivalent experience. Experience with privileged access management platforms. Familiarity with GitHub and version control best practices. Experience with Security Orchestration, Automation and Response (SOAR) platforms. Experience with Microsoft Sentinel or other SIEM platforms. Experience implementing AI-assisted security operations or security copilots. Supervisory Responsibilities ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

configuration of various tools Core Duties Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and/ ...

and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security tooling integrations and orchestration initiatives. Develop and enhance SOAR capabilities. Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security MonitoringDesign, implement, and maintain SIEM workspaces, data connectors, analytics rules … Security Automation, or a related cyber security discipline. Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering. Experience developing and supporting SOAR capabilities. Solid understanding of Active Directory security and Windows event logging. Proficiency with PowerShell and/or Python scripting. Good understanding of networking concepts including ...

managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience. Why consider joining our Digital & Data community? Join our Digital & Data team and work alongside cyber security … Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements. Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities. Develop and maintain incident playbooks, standard operating procedures, automated ...

cloud environmentExperience working across a technology stack on difficult security challenges and initiativesExperience with SIEM platforms and the ability to extend their functionalityExperience with SOAR tools and automating manual security processesExperience in either AWS, GCP, or other large cloud platformExcellent written and verbal communication skillsAbility to influence and build effective ...

policy promotion, configuration drift detection, control validation, reporting, alert enrichment, and recurring health checks. Integrate DLP, CASB, data classification, cloud security, identity, SIEM, SOAR, and workflow platforms to improve visibility, response, and enforcement. Tune detection logic using data-driven analysis to reduce false positives, improve signal quality, and increase confidence ...

and supply-chain scanning, GenAI data loss prevention, and AI-enabled SOC tooling. They should also own the deployment itself: integration with existing SIEM, SOAR, EDR and identity tooling, architecture decisions, and making sure the tools are tuned and producing value after go-live rather than becoming shelfware. Input ...

Deploy and optimise technologies including DLP, CASB, FWaaS, Cloud Firewall and App Connectors . Integrate Zero Trust platforms with Entra ID, Okta, SIEM/SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling ...

Security Engineer, Security Analyst or similar cybersecurity role. Practical experience using, managing or supporting security technologies such as SIEM, EDR or SOAR platforms. A good understanding of cybersecurity principles, common attack techniques and threat detection. Ability to interpret log data, investigate alerts and recognise suspicious activity. Location & Working Arrangement Glasgow ...

with a grounded view of where it helps and where it doesn't. Solid scripting ability (e.g. Python) to support thisGood knowledge of SIEM, SOAR, and EDR/XDR platforms and how they support investigation, hunting, and responseStrong understanding of attacker behaviour and the MITRE ATT&CK framework, particularly across ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Certifications Perhaps a few years of deeply technical hands on around Infrastructure, Linux, System Admin, maybe some time spent in CLOUD borne SIEM Azure, SOAR, MS Sentinel, other SIEM experience well regarded Some strong t3/Incident response experience Knowledge share/mentoring and guidance for less senior members ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

presenting and selling complex infrastructure solutions. Experience across any of the following would be a real advantage: Cyber Security: Zero Trust, Microsoft Sentinel/SOAR, Microsoft Defender, PAM, vulnerability management and attack surface management. IT/OT Security: Understanding of security integration across enterprise and operational technology environments. Databases: Knowledge ...

infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection-as-code or CI/CD pipeline experience. Scripting in PowerShell, Python or similar. Experience with Git-based ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. ...

internal teams, clients, government bodies, industry groups and intelligence-sharing communities while protecting sensitive sources and information.Operational integration and capability improvementIntegrate intelligence into SIEM, SOAR, TIP, threat hunting, detection engineering, incident response and vulnerability prioritisation workflows.Guide the use of MITRE ATT&CK, STIX/TAXII, the intelligence cycle, Diamond Model … actor analysis and intelligence reporting.Deep working knowledge of MITRE ATT&CK and platforms such as MISP, ThreatConnect, Anomali or equivalent; practical experience of SIEM, SOAR and security operations integration.Ability to analyse malicious infrastructure, IOCs, malware reporting and TTPs, and explain how intelligence should change detection, response, hunting, vulnerability or risk ...

Agent Development: Design, build and maintain AI agents and agentic workflows using platforms such as Azure AI Foundry, integrating with security toolsets such as SOAR, SIEM and EDR.Secure Configuration: Implement safeguards to protect against adversarial inputs, including prompt injection and jailbreaks, ensuring AI systems meet robust security standards. System Architecture … following would be beneficial but are not essential: Previous experience within cyber security or security operations. Knowledge of enterprise security tooling such as SOAR, SIEM and EDR.Experience applying AI to security operations, threat detection or incident response. Experience deploying infrastructure-as-code. What we're looking forA collaborative and engaging ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus API-driven automation and integration. MITRE ...