SOC Automation Engineer

SOC Automation Engineer / XSOAR
Mostly Remote | Leeds once a quarter | SC Eligible


Great opportunity for an Cortex XSOAR focused security professional to join a growing SOC automation function.
You’ll be building and improving automation across SIEM, SOAR and EDR, helping reduce manual SOC workload and accelerate incident response across multi-tenant customer environments.

Looking for experience with:

• Cortex XSOAR / SOAR automation & playbooks
• Python and/or PowerShell
• SIEM, EDR and SOC environments
• REST APIs, webhooks and integrations
• Incident response, triage & containment
• MITRE ATT&CK
• MSSP / multi-tenant environments

You must hold or be eligible for UK SC clearance

You’ll have the opportunity to take manual SOC processes and turn them into scalable automated workflows, while having input into the wider automation roadmap rather than simply maintaining an existing set of playbooks.
 
Mainly remote
Leeds around once per quarter