SOC Automation Engineer

Salary: £65,000 - 75,000 per year

• We require 2+ years of experience in SOC, automation, or cloud security engineering.
• We require experience in managed services or multi-tenant environments.
• We require strong experience building automations across SIEM, SOAR, or EDR platforms.
• We require proficiency in scripting, such as Python or Power Shell.
• We require experience working with APIs, webhooks, and authentication methods.
• We require knowledge of threat frameworks such as MITRE ATT&CK.
• We require understanding of cloud security, identity, and event-driven automation.
• We require strong communication and analytical skills.
• We require hands‑on experience with Palo Alto XSOAR.
• Security clearance, such as NPPV and/or SC, may be required.
• We consider the following certifications desirable:
  Palo Alto Networks Certified XSOAR Engineer, Palo Alto Networks Certified Security Automation Engineer (PCSAE), and Palo Alto Networks Security Operations Professional.

• We design, build, and maintain scalable automation workflows across detection and response platforms.
• We deliver cross-platform automation that enables fast, reliable response actions.
• We develop, deploy, and continuously optimise automation for performance, resilience, and coverage.
• We work with SOC and engineering teams to identify automation opportunities.
• We produce clear documentation to support delivery, troubleshooting, and continuous improvement.
• We build and maintain workflows across SIEM, EDR, and SOAR platforms.
• We develop reusable scripts, templates, and components.
• We ensure our solutions support secure, multi-tenant environments.
• We embed automation into SOC workflows.
• We share best practices and support team development.
• We support workshops, onboarding, and solution design where needed.
• We automate repeatable triage and response activities for SOC Analysts.
• We integrate automation into tooling and detections with Platform and Detection Engineers.
• We provide technical input for customer solutions with Sales and Pre‑Sales teams.

• Cloud
• Support
• Power Shell
• Python
• Security
• Dev Ops

We are hiring a SOC Automation Engineer to help us improve the scalability and efficiency of our SOC services through hands‑on engineering and automation. Our work spans SIEM, endpoint, and orchestration platforms, with a primary focus on Palo Alto XSOAR, and our goal is to reduce analyst workload, accelerate incident response, and improve decision‑making across customer environments. In this role, you will collaborate closely with SOC, engineering, sales, and pre‑sales teams, and you may also support workshops, onboarding, and solution design where needed.

last updated 27 week of 2026