SOC Automation Engineer

SOC Automation Engineer / XSOAR

Mostly Remote | Leeds once a quarter | SC Eligible

Great opportunity for an Cortex XSOAR focused security professional to join a growing SOC automation function.

You'll be building and improving automation across SIEM, SOAR and EDR, helping reduce manual SOC workload and accelerate incident response across multi-tenant customer environments.

• Cortex XSOAR / SOAR automation & playbooks
• Python and/or Power Shell
• SIEM, EDR and SOC environments
• REST APIs, webhooks and integrations
• Incident response, triage & containment
• MITRE ATT&CK
• MSSP / multi-tenant environments
  
  You must hold or be eligible for UK SC clearance

You'll have the opportunity to take manual SOC processes and turn them into scalable automated workflows, while having input into the wider automation roadmap rather than simply maintaining an existing set of playbooks.

Mainly remote

Leeds around once per quarter