SOAR Engineer

SOAR Engineer

65,000 - 75,000 Warwick (1 day every 2 months)

Build the future of cyber security automation. We're supporting a major UK infrastructure organisation as they continue to invest heavily in their cyber security capability.

As a SOAR Engineer, you'll play a key role in transforming security operations through automation, helping security teams investigate and respond to threats more efficiently while reducing manual workload.

This is an exciting opportunity to influence how security automation evolves within a complex enterprise environment, including helping shape the transition to next-generation security platforms.

What you'll be doing

• Designing and developing security automation workflows and playbooks
• Automating alert triage, investigation and response processes
• Integrating security tools and platforms to improve operational efficiency
• Working closely with Security Operations teams to identify automation opportunities
• Developing solutions using Python and PowerShell
• Supporting the evolution of SIEM and SOAR capabilities
• Contributing to a strategic migration towards Google SecOps (Chronicle)

What we're looking for

• Experience in a SOAR Engineer, Security Automation Engineer, Detection Engineer or similar role
• Previous experience building and improving security automation processes
• Hands-on experience with Microsoft Sentinel and Logic Apps
• Strong scripting skills using Python and/or PowerShell
• Understanding of SIEM, SOAR and Security Operations environments
• Experience with Google SecOps/Chronicle would be highly beneficial
• Strong problem-solving and stakeholder engagement skills