SOC Automation Engineer

SOC Automation Engineer / XSOAR Mostly Remote | Leeds once a quarter | SC Eligible Great opportunity for an Cortex XSOAR focused security professional to join a growing SOC automation function.

You’ll be building and improving automation across SIEM, SOAR and EDR, helping reduce manual SOC workload and accelerate incident response across multi-tenant customer environments. Looking for experience with:

Cortex XSOAR / SOAR automation &amp; playbooks<br />Python and/or PowerShell<br />SIEM, EDR and SOC environments<br />REST APIs, webhooks and integrations<br />Incident response, triage &amp; containment<br />MITRE ATT&amp;CK<br />MSSP / multi-tenant environmentsYou must hold or be eligible for UK SC clearance You’ll have the opportunity to take manual SOC processes and turn them into scalable automated workflows, while having input into the wider automation roadmap rather than simply maintaining an existing set of playbooks.

Mainly remote<br />Leeds around once per quarter