Job Description

Posted 5 hours ago

SOC Automation Engineer / XSOAR
Mostly Remote | Leeds once a quarter | SC Eligible

Great opportunity for an Cortex XSOAR focused security professional to join a growing SOC automation function.
You’ll be building and improving automation across SIEM, SOAR and EDR, helping reduce manual SOC workload and accelerate incident response across multi-tenant customer environments.

Looking for experience with:

Cortex XSOAR / SOAR automation & playbooks
Python and/or PowerShell
SIEM, EDR and SOC environments
REST APIs, webhooks and integrations
Incident response, triage & containment
MITRE ATT&CK
MSSP / multi-tenant environmentsYou must hold or be eligible for UK SC clearance

You’ll have the opportunity to take manual SOC processes and turn them into scalable automated workflows, while having input into the wider automation roadmap rather than simply maintaining an existing set of playbooks.
 
Mainly remote
Leeds around once per quarter