SOC Automation Engineer

Salary: £50,000 - 54,000 per year

Requirements

• Cortex XSOAR / SOAR automation and playbooks experience
• Python and/or PowerShell experience
• SIEM, EDR, and SOC environment experience
• REST APIs, webhooks, and integrations experience
• Incident response, triage, and containment experience
• MITRE ATT&CK knowledge
• MSSP / multi-tenant environment experience
• Must hold or be eligible for UK SC clearance

Responsibilities

• Build and improve automation across SIEM, SOAR, and EDR
• Reduce manual SOC workload
• Accelerate incident response across multi-tenant customer environments
• Turn manual SOC processes into scalable automated workflows
• Contribute input into the wider automation roadmap
• Maintain and improve existing playbooks

Technologies

• PowerShell
• Python
• REST
• Security

More

We are a growing SOC automation function offering a great opportunity for a Cortex XSOAR-focused security professional to join our team. The role is mainly remote, with Leeds-based attendance around once per quarter, and focuses on building scalable automation across multi-tenant customer environments.

last updated 34 week of 2026