Splunk SOAR Playbook Engineer

NCC Group; Madrid; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible Working

Holiday Allowance

Medicash & CI Scheme

Pension & Life Assurance

Volunteer Programmes

Green Car Scheme

Cycle to Work

Special Time Off

Family Planning

Job summary

NCC Group is seeking an MXDR SOAR Engineer in Madrid to design, develop, and optimise security automation using Splunk SOAR. The role focuses on playbook engineering, Python development, API integrations, and automated incident response workflows within a global security team.

You will deploy and improve MXDR solutions, engage with stakeholders, and apply best practices across security monitoring, detection engineering and platform integrations.

Qualifications

• Strong hands-on Splunk SOAR engineering experience.
• Advanced Python development, including REST APIs and JSON handling.
• Production-grade Splunk SOAR playbooks development and maintenance.

Responsibilities

• Design, develop, test and maintain Splunk SOAR playbooks.
• Develop custom Python automations and API integrations.
• Build enrichment, investigation, containment and remediation workflows.

Skills

Splunk SOAR engineering

Python development

REST APIs

JSON processing

Testing & debugging

SOC operations

Incident response

Customer-facing communication

Tools

Git

Splunk SOAR

SIEM (Splunk ES)

Job description

NCC Group is seeking an MXDR SOAR Engineer in Madrid to design, develop, and optimise security automation using Splunk SOAR. The role focuses on playbook engineering, Python development, API integrations, and automated incident response workflows within a global security team.

You will deploy and improve MXDR solutions, engage with stakeholders, and apply best practices across security monitoring, detection engineering and platform integrations.