Cyber Security Playbook Developer - Elastic/ML/Automation

Scope AT Limited; City Of London; On-site; GBP 50,000 - 75,000; Full time

Job summary

A cyber security firm in City Of London seeks a Cyber Security Playbook Developer to support the incident response team. The role focuses on improving automation and efficiency in detection and response within the Security Operations Center. Candidates should have hands-on experience with Unix/Linux, Shell Scripting, and Python. Excellent understanding of analytics tools like Splunk or Elastic Search is essential.

Qualifications

• Hands-on experience in cyber-security detection and response capabilities.
• Proven track record in improving SOC infrastructure and efficiency.
• Familiarity with automation techniques in security operations.

Responsibilities

• Support the incident response team within the Security Operations Center.
• Improve coverage, quality, and automation of detection and response capabilities.
• Develop analytics to detect actionable security alerts.

Skills

Unix/Linux command-line

Shell Scripting

Python

Security incident response

Runbook automation

Splunk analytics

Elastic Search analytics

Job description

Cyber Security Playbook Developer, supporting the incident response team within the Security Operations Center. Must have hands–on experience focused on improving the coverage, quality and automation of cyber–security detection and response capabilities within the SOC. The role is responsible for Runbook automation to improve efficiency of the SOC, develop analytics in Splunk or Elastic Search to detect actionable security alerts, to ensure security and stability of SOC infrastructure. Must have experience working with Unix/Linux at the command–line and Shell Scripting/Python skills.