Lead Security Automation & SOAR Engineer

S&P Global Inc.; City of Westminster; On-site; GBP 104,000 - 115,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global Inc. is seeking an experienced security automation architect to design and implement enterprise-grade SOAR playbooks, automations, and secure integrations across security tools, cloud services, and IT platforms.

You will drive incident triage, containment, and remediation workflows with IaC practices and Python-based tooling. Leading cross-functional teams, you will translate operational needs into scalable automation, apply Agentic AI and LLMs to security workflows, and report on

Qualifications

• 5+ years designing security automation solutions in enterprise environments
• Hands-on incident response experience and scalable automation
• Proficient in Python and REST API integrations
• Experience with SIEM and SOAR platforms (Phantom, XSOAR, Swimlane)
• Cloud infra deployment in AWS using IaC tools (Terraform, CloudFormation, Pulumi)

Responsibilities

• Architect and develop SOAR playbooks and automated workflows
• Build and maintain secure integrations across security, IT and business platforms
• Lead cross-functional collaboration with SOC, Detection Engineering and IR teams
• Deploy cloud-based security infrastructure using infrastructure-as-code
• Incorporate Agentic AI and LLMs into security workflows
• Produce executive-level reporting on automation performance and ROI

Skills

Python programming

SOAR platform

Incident response

REST API development

SIEM (Splunk/Elastic/Sentinel)

EDR (CrowdStrike/SentinelOne/Microsoft

Tools

Terraform

CloudFormation

Pulumi

Git/GitLab/Bitbucket

Jenkins/GitLab CI/Azure DevOps

Job description

S&P Global Inc. is seeking an experienced security automation architect to design and implement enterprise-grade SOAR playbooks, automations, and secure integrations across security tools, cloud services, and IT platforms.

You will drive incident triage, containment, and remediation workflows with IaC practices and Python-based tooling. Leading cross-functional teams, you will translate operational needs into scalable automation, apply Agentic AI and LLMs to security workflows, and report on