Security Operations Automation Engineer

lacuna-talent; Greater London; Hybrid; GBP 92,000 - 129,000; Full time

Job summary

lacuna-talent is seeking an experienced Security Operations Automation Engineer for a 6-month contract, with potential for renewal. The role focuses on automating security processes, building workflows, and integrating security tools across the stack.

You will design and optimize automated incident detection and response, develop custom scripts, and collaborate with security teams to meet objectives. Hybrid work with travel to the London office 2–3 days weekly.

Qualifications

• Proven experience designing, developing and maintaining automated workflows using Hyperautomation or SOAR platforms.
• Hands-on with APIs and security tool integrations.
• Understanding of security technologies (SIEM, EDR, VM, Networking & Firewalls, IDS/IPS, Cloud, Web proxy, etc.).

Responsibilities

• Design, develop and maintain automated security workflows and playbooks.
• Troubleshoot integrations and optimize automated workflows across tools.
• Develop custom automation scripts to meet security objectives.
• Collaborate with security teams and stay aware of threats and TTPs.

Skills

Security automation

Workflow automation

SOAR platforms

APIs & integrations

Tools

Google Chronicle

Siemplify

Microsoft Sentinel

Palo Alto XSOAR

Torq

Tines

Job description

A global client is seeking an experienced Security Operations Automation Engineer for a 6-month contract (with potential for further renewal). The role requires hands-on experience in automating security processes and working with various security tools and integrations.

The ideal candidate will enhance security automation efforts by creating, optimizing, and troubleshooting workflows, resolving integration challenges, and developing custom automation scripts to meet security objectives.

A strong understanding of the Tools, Tactics, and Procedures (TTPs) used in advanced threats, as well as experience in continuous monitoring, incident response, and mitigating and automating threat detection, is required.

Mandatory Requirements:

• Proven experience designing, developing, and maintaining automated workflows using Hyperautomation or SOAR platforms (Google Chronicle/Siemplify, Microsoft Sentinel, Palo Alto XSOAR, Torq, Tines).
• Hands‑on experience with APIs and security tool integrations.
• Understanding of security technologies (SIEM, EDR, VM, Networking & Firewalls, IDS/IPS, Cloud, Web proxy, etc.).

The role hybrid with travel to their London office 2-3 days a week.