Senior Security Automation & Incident Lead

Sozialwerk Pfarrer Sieber; Greater London; Presencial; GBP 85.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Salary package reevaluated yearly

28 days annual vacation

Impact Day fully paid

Family leave and mental health support

Meals and social events

Descripción de la vacante

Personio seeks an experienced Security Operations Engineer to join our Security organization in London. You will own detections as code, build SOAR automations, and secure AI integrations while scaling incident response across the business.

You’ll lead incident response, hunt threats, and improve playbooks, with emphasis on AI-enabled triage and least-privilege for AI agents. Strong Python/Go skills and experience with SIEM, Git, and CI/CD are essential.

Formación

• 5+ years in Cyber Security, with threat detection or incident response experience.
• Experience designing enterprise-scale SOAR workflows and AI-driven security operations.
• Experience collecting and normalising logs into consistent schemas.
• Hands-on Git and GitHub/GitLab skills with CI/CD pipelines.
• Familiarity with MITRE ATT&CK and cloud-based SaaS threat landscapes.
• Strong communication skills for executive and technical audiences.

Responsabilidades

• Design, deploy and maintain detections on our SIEM platform.
• Build enterprise-scale SOAR workflows and AI-assisted automations.
• Tune alerts and assess AI-assisted triage accuracy.
• Secure AI agents and integrations with least-privilege access.
• Act as on-duty Security Team representative for incidents.
• Lead and support security incidents and post-mortems.
• Proactively hunt for signs of compromise and update playbooks.

Conocimientos

Threat detection

Incident response

Security automation

Python/Go scripting

Git/CI/CD

Communication

Educación

BS in Computer Science or Information Security

Herramientas

Tines

n8n

Python

Go

GitHub

GitLab

Descripción del empleo

Personio seeks an experienced Security Operations Engineer to join our Security organization in London. You will own detections as code, build SOAR automations, and secure AI integrations while scaling incident response across the business.

You’ll lead incident response, hunt threats, and improve playbooks, with emphasis on AI-enabled triage and least-privilege for AI agents. Strong Python/Go skills and experience with SIEM, Git, and CI/CD are essential.