Senior Security Engineer - Security Automation

Tesco UK; Welwyn Garden City; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading retail company in Welwyn Garden City is searching for a Security Engineer. In this role, you will define, implement, and enhance security capabilities. The ideal candidate will have experience with SOAR platforms and Python, and possess strong interpersonal skills. You will work with multiple teams to improve security processes and enhance automation capabilities. This position supports a hybrid working model, encouraging flexibility and collaboration.

Benefits

Flexible working patterns

Inclusive culture

Continuous development opportunities

Qualifications

• 2+ years of proven hands-on experience using Python for development.
• Understanding of REST APIs and ability to interact with 3rd party REST APIs.
• Proven industry experience with Security Orchestration, Automation and Response (SOAR) platforms.

Responsibilities

• Define, design, and implement security automations.
• Drive the security automation roadmap.
• Collaborate with analysts and engineers for workflow improvements.
• Develop security automations across SOAR platform.

Skills

Security Orchestration

Python

REST APIs

MITRE ATT&CK framework

Interpersonal skills

Job description

About the Cyber Security Team

Our cyber security team are the eyes and ears of our organisation. We use pioneering technology to increase visibility and protection of systems, services, and data. To do this we need to stay ahead of the latest threats and continuously improve our tooling, techniques, and processes.

We’re continually working to step change security capability to further improve the protection and controls that we offer for our customers and colleagues across the UK, Europe, and Asia, and we’re looking to add phenomenal people to our growing team.

We believe that skilled and passionate people are our greatest asset in reducing risk to our business and customers. We encourage and support continual development and learning and recognise the importance of keeping up with changes in technology and an evolving threat landscape.

As a Security Engineer, you will use your knowledge and expertise to play a key role in defining, implementing, and enhancing capabilities to detect, prevent, and respond to security threats and incidents. You will enable a faster and more effective response by designing and implementing automated security processes.

• Defining, designing, and implementing security automations to enhance the capability to detect, prevent and respond to security threats and incidents by enabling a faster and more effective response.
• Drive the security automation roadmap based on team feedback and through your own research, testing and development.
• Work across multiple teams with analysts and engineers to improve workflows, enabling our colleagues to spend their time doing what they do best.
• Design and develop security automations across SOAR platform and other security products and tooling.
• party tooling using REST APIs and Python development
• Work with existing security automation and platform engineers to improve upon existing playbooks and automations to ensure optimal platform performance.
• Developing and running security processes day‑to‑day for the Tesco Group

You will be self‑motivated and ambitious with an ability to work in an Agile and fast‑paced environment.

Flexibility, responsiveness, creativity and a passion for their work would be ideal as you will thrive in our culture.

You will possess the ability to build solid working relationships with peers and senior leaders across the business.

When working in cross functional tasks you will have the ability to demonstrate strong written, verbal communication and presentation skills to all levels of seniority and disciplines within the organisation.

Technical Skills

• Proven hands‑on experience with Security Orchestration, Automation and Response (SOAR) platforms.
• 2+ years of proven hands‑on experience using Python for development.
• Understanding of REST APIs and demonstrate ability to interact with 3rd party REST APIs.
• Understanding of the MITRE ATT&CK framework (or equivalent) and emerging threat actor tactics, techniques, and procedures.

Soft Skills

• Demonstrable curiosity, passion, and proactive attitude to security and personal development.
• Good interpersonal skills, and written and oral communications, self‑motivator.
• Great teammate and independent worker, relationship builder.
• Ability to collaborate closely with domain experts, key customers, and colleagues at all levels.

Desirable Certifications

Ideally one or more relevant certifications, such as: SANS SEC573, SEC598, SEC673

Our Vision at Tesco

Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.

We’re a big business and we can offer a range of diverse full‑time & part‑time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working