Senior SOAR & DaC Analyst — Threat Detection & Response

Manchester Digital; Manchester; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Civil Service Pension

25 days leave

8 public holidays + 1 privilege day

Hybrid work

Job summary

Home Office Digital designs, builds and develops services for government security needs. This Senior SOAR & DaC Analyst role focuses on automation, detection and response, crafting playbooks and integrations using SOAR platforms.

You will work with SOC teams to reduce risk and improve incident handling while applying repeatable DaC methodologies. The role offers a full-time and flexible pattern, with some office/home-based arrangements.

Qualifications

• Experience in a Security Operations Centre environment.
• Designing and maintaining security automation workflows.
• Experience with detection content and alerting.
• Ability to communicate investigations clearly and persuade stakeholders.
• Ability to lead a technical team in demanding environments.

Responsibilities

• Carry out security monitoring, detection and response activities to standards.
• Identify, analyse and investigate indicators across networks, systems and apps.
• Triage security events and alerts; support investigations and improvements.
• Support incident response activities including red teaming and threat hunting.
• Develop monitoring use cases and detection content; improve alert effectiveness.
• Define and enhance processes, tooling and security controls to identify threats.
• Drive service and process improvements using best practices and problem-solving.

Skills

Security operations

SOAR platforms

Detection-as-Code

Incident response

Team management

Tools

SOAR platforms

Job description

Home Office Digital designs, builds and develops services for government security needs. This Senior SOAR & DaC Analyst role focuses on automation, detection and response, crafting playbooks and integrations using SOAR platforms.

You will work with SOC teams to reduce risk and improve incident handling while applying repeatable DaC methodologies. The role offers a full-time and flexible pattern, with some office/home-based arrangements.