Senior SOAR & Detection Architect — Hybrid

UK Home Office; Salford; Hybrid; GBP 50,000 - 58,000; Full time

Benefits offered by this job

Civil Service Pension

Reward scheme

25 days annual leave

8 public holidays + 1 privilege day

Hybrid/60% on-site work

Job summary

UK Home Office seeks a Senior Response Manager to join the Cyber Security Operations Centre as a Senior SOAR & Detection-as-Code Analyst. You will design, develop and maintain security automation workflows and playbooks using SOAR platforms, applying Detection-as-Code methodologies to improve threat detection and incident response.

You will work with SOC teams to reduce risk, enhance monitoring, and lead a team in a technical environment.

Qualifications

• Investigations in a Security Operations Centre environment.
• Designing, developing, testing and improving security automation workflows and playbooks using SOAR or similar technologies.
• Clear verbal and written communication across audiences.

Responsibilities

• Carry out security monitoring, detection and response aligned to standards, advising on mitigation and risk reduction.
• Identify and investigate indicators of malicious activity across networks, systems and apps.
• Triage security events and alerts, suggest improvements to monitoring and detection.
• Support incident response activities including red teaming and threat hunting, sharing lessons learned.
• Develop and improve monitoring use cases and alert effectiveness across security technologies.
• Define and enhance processes, tooling and security controls to identify emerging threats and implement mitigation.
• Drive service and process improvements using best practices to support operations and investigations.

Skills

SOC operations

Security automation

DaC methodologies

Threat hunting

Team management

Tools

SOAR platforms

Job description

UK Home Office seeks a Senior Response Manager to join the Cyber Security Operations Centre as a Senior SOAR & Detection-as-Code Analyst. You will design, develop and maintain security automation workflows and playbooks using SOAR platforms, applying Detection-as-Code methodologies to improve threat detection and incident response.

You will work with SOC teams to reduce risk, enhance monitoring, and lead a team in a technical environment.