Senior SOAR Engineer (Splunk) - Remote Automation Lead

NCC Group; United Kingdom; On-site; GBP 60,000 - 100,000; Part time

Benefits offered by this job

Flexible Working

25 days holiday + bank holidays

Medicash & Critical Illness Scheme

Pension, Life Assurance, Share Save

Job summary

NCC Group in the United Kingdom is seeking a Senior SOAR Engineer to design, build and maintain security automations within the Splunk ecosystem, collaborating with Incident Response to improve playbooks and automation.

You will mentor junior engineers, produce analytics to prove automation behaviour, and document changes while aligning with change management best practices; this role is remote with UK coverage under a fixed-term contract.

Qualifications

• Experience with Splunk, Splunk Enterprise Security, Splunk SOAR (Formerly Splunk Phantom) and Splunk User Behaviour Analytics.
• Develop, and implement automations for detection and response.
• Produce System Analytics to prove automation behaviour assumptions
• A passion for security automation and a solid understanding of security incident response
• Knowledge of security frameworks including MITRE ATT&CK, NIST, etc.

Responsibilities

• Work in partnership with the incident response team to design, identify, and implement opportunities for improvement
• Develop, and implement automations for detection and response.
• Be the subject matter experts on big data analytics and automation
• Participate in special projects, as needed, and perform other duties as assigned
• Produce System Analytics to prove automation behaviour assumptions
• Document all system changes in line with Change Management good practices
• Recommend, Develop and Release new Use Cases to maximize the benefits and efficiencies from a SOAR platform.
• Mentor junior members of the SOAR team.
• Complete Quality Assurance on work completed by other members of the team before it is implemented in production.

Skills

Splunk

Automation

Scripting

Incident response

MITRE ATT&CK

Windows

Tools

Splunk Enterprise Security

Splunk SOAR

Big data analytics

Job description

NCC Group in the United Kingdom is seeking a Senior SOAR Engineer to design, build and maintain security automations within the Splunk ecosystem, collaborating with Incident Response to improve playbooks and automation.

You will mentor junior engineers, produce analytics to prove automation behaviour, and document changes while aligning with change management best practices; this role is remote with UK coverage under a fixed-term contract.