SOAR Engineer

Akkodis; West Midlands; Remote; GBP 65,000 - 75,000; Full time

Job summary

Akkodis is seeking a driven SOAR Engineer to join a large national brand headquartered in the Midlands. The role offers remote work with occasional travel to the Midlands head office, about 1 day every couple of months.

You will enable the CSOC to detect and respond to threats by enrichment, tuning, and automation, empowering the security operations team to work more effectively across SIEM and SOAR platforms.

Qualifications

• Bachelor's degree in computer science, Cyber Security, or related field.
• Experience in Security Operations Centres or incident response.
• Strong knowledge of SOAR, automation, and detection engineering.

Responsibilities

• Act as SME for detection and security automation across the company.
• Analyse workflows and create automations to improve speed and efficiency.
• Develop tailored automations and enrichments for alerts/incidents across security tools.
• Lead design and development of playbooks across SOAR and SIEM platforms.
• Assist with managing engineering backlog and preparing backlog refinements.
• Analyze current SOC functionality and implement service improvements.

Skills

SOAR engineering

KQL

Detection engineering

Linux

Windows

Azure

PowerShell

Education

Bachelor's degree in Computer Science or Cyber Security

Tools

Azure Functions

Logic Apps

REST APIs

Job description

SOAR Engineer

£65,000 - £75,000

Full Time / Permanent

Remote / 1 day every 2 months in the Midlands head office

The Role:

I am looking for a driven and experienced SOAR Engineer / Security Engineer to join a large nationally recognised brand head quartered in the Midlands.

This role can be primarily remote, with occasional travel to the Midlands head office required, 1 day every couple of months on average.

The SOAR Engineer will ensure that the business can continuously keep up to date with new and emerging threats and ensure that they can detect and respond to them. You will enable the CSOC to detect threats targeting the organisation through enrichment, tuning and automation and also allow the CSOC to conduct their job more effectively.

Key Accountabilities:

• SME for all things detection and security automation across the company.
• Analyse workflows and create automations to improve speed and efficiency.
• Develop tailored automations and enrichments for alerts/incidents across a wide range of security tools.
• Lead the design, development, and engineer new content (playbooks) across security orchestration and response (SOAR) and security information and event management (SIEM) platforms to meet the organisation's strategic objectives and goals
• Assist with managing the Engineering backlog including researching backlog items, updating items, collecting requirements, feedback, etc and coming prepared to backlog refinement
• Conduct in-depth analysis of the existing functionality of the Security Operations Centre, propose and enact improvements to the service

Skills and Experience required:

• Have a high level of ability to create and develop security orchestration and automated response (SOAR).
• Strong proficiency in KQL and detection engineering
• Experience and working knowledge with operating systems - both Linux and Windows platforms
• Extensive knowledge of Azure including Azure functions and Logic Apps.
• Familiarity with programming languages such as Python and PowerShell
• Experience with cloud security tools and platforms (e.g., AWS, Azure, Microsoft 365)
• Experience working in Security Operation Centres, incident response and associated technologies
• Understanding of REST API's and demonstrate ability to develop and interact with REST API
• Bachelor's degree in computer science, Cyber Security, a related field, or suitable combination of education, experience and training.

Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers.

By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.