SOAR Playbook Engineer

nccgroup; Manchester; On-site; GBP 70,000 - 100,000; Full time

Job summary

NCC Group in Manchester, United Kingdom, is seeking an MXDR SOAR Engineer to design, develop, and maintain security automation solutions using Splunk SOAR and similar platforms. The role focuses on playbook engineering, Python development, API integrations, and automated incident response workflows.

You will deploy and continually improve MXDR solutions for customers, assess requirements, and collaborate with stakeholders across technical and business functions to ensure secure, resilient

Qualifications

• Experience with MXDR technologies and security monitoring.
• Strong customer-facing and stakeholder engagement skills.
• Experience translating requirements into scalable automations.

Responsibilities

• Design, develop, maintain, and optimise MXDR security automation solutions.
• Lead playbook engineering using Splunk SOAR and similar platforms.
• Collaborate with customers to deploy and improve MXDR solutions.

Skills

Playbook engineering

Python development

API integrations

Incident response

MXDR technologies

Tools

Splunk SOAR

Job description

As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows.

In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers. You assess customer requirements, collaborate with stakeholders across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective.

You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential.

This role requires a broad combination of engineering, consultancy, and customer-facing skills. A strong technical foundation, excellent communication skills, and a passion for continuous learning are essential. We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations.

As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely and in person. As part of a global organisation, proficiency in written and spoken English is required