SOAR Playbook Engineer - MXDR Automations & Integrations

NCC Group; Manchester; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Financial & Investment Benefits

Community & Volunteering Programmes

Green Car Scheme

Cycle Scheme

Special Time Off

Family Planning

Job summary

NCC Group in Manchester is seeking a skilled MXDR SOAR Engineer to design, develop, and optimize security automation using Splunk SOAR. You will focus on playbook engineering, Python automation, and API integrations to drive incident response workflows.

You will deploy and continuously improve MXDR solutions for diverse clients, translating customer requirements into scalable automations while collaborating with stakeholders across technical and business functions.

Qualifications

• Hands-on Splunk SOAR engineering experience.
• Advanced Python development with REST APIs.
• Experience building production Splunk SOAR playbooks.
• Strong knowledge of SOC operations and incident response.
• Excellent customer-facing communication.

Responsibilities

• Design, develop, test and maintain Splunk SOAR playbooks.
• Develop custom Python automations and API integrations.
• Build enrichment, investigation, containment and remediation workflows.
• Troubleshoot playbook, connector and integration issues.
• Integrate Splunk SOAR with security, cloud and ITSM platforms.
• Improve automation coverage, reduce analyst effort and lower MTTR.
• Maintain documentation, code repositories and engineering standards.
• Act as the Splunk SOAR SME for customers and internal teams.

Skills

Splunk SOAR

Python

SOAR playbooks

SOC operations

Git

Customer-facing

Defender/CrowdStrike integrations

SIEM knowledge

Tools

Git

Job description

NCC Group in Manchester is seeking a skilled MXDR SOAR Engineer to design, develop, and optimize security automation using Splunk SOAR. You will focus on playbook engineering, Python automation, and API integrations to drive incident response workflows.

You will deploy and continuously improve MXDR solutions for diverse clients, translating customer requirements into scalable automations while collaborating with stakeholders across technical and business functions.