SOC Automation Engineer

Claranet; Leeds; On-site; GBP 65,000 - 75,000; Full time

Job summary

Claranet is seeking a SOC Automation Engineer to enhance the scalability and efficiency of SOC services through advanced engineering and automation. This role emphasizes hands-on work with SIEM, endpoint, and orchestration platforms, particularly Palo Alto XSOAR, aimed at reducing analyst workload and improving incident response.

You will closely collaborate with SOC, engineering, sales, and pre-sales teams. Additionally, responsibilities include designing automation workflows and supporting onboarding and solution design.

Qualifications

• 2+ years in SOC, automation, or cloud security engineering.
• Experience in managed services or multi-tenant environments.
• Hands-on experience with Palo Alto XSOAR.

Responsibilities

• Design and maintain automation workflows across detection and response platforms.
• Deliver cross-platform automation for quick response actions.
• Collaborate with SOC and engineering teams to identify automation opportunities.

Skills

Automation experience

Cloud security knowledge

Scripting skills (Python or PowerShell)

Communication skills

Analytical skills

Experience with APIs/webhooks

Knowledge of threat frameworks

Tools

Palo Alto XSOAR

SIEM platforms

SOAR platforms

EDR platforms

Job description

Salary: £65,000 - 75,000 per year

Requirements

• We require 2+ years of experience in SOC, automation, or cloud security engineering.
• We require experience in managed services or multi-tenant environments.
• We require strong experience building automations across SIEM, SOAR, or EDR platforms.
• We require proficiency in scripting, such as Python or PowerShell.
• We require experience working with APIs, webhooks, and authentication methods.
• We require knowledge of threat frameworks such as MITRE ATT&CK.
• We require understanding of cloud security, identity, and event-driven automation.
• We require strong communication and analytical skills.
• We require hands‑on experience with Palo Alto XSOAR.
• Security clearance, such as NPPV and/or SC, may be required.
• We consider the following certifications desirable: Palo Alto Networks Certified XSOAR Engineer, Palo Alto Networks Certified Security Automation Engineer (PCSAE), and Palo Alto Networks Security Operations Professional.

Responsibilities

• We design, build, and maintain scalable automation workflows across detection and response platforms.
• We deliver cross-platform automation that enables fast, reliable response actions.
• We develop, deploy, and continuously optimise automation for performance, resilience, and coverage.
• We work with SOC and engineering teams to identify automation opportunities.
• We produce clear documentation to support delivery, troubleshooting, and continuous improvement.
• We build and maintain workflows across SIEM, EDR, and SOAR platforms.
• We develop reusable scripts, templates, and components.
• We ensure our solutions support secure, multi-tenant environments.
• We embed automation into SOC workflows.
• We share best practices and support team development.
• We support workshops, onboarding, and solution design where needed.
• We automate repeatable triage and response activities for SOC Analysts.
• We integrate automation into tooling and detections with Platform and Detection Engineers.
• We provide technical input for customer solutions with Sales and Pre‑Sales teams.

Technologies

• Cloud
• Support
• PowerShell
• Python
• Security
• DevOps

More

We are hiring a SOC Automation Engineer to help us improve the scalability and efficiency of our SOC services through hands‑on engineering and automation. Our work spans SIEM, endpoint, and orchestration platforms, with a primary focus on Palo Alto XSOAR, and our goal is to reduce analyst workload, accelerate incident response, and improve decision‑making across customer environments. In this role, you will collaborate closely with SOC, engineering, sales, and pre‑sales teams, and you may also support workshops, onboarding, and solution design where needed.

last updated 27 week of 2026