SOC Automation Engineer

Fynity; Leeds; On-site; GBP 60,000 - 90,000; Full time

Job summary

Fynity is seeking an SOC Automation Engineer focused on Cortex XSOAR to join a growing automation function. You will build and improve automation across SIEM, SOAR and EDR to reduce manual SOC workload and speed incident response across multi-tenant environments.

This role emphasizes turning manual SOC processes into scalable workflows with input into the broader automation roadmap, largely remote with Leeds visits.

Qualifications

• Experience with Cortex XSOAR and SOAR automation.
• Proficiency in Python or PowerShell.
• Experience in SIEM/EDR/SOC environments.
• Familiarity with REST APIs, webhooks and integrations.
• Incident response, triage and containment capabilities.
• UK SC clearance or eligibility required.

Responsibilities

• Turn manual SOC processes into scalable automated workflows.
• Build and improve automation across SIEM, SOAR and EDR.
• Contribute to the wider automation roadmap and strategy.

Skills

Cortex XSOAR

SOAR automation

Python

PowerShell

REST APIs

MITRE ATT&CK

Job description

SOC Automation Engineer / XSOAR

Mostly Remote | Leeds once a quarter | SC Eligible

Great opportunity for an Cortex XSOAR focused security professional to join a growing SOC automation function.

You'll be building and improving automation across SIEM, SOAR and EDR, helping reduce manual SOC workload and accelerate incident response across multi-tenant customer environments.

Looking for experience with:

• Cortex XSOAR / SOAR automation & playbooks
• Python and/or PowerShell
• SIEM, EDR and SOC environments
• REST APIs, webhooks and integrations
• Incident response, triage & containment
• MITRE ATT&CK
• MSSP / multi-tenant environmentsYou must hold or be eligible for UK SC clearance

You'll have the opportunity to take manual SOC processes and turn them into scalable automated workflows, while having input into the wider automation roadmap rather than simply maintaining an existing set of playbooks.

Mainly remote

Leeds around once per quarter