SOC Automation Engineer: AI-Driven Security Orchestration

Phoenix Software; Pocklington; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

SC clearance support

Job summary

Phoenix Software in the United Kingdom is hiring a SOC Automation Engineer to join our Security Operations Centre and advance our managed security services. This hands-on role designs, develops and maintains security automation workflows, builds integrations with SIEM, SOAR, EDR and cloud platforms, and collaborates with SOC Analysts and service owners to automate investigations and improve customer outcomes.

Hybrid working is supported.

Qualifications

• Experience designing and implementing security automation solutions.
• Strong software development or automation engineering background.
• Experience with Python, JavaScript or similar scripting and development languages.
• Good understanding of REST APIs and systems integration.
• Experience in Security Operations, Incident Response, Threat Engineering or Security Engineering.
• Knowledge of SIEM, SOAR, EDR, IAM and vulnerability management.
• Cloud security knowledge and cloud-based platforms.
• Awareness of AI technologies in security operations.
• Excellent communication and documentation abilities.

Responsibilities

• Design, develop and maintain security automation workflows to support SOC operations.
• Create and optimise automated playbooks for detection, triage, enrichment and response.
• Collaborate with SOC, engineering and service delivery teams to deliver automation solutions.
• Build and maintain integrations with security technologies including SIEM, SOAR, EDR and cloud platforms.
• Leverage APIs and external data sources to enhance security workflows.
• Explore and implement AI-enhanced automation capabilities where appropriate.
• Develop reusable automation components deployable across customer environments.
• Produce and maintain technical documentation and runbooks.
• Monitor performance and reliability of automation solutions; drive improvements.
• Support knowledge sharing and training within the SOC team.
• Contribute to automation standards and best practices.

Skills

Security automation

Automation engineering

Python/JavaScript

REST APIs

Troubleshooting

Communication

Tools

Swimlane

Cortex XSOAR

Tines

SOAR integrations

Job description

Phoenix Software in the United Kingdom is hiring a SOC Automation Engineer to join our Security Operations Centre and advance our managed security services. This hands-on role designs, develops and maintains security automation workflows, builds integrations with SIEM, SOAR, EDR and cloud platforms, and collaborates with SOC Analysts and service owners to automate investigations and improve customer outcomes.

Hybrid working is supported.