SOC Automation Engineer: Scalable Orchestration & Response

Claranet Limited; England; On-site; GBP 60,000 - 90,000; Full time

Job summary

Claranet Limited is seeking an experienced SOC Automation Engineer to design, build, and optimise automation workflows that scale SOC services across SIEM, EDR, and SOAR platforms such as Palo Alto XSOAR. You will reduce analyst workload, accelerate incident response, and enhance decision-making across customer environments.

Key responsibilities include automation development, integration, lifecycle management, collaboration with SOC and engineering teams, documentation, and contributing to

Qualifications

• 2+ years' experience in SOC, automation, or cloud security engineering.
• Experience in managed services or multi-tenant environments.
• Strong experience building automations across SIEM, SOAR, or EDR platforms.
• Proficiency in scripting (e.g., Python, PowerShell).
• Experience working with APIs, webhooks, and authentication methods.
• Knowledge of threat frameworks (e.g., MITRE ATT&CK).
• Understanding of cloud security, identity, and event-driven automation.
• Strong communication and analytical skills.

Responsibilities

• Automation Development: Design, build, and maintain scalable automation workflows across detection and response platforms.
• Integration & Orchestration: Deliver cross-platform automation enabling fast, reliable response actions.
• Lifecycle Management: Develop, deploy, and optimise automation for performance and resilience.
• Collaboration & Requirements Gathering: Work with SOC and engineering teams to identify automation opportunities.
• Documentation: Produce clear documentation to support delivery and troubleshooting.
• Automation Planning: Contribute to automation roadmaps, threat modelling, and use case development.
• Pre-Sales Support: Assist with demos, scoping, and proof-of-value activities where required.
• Stakeholder Collaboration: Embed automation into SOC workflows and share best practices.

Skills

SOC security

Automation

Scripting (Python)

Scripting (PowerShell)

APIs & Webhooks

MITRE ATT&CK

Cloud Security

Multi-tenant

SIEM/SOAR/EDR

Tools

Palo Alto XSOAR

SIEM

SOAR

EDR

REST APIs

Job description

Claranet Limited is seeking an experienced SOC Automation Engineer to design, build, and optimise automation workflows that scale SOC services across SIEM, EDR, and SOAR platforms such as Palo Alto XSOAR. You will reduce analyst workload, accelerate incident response, and enhance decision-making across customer environments.

Key responsibilities include automation development, integration, lifecycle management, collaboration with SOC and engineering teams, documentation, and contributing to