Splunk SOAR Engineer: Automation & Security Response

NCC Group; Greater London; Vor Ort; GBP 65.000 - 90.000; Vollzeit

Benefits dieser Stelle

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension, Life Assurance, Share Save

Zusammenfassung

NCC Group is seeking an experienced Splunk Engineer to design, build, and manage our Splunk SOAR service. You will automate security workflows, develop playbooks, and ensure secure, scalable operations for customer environments.

Work closely with SOC teams, security engineers, and clients to deliver high-quality automation. Strong focus on governance, reliability, and continuous improvement in a fast-paced security context.

Qualifikationen

• Proven experience as a Splunk Engineer, Splunk SOAR Engineer, or similar security automation role.
• Strong hands-on experience developing and managing Splunk SOAR playbooks.
• Solid understanding of Splunk platform architecture (Search heads, indexers, forwarders) and data ingestion.

Aufgaben

• Own the build, operation, and continuous improvement of the Splunk SOAR service.
• Design, develop, review, and maintain Splunk SOAR playbooks to support security detection, investigation, and response.
• Translate security use cases into automated workflows and test playbooks before production deployment.
• Ensure playbooks follow security engineering best practices and governance.

Kenntnisse

Splunk Engineer

SOAR Engineer

Security automation

Splunk SPL

CI/CD

Tools

Git

AWS

Azure

Splunk

Jobbeschreibung

NCC Group is seeking an experienced Splunk Engineer to design, build, and manage our Splunk SOAR service. You will automate security workflows, develop playbooks, and ensure secure, scalable operations for customer environments.

Work closely with SOC teams, security engineers, and clients to deliver high-quality automation. Strong focus on governance, reliability, and continuous improvement in a fast-paced security context.