Splunk SOAR Engineer: Automation & Security Response

NCC Group; Greater London; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension, Life Assurance, Share Save

Job summary

NCC Group is seeking an experienced Splunk Engineer to design, build, and manage our Splunk SOAR service. You will automate security workflows, develop playbooks, and ensure secure, scalable operations for customer environments.

Work closely with SOC teams, security engineers, and clients to deliver high-quality automation. Strong focus on governance, reliability, and continuous improvement in a fast-paced security context.

Qualifications

• Proven experience as a Splunk Engineer, Splunk SOAR Engineer, or similar security automation role.
• Strong hands-on experience developing and managing Splunk SOAR playbooks.
• Solid understanding of Splunk platform architecture (Search heads, indexers, forwarders) and data ingestion.

Responsibilities

• Own the build, operation, and continuous improvement of the Splunk SOAR service.
• Design, develop, review, and maintain Splunk SOAR playbooks to support security detection, investigation, and response.
• Translate security use cases into automated workflows and test playbooks before production deployment.
• Ensure playbooks follow security engineering best practices and governance.

Skills

Splunk Engineer

SOAR Engineer

Security automation

Splunk SPL

CI/CD

Tools

Git

AWS

Azure

Splunk

Job description

NCC Group is seeking an experienced Splunk Engineer to design, build, and manage our Splunk SOAR service. You will automate security workflows, develop playbooks, and ensure secure, scalable operations for customer environments.

Work closely with SOC teams, security engineers, and clients to deliver high-quality automation. Strong focus on governance, reliability, and continuous improvement in a fast-paced security context.