Threat Detection & SOAR Engineer

National Gas; Warwick; On-site; GBP 65,000 - 100,000; Full time

Benefits offered by this job

Double-match pension

Annual bonus (up to 6%)

26 days holiday + 8 statutory days + 5

additional days

10x salary life assurance

Private healthcare

Car, dental, and technology schemes

Job summary

National Gas is seeking a skilled SOAR Engineer to join the Cyber Threat Detection team in the UK. You will drive security automation, develop playbooks, and ensure detection and response keep pace with evolving threats.

You will work across Linux and Windows environments, leverage Azure Functions and Logic Apps, and collaborate with CSIRT to mature the organization’s security posture through automation and orchestration.

Qualifications

• Strong proficiency in KQL and detection engineering.
• High level of ability to create and develop security orchestration and automated response (SOAR).
• Experience with operating systems – Linux and Windows.
• Extensive knowledge of Azure including Azure functions and Logic Apps.
• Familiarity with Python and PowerShell.
• Experience with cloud security tools and platforms (AWS, Azure, Microsoft 365).
• Experience in Security Operations Centres, incident response and related technologies.
• Understanding of REST APIs and ability to develop and interact with them.
• Bachelor’s degree in Computer Science or Cyber Security or related field.

Responsibilities

• Subject Matter Expert for Threat Detection and security automation across the business.
• Analyse workflows and create automations to improve speed and efficiency.
• Develop tailored automations and enrichments for alerts/incidents across security tools.
• Lead design, development, and engineer new content (playbooks) across SOAR and SIEM platforms.
• Assist with managing the Engineering backlog including research, requirements, and backlog refinement.
• Conduct in-depth analysis of CSIRT functionality and propose improvements to the service.

Skills

KQL

Detection engineering

SOAR development

Linux

Windows

Azure

Azure Functions

Logic Apps

Python

PowerShell

AWS

Microsoft 365

REST APIs

Security Operations Centers

Incident response

Education

Bachelor's degree in Computer Science or Cyber Security

Tools

Azure Functions

Logic Apps

AWS

Microsoft 365

REST APIs

Job description

National Gas is seeking a skilled SOAR Engineer to join the Cyber Threat Detection team in the UK. You will drive security automation, develop playbooks, and ensure detection and response keep pace with evolving threats.

You will work across Linux and Windows environments, leverage Azure Functions and Logic Apps, and collaborate with CSIRT to mature the organization’s security posture through automation and orchestration.