SOAR Developer

Vodafone Group Plc; Lisboa; Presencial; EUR 55 000 - 85 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Mobile plan & discounts

Recognition programs

Well-being program

Digital training platform

Mobility opportunities

Resumo da oferta

Vodafone Group Plc in Portugal is seeking a skilled cybersecurity professional to drive SOAR development and automation playbooks within the Vodafone SOAR infrastructure. You will collaborate with stakeholders to translate requirements into actionable tasks and manage risks and vendors.

Proficiency in Python/JavaScript and experience with Splunk Phantom, Siemplify or IBM Resilient are valued. This hybrid role involves strategic, cross-team collaboration and delivery of measurable security

Qualificações

• Bachelor’s degree or higher in Cyber Security/Information Technology.
• Certifications such as GCIA, GCIH, GCFA, GNFA, CEH, ECSA preferred.
• Strong programming skills in Python, JavaScript or similar.
• Hands-on experience with SOAR platforms (Splunk Phantom, Siemplify, IBM Resilient).
• Knowledge of threat detection, incident response, and SIEM/SOAR tools.
• Understanding of MITRE framework and cyber kill chain.
• Excellent analytical and communication skills.

Responsabilidades

• Drive creation and refinement of automation playbooks in Vodafone SOAR.
• Collaborate with stakeholders to gather requirements and translate into tasks.
• Identify risks and mitigate challenges in SOAR development.
• Manage vendor collaborations for tool integration.
• Liaise between development teams and stakeholders with progress updates.
• Leverage data sources to build cross‑platform SOAR playbooks.
• Use SOAR for metrics collection, analysis and reporting.
• Create and maintain SOAR documentation.
• Collaborate with colleagues internally and externally.
• Operate at a strategic level.

Conhecimentos

Cybersecurity knowledge

Python

JavaScript

SOAR platforms

Threat detection

MITRE framework

Stakeholder comms

English fluency

Formação académica

Bachelor's in IT

Cybersecurity certs

Ferramentas

Splunk Phantom

Siemplify

IBM Resilient

SIEM

Descrição da oferta de emprego

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What you’ll do

• Soar Development – take part in and drive continual creation and refinement of automation playbooks within the Vodafone SOAR infrastructure to improve Cyber Security Operations efficiency and effectiveness.
  • Requirement Analysis – Collaborating with stakeholders to gather and analyse requirements for the Soar and translating them into actionable development tasks;
  • Risk Management – Identifying potential risks and challenges in Soar development projects alongside implementing strategies to mitigate them;
  • Vendor Management – Collaborating with external vendors or partners when necessary for tool integration, support or other aspects of SOAR development;
  • Stakeholder communication – Acting as a liaison between the development team and stakeholders, providing regular updates on project progress, milestones and challenges;
  • Expert at evaluating and making use of multiple data sources to build playbooks across multiple platforms and technologies;
  • Utilise Soar to facilitate metrics collection, analysis and reporting;
  • Create and maintain Soar documentation;
  • Effectively collaborate with colleagues and counterparts internally and externally;
  • Working at a strategic level

Who you are

• Bachelor’s degree or higher in Cyber Security/Information Technology or related field; One or more cyber security certifications such as GCIA, GCIH, GCFA, GNFA, CEH, ECSA preferred;
• Strong understanding of security concepts and practices, along with proficiency in programming languages such as Python, JavaScript or others commonly utilised in Soar development;
• In-depth knowledge and extensive hands‑on experience with Soar platforms such as Splunk Phantom, Siemplify, IBM Resilient or similar tools;
• Knowledge of advanced threat detection and response methodologies alongside tools such as SIEM and SOAR;
• Comprehensive understanding of cybersecurity principles including security operations, incident response and threat intelligence;
• Strong analytical and problem‑solving skills to identify and address complex technical challenges in Soar solution development;
• Excellent familiarity with standard security frameworks such as MITRE, cyber kill chain and APT campaign strategies;
• Proven ability to work efficiently in fast‑paced work environment and manage multiple priorities simultaneously;
• Good interpersonal and communication skills, works effectively as a team player and the ability to communicate technical information to a non‑technical audience;
• Clear demonstration of the Vodafone Spirit behaviours;
• Relevant experience within cyber security and automation;
• Experience of working in a broad range of roles either inside or outside of Vodafone;
• Fluency in English.

What's in it for you

• Hybrid Work Model - Flexible hybrid work model with 8-10 in‑office days per month, managed by team leaders;
• Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
• Recognition - Recognition programs for innovative, creative, high‑potential employees and exemplary behaviors;
• Health and Well‑being - Well‑being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
• Learning - Access to Communities of Practice and a customizable digital training platform with high‑quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
• Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles.

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.