SOAR Engineer

SOAR Engineer

£65,000 - £75,000

Full Time / Permanent

Remote / 1 day every 2 months in the Midlands head office

The Role:

I am looking for a driven and experienced SOAR Engineer / Security Engineer to join a large nationally recognised brand head quartered in the Midlands.

This role can be primarily remote, with occasional travel to the Midlands head office required, 1 day every couple of months on average.

The SOAR Engineer will ensure that the business can continuously keep up to date with new and emerging threats and ensure that they can detect and respond to them. You will enable the CSOC to detect threats targeting the organisation through enrichment, tuning and automation and also allow the CSOC to conduct their job more effectively.

Key Accountabilities:

SME for all things detection and security automation across the company.

Analyse workflows and create automations to improve speed and efficiency.

Develop tailored automations and enrichments for alerts/incidents across a wide range of security tools.

Lead the design, development, and engineer new content (playbooks) across security orchestration and response (SOAR) and security information and event management (SIEM) platforms to meet the organisation's strategic objectives and goals

Assist with managing the Engineering backlog including researching backlog items, updating items, collecting requirements, feedback, etc and coming prepared to backlog refinement

Conduct in-depth analysis of the existing functionality of the Security Operations Centre, propose and enact improvements to the service

Skills and Experience required:

Have a high level of ability to create and develop security orchestration and automated response (SOAR).

Strong proficiency in KQL and detection engineering

Experience and working knowledge with operating systems - both Linux and Windows platforms

Extensive knowledge of Azure including Azure functions and Logic Apps.

Familiarity with programming languages such as Python and PowerShell

Experience with cloud security tools and platforms (e.g., AWS, Azure, Microsoft 365)

Experience working in Security Operation Centres, incident response and associated technologies

Understanding of REST API's and demonstrate ability to develop and interact with REST API

Bachelor's degree in computer science, Cyber Security, a related field, or suitable combination of education, experience and training.

Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law.

Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers.

By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website

Benefits

bonus and benefits