IT & Software

Senior Security Automation & SOAR Engineer

S&P Global

London · Greater London · United Kingdom

Overview

In this role, you will architect and deploy automated security workflows to streamline incident triage, containment, and remediation within a collaborative Cyber Fusion Center. You will integrate diverse security and IT platforms, deploy cloud security infrastructure via IaC, and advance AI-enabled decision support. You’ll work closely with SOC, Detection Engineering, and Incident Response teams to turn operational needs into scalable solutions, delivering measurable automation ROI. This position offers hands-on building, rapid learning from real use cases, and opportunities to mature security automation across the program.

Pay / Benefits
  • Health & Wellness benefits
  • Flexible downtime
  • Continuous learning resources
  • Opportunity for retirement planning and student loan contributions
  • Family-friendly perks
  • Career development and other perks
Responsibilities
  • Design and implement SOAR playbooks and automated workflows to improve SOC efficiency and reduce mean time to respond
  • Develop secure integrations across security, IT, and business platforms using APIs and code
  • Lead cross-functional collaboration to identify automation opportunities and translate needs into technical solutions
  • Deploy cloud infrastructure using IaC with RBAC and disaster recovery support
  • Incorporate Agentic AI and Large Language Models into security workflows
  • Produce executive-level reporting on automation performance and ROI to inform leadership and strategy
Key requirements
  • 5+ years designing and implementing security automation in enterprise environments
  • Hands-on incident response experience with scalable automated workflows
  • Proficiency in Python and experience with YARA, REST API development, and third-party integrations
  • Deep expertise in SIEM (Splunk, Elastic, Sentinel) and SOAR platforms (Phantom, XSOAR, Swimlane), and EDR (CrowdStrike, SentinelOne, Microsoft Defender)
  • Cloud infrastructure deployment experience in AWS with IaC tools (Terraform, CloudFormation, Pulumi)
  • Data manipulation/analysis skills (Pandas, SQL, Elasticsearch)
  • Strong presentation and communication skills
  • Cross-functional collaboration
  • Strategic thinking and ROI focus
  • Python
  • YARA
  • REST APIs

Reference: WJ-747_30307519

Apply now

Continue on the employer's official application - the same link they use for every candidate.

More jobs

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.