SOAR Engineer

Remote / 1 day every 2 months in the Midlands head office

The Role:

I am looking for a driven and experienced SOAR Engineer / Security Engineer to join a large nationally recognised brand head quartered in the Midlands.

This role can be primarily remote, with occasional travel to the Midlands head office required, 1 day every couple of months on average.

The SOAR Engineer will ensure that the business can continuously keep up to date with new and emerging threats and ensure that they can detect and respond to them. You will enable the CSOC to detect threats targeting the organisation through enrichment, tuning and automation and also allow the CSOC to conduct their job more effectively.

Key Accountabilities:

• SME for all things detection and security automation across the company.
• Analyse workflows and create automations to improve speed and efficiency.
• Develop tailored automations and enrichments for alerts/incidents across a wide range of security tools.
• Lead the design, development, and engineer new content (playbooks) across security orchestration and response (SOAR) and security information and event management (SIEM) platforms to meet the organisation's strategic objectives and goals
• Assist with managing the Engineering backlog including researching backlog items, updating items, collecting requirements, feedback, etc and coming prepared to backlog refinement
• Conduct in-depth analysis of the existing functionality of the Security Operations Centre, propose and enact improvements to the service

Skills and Experience required:

• Have a high level of ability to create and develop security orchestration and automated response (SOAR).
• Strong proficiency in KQL and detection engineering
• Experience and working knowledge with operating systems - both Linux and Windows platforms
• Extensive knowledge of Azure including Azure functions and Logic Apps.
• Familiarity with programming languages such as Python and PowerShell
• Experience with cloud security tools and platforms (e.g., AWS, Azure, Microsoft 365)
• Experience working in Security Operation Centres, incident response and associated technologies
• Understanding of REST API's and demonstrate ability to develop and interact with REST API
• Bachelor's degree in computer science, Cyber Security, a related field, or suitable combination of education, experience and training.

Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers.